Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/56F82E1E873F11F1AA897DAACE1D38B0.roa
File:                     56F82E1E873F11F1AA897DAACE1D38B0.roa (raw, json)
Hash identifier:          5SngY443yVW/ZMYpRFXUaGXODvQd4Zc6q0nrCzx+rTY=
Subject key identifier:   C2:6E:13:CF:95:6E:BE:73:DC:E0:56:DD:15:E0:F2:34:D7:A2:C3:40
Certificate issuer:       /CN=F367B216AF/serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Certificate serial:       09AA
Authority key identifier: 2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/56F82E1E873F11F1AA897DAACE1D38B0.roa
Signing time:             Fri 24 Jul 2026 09:09:14 +0000
ROA not before:           Fri 24 Jul 2026 09:09:09 +0000
ROA not after:            Wed 31 Dec 2036 09:09:09 +0000
asID:                     3741
IP address blocks:        196.4.160.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 31 Jul 2026 00:07:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2474 (0x9aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367B216AF, serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
        Validity
            Not Before: Jul 24 09:09:09 2026 GMT
            Not After : Dec 31 09:09:09 2036 GMT
        Subject: CN=6a632bba-5d1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ed:f8:95:eb:c5:1e:f1:03:5c:d9:66:61:05:
                    97:10:27:a7:ec:99:d7:00:b9:c5:31:2e:1f:05:d2:
                    13:06:16:4c:6f:97:eb:80:fe:b5:92:3a:c9:ef:a8:
                    ed:5b:8d:24:0f:14:44:8d:a6:4f:e6:94:0c:e7:3b:
                    8b:e3:03:d5:6f:ee:ee:26:ed:50:48:02:44:9b:31:
                    06:0d:4d:48:69:7e:5f:e8:d7:56:4c:33:29:be:bf:
                    73:f5:4a:b2:35:34:fc:18:ef:c4:ac:2e:0d:2d:8c:
                    68:55:8f:7a:6b:a8:bf:66:1e:16:d5:2c:1e:30:8b:
                    c5:67:51:7d:5b:07:49:2f:09:3c:60:b4:ea:88:ae:
                    a8:49:44:9a:10:eb:80:bb:b1:4e:5d:1f:20:cd:7a:
                    38:e0:f0:e6:7d:1a:d1:6c:06:54:d8:cf:db:d0:df:
                    f2:0c:f5:18:5f:bd:f3:16:71:f5:28:db:6a:83:29:
                    5b:e1:8c:2a:bc:f0:f5:c5:a4:bd:fd:f6:72:16:c0:
                    36:f5:0c:3d:20:be:b4:c0:4e:f5:cd:ea:81:3b:3d:
                    81:87:be:bc:03:f5:dd:ed:2f:d1:e8:60:b1:9c:20:
                    ab:40:42:90:7f:a0:2f:8a:f5:be:46:9b:37:d9:30:
                    82:b0:00:df:ab:fe:24:25:fb:9f:20:14:29:00:8e:
                    2a:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:6E:13:CF:95:6E:BE:73:DC:E0:56:DD:15:E0:F2:34:D7:A2:C3:40
            X509v3 Authority Key Identifier:
                keyid:2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/56F82E1E873F11F1AA897DAACE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.4.160.0/23

    Signature Algorithm: sha256WithRSAEncryption
         67:bf:2f:52:55:f9:cc:d3:99:8e:12:70:e6:10:22:08:37:f5:
         70:e5:07:78:23:ca:05:01:2f:f0:03:7f:d1:28:8c:1b:af:f3:
         f6:81:4a:9f:ad:01:fc:17:4a:60:bf:26:d2:83:5c:b9:e4:68:
         30:3a:c1:f9:90:78:d2:e9:25:3f:4d:3f:e8:c9:d4:fb:3b:94:
         6e:ac:93:f5:25:9f:79:d4:9f:2f:19:24:30:48:dd:e8:a4:72:
         ca:58:25:c2:f3:66:73:44:28:50:a3:b6:74:61:8b:52:57:6c:
         60:89:36:76:c2:3f:77:ce:5c:d1:d4:13:1a:2b:c4:a7:e4:3b:
         47:82:31:80:b1:6c:ed:18:ba:60:ea:1e:88:30:a9:ca:22:64:
         4b:ef:6e:34:e2:93:fa:3e:6a:2e:ea:0c:54:fd:16:14:d0:e3:
         df:39:fa:0e:1f:16:01:bc:e9:43:bb:6a:3f:80:69:83:bf:c8:
         ba:08:fc:2e:97:1d:f1:6d:66:cc:b0:45:c1:68:44:2b:c3:85:
         f9:b0:da:03:70:df:48:1f:a9:b0:e5:73:ae:f8:f2:c3:d1:ab:
         17:f8:44:99:51:7f:c8:30:3b:d9:41:45:70:4a:f2:9c:09:cd:
         23:d7:24:47:9a:41:31:5e:80:f9:ff:06:96:72:b2:cf:79:ea:
         9c:e3:27:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:27:26 2026 by rpki-client