Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/4AE7B36E61D911F195598BE4CE1D38B0.roa
File:                     4AE7B36E61D911F195598BE4CE1D38B0.roa (raw, json)
Hash identifier:          56OEKZAABtGHD9szLU3RyQrbwVu4SMLYjqm5Lme7nW8=
Subject key identifier:   B3:1A:AA:0B:D6:B0:47:8C:6D:2C:0D:56:B4:F2:A7:F0:C8:6D:59:0F
Certificate issuer:       /CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Certificate serial:       0994
Authority key identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/4AE7B36E61D911F195598BE4CE1D38B0.roa
Signing time:             Sat 06 Jun 2026 18:55:32 +0000
ROA not before:           Sat 06 Jun 2026 18:55:27 +0000
ROA not after:            Tue 30 Jun 2026 18:55:27 +0000
asID:                     22724
IP address blocks:        102.177.160.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 15 Jun 2026 00:07:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2452 (0x994)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367DFA4AF, serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
        Validity
            Not Before: Jun  6 18:55:27 2026 GMT
            Not After : Jun 30 18:55:27 2026 GMT
        Subject: CN=6a246d24-2fe2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:21:b0:a5:b7:00:df:4e:80:72:52:f2:4a:6c:
                    98:12:cc:a6:76:e5:c4:18:0a:3c:ec:09:d5:89:e0:
                    26:f9:91:b1:96:d3:d7:54:c2:ee:1a:c6:49:81:08:
                    55:9b:ba:19:66:2f:df:74:12:5a:84:1e:4e:1d:8a:
                    20:c8:f4:b6:33:6a:7e:d3:80:b2:38:33:a2:74:1e:
                    4f:d3:e3:98:53:07:6d:7e:ba:f5:2b:9f:47:d6:2a:
                    93:ba:7a:d0:b8:c6:76:58:dd:b3:13:bf:f8:8c:49:
                    88:b2:2b:be:92:88:07:1a:60:f0:69:2f:c3:6c:f6:
                    f7:7b:fd:24:9d:25:17:b1:a1:bc:89:00:35:fa:e7:
                    91:90:23:16:6b:44:cb:51:8b:2d:fe:59:5d:9b:fe:
                    65:e9:e6:0e:d4:c5:52:22:db:66:75:43:2d:bb:e4:
                    75:67:ae:7b:9d:31:cd:25:42:75:fa:f1:1a:95:a5:
                    8f:72:4e:72:14:f0:80:bb:f7:c9:91:da:65:9b:30:
                    6b:be:16:8b:77:d4:2b:90:28:87:20:91:e2:77:79:
                    67:13:29:c3:18:26:c9:46:11:6d:ac:dd:5a:82:cd:
                    50:3b:41:23:51:4d:47:03:62:60:68:38:0a:68:16:
                    da:b9:91:69:4b:5a:0e:e9:59:05:cb:4e:ce:65:e9:
                    40:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:1A:AA:0B:D6:B0:47:8C:6D:2C:0D:56:B4:F2:A7:F0:C8:6D:59:0F
            X509v3 Authority Key Identifier:
                keyid:97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/4AE7B36E61D911F195598BE4CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.177.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         14:24:3c:c7:d7:98:47:ef:19:c5:f7:92:79:14:bc:b1:33:5f:
         72:49:9f:d0:a2:0e:94:7a:2b:90:ff:5d:9a:04:93:2a:04:50:
         0d:a6:8b:02:64:f5:a6:81:e1:12:9c:bd:b2:4d:37:a9:24:31:
         3b:5b:10:63:41:10:f2:62:49:ed:96:09:d3:94:83:c2:08:bd:
         18:e6:ee:4d:73:fc:8a:23:37:bc:8a:5c:93:e7:72:30:fd:34:
         22:66:31:0c:a1:3c:3c:d2:72:70:a8:92:9a:18:28:72:5f:c9:
         48:7f:ce:f2:d3:26:60:44:dc:9e:2e:c2:5b:b5:66:4a:ce:00:
         b5:c7:88:cd:d2:bc:b5:63:f3:c4:37:a4:18:d6:d2:b1:69:d8:
         b5:81:07:8c:40:62:65:f4:6f:4a:b5:ba:2f:c8:24:c8:3d:2e:
         83:46:eb:e1:f6:ff:ed:b6:e2:f3:32:61:dd:51:b2:e4:92:42:
         ee:3a:fd:06:1c:74:e4:67:50:d3:a1:ed:53:e9:cf:34:9a:fd:
         d3:d7:66:79:86:49:77:10:45:64:a8:43:6c:f1:05:87:4d:a6:
         2c:31:d8:ac:23:ed:e2:87:08:60:4d:72:34:85:c3:be:7f:7a:
         7f:be:5f:3d:c7:ce:be:6e:bd:24:03:dd:05:35:a1:13:df:71:
         d7:c5:7c:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:34:07 2026 by rpki-client