Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/CD47C9C2336A11F192162D09CF1D38B0.roa
File:                     CD47C9C2336A11F192162D09CF1D38B0.roa (raw, json)
Hash identifier:          YmVO0EyKzEqe+dLK8ipWG+xdRrEJzyfF4LQ1DdIZz3Y=
Subject key identifier:   C0:D8:D9:F0:CC:7E:96:79:D2:76:E1:95:B3:40:34:A1:4A:F8:96:79
Certificate issuer:       /CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Certificate serial:       0934
Authority key identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/CD47C9C2336A11F192162D09CF1D38B0.roa
Signing time:             Wed 08 Apr 2026 16:48:43 +0000
ROA not before:           Wed 08 Apr 2026 16:48:39 +0000
ROA not after:            Thu 30 Apr 2026 16:48:39 +0000
asID:                     22724
IP address blocks:        102.177.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Apr 2026 02:03:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2356 (0x934)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367DFA4AF, serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
        Validity
            Not Before: Apr  8 16:48:39 2026 GMT
            Not After : Apr 30 16:48:39 2026 GMT
        Subject: CN=69d686eb-711e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:39:6f:0f:5b:4c:ff:94:8a:b4:b8:69:f0:cd:
                    8c:aa:f3:db:26:3d:4e:d9:15:90:92:9e:59:45:b0:
                    b7:5b:6c:f3:d2:37:25:f5:e5:45:ed:ce:69:16:07:
                    93:62:36:8c:32:b3:70:3a:da:ea:11:1f:40:7b:bc:
                    f0:5c:e5:fd:66:86:c4:8e:73:8e:9f:0d:0c:4e:1c:
                    91:e3:d9:88:37:99:68:6a:6c:14:f8:c1:d7:b8:a7:
                    75:6b:bb:ed:56:51:e0:08:ea:14:3e:64:be:92:f3:
                    d3:06:c0:cd:b2:af:67:1a:7f:e6:6d:20:72:83:5c:
                    6f:34:f2:a3:d1:0b:9b:01:8e:75:9d:a8:76:6b:ec:
                    8b:92:d7:f2:db:ac:cf:d0:e4:53:dc:5c:73:e7:06:
                    3d:5c:b3:10:97:6b:a2:a4:04:59:7a:96:21:f5:8e:
                    89:9a:a7:c0:ae:0d:a7:80:bc:5a:9c:ca:1c:d1:4d:
                    58:b2:ae:3d:9c:ac:3a:86:7f:9d:39:23:fe:f4:47:
                    33:f5:d1:0d:d7:7d:2c:66:df:52:26:c0:70:7f:42:
                    8a:4b:bf:0c:db:94:a2:c0:7e:0c:b6:18:a3:7e:26:
                    14:44:1a:39:5e:f5:ab:34:d8:2e:aa:49:cd:39:82:
                    bb:73:ce:b1:7c:29:05:13:7b:d1:4c:50:e4:58:a1:
                    6c:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:D8:D9:F0:CC:7E:96:79:D2:76:E1:95:B3:40:34:A1:4A:F8:96:79
            X509v3 Authority Key Identifier:
                keyid:97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/CD47C9C2336A11F192162D09CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.177.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:af:3c:ca:62:ae:62:36:2e:4a:89:aa:ad:a2:7c:63:fe:c0:
         a9:e2:2e:b0:1b:fe:8b:1d:9d:fc:82:68:d0:b5:3a:c5:66:85:
         3b:b7:8d:19:1d:5a:58:36:09:54:7a:c4:33:9d:b3:8c:25:2d:
         2d:ba:4f:9f:c1:2a:b4:13:f8:ad:18:8e:f1:a9:31:fc:68:02:
         da:f1:b0:1c:3a:9f:2c:52:36:55:7b:48:8b:54:1c:b1:35:37:
         76:eb:ba:a9:df:1b:fa:76:ad:ef:31:62:c1:70:eb:f3:46:bd:
         ee:17:6f:d7:7b:b3:68:13:e4:c7:6e:e4:cf:ca:c8:18:0e:b8:
         33:0a:05:ab:85:f0:b7:b6:7f:9c:15:f8:2c:16:78:65:7b:7e:
         20:d9:c8:cb:77:5f:7b:f3:f9:f9:40:14:b9:39:47:49:11:be:
         d6:77:db:ea:d1:1f:d2:dd:80:21:e7:bb:79:4b:1a:da:2f:63:
         45:4a:2c:96:4c:fe:1f:3f:09:0e:84:06:fc:2e:75:05:37:7c:
         4d:64:c8:8b:d4:44:92:0f:fb:c8:55:d9:d5:d6:c6:c2:a2:55:
         c0:83:fb:a0:b0:b9:46:bf:31:5c:ad:53:9b:fa:a6:d2:b3:08:
         f9:67:9a:79:7e:1e:e9:b6:f1:2a:5c:83:78:46:58:3b:48:dd:
         7a:47:75:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:29:32 2026 by rpki-client