Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/FA516C08336911F193F8F304CF1D38B0.roa
File:                     FA516C08336911F193F8F304CF1D38B0.roa (raw, json)
Hash identifier:          qJhkiw1CuPJJ+LZ9IaRPga96c1/QTalcB8pp7a4aKYw=
Subject key identifier:   2D:93:62:32:8C:B0:1E:9F:EE:3D:F3:23:8E:22:E2:02:31:9C:42:D9
Certificate issuer:       /CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Certificate serial:       092C
Authority key identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/FA516C08336911F193F8F304CF1D38B0.roa
Signing time:             Wed 08 Apr 2026 16:42:49 +0000
ROA not before:           Wed 08 Apr 2026 16:42:44 +0000
ROA not after:            Thu 30 Apr 2026 16:42:44 +0000
asID:                     22724
IP address blocks:        102.177.160.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Apr 2026 02:03:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2348 (0x92c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367DFA4AF, serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
        Validity
            Not Before: Apr  8 16:42:44 2026 GMT
            Not After : Apr 30 16:42:44 2026 GMT
        Subject: CN=69d68589-9921
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e7:73:4e:42:3e:e4:6f:93:b5:1b:14:65:11:
                    af:23:27:44:74:84:7a:dd:8b:93:a1:94:89:1e:64:
                    67:4c:c9:9f:00:a3:ce:3a:6d:3b:f1:46:33:bf:10:
                    b0:31:a2:0a:b7:b6:48:81:d9:f8:28:6b:55:b2:10:
                    a0:e2:0e:58:96:6b:63:9c:43:c9:d5:88:37:50:96:
                    75:a4:39:0d:b7:5c:9e:23:8b:62:be:3c:90:a8:ae:
                    bc:42:3e:56:d5:52:65:ae:cd:48:ff:e6:ef:0a:c7:
                    c0:c4:31:d1:07:14:98:28:aa:43:af:3b:37:cf:72:
                    d1:cd:60:40:7f:f7:bc:41:8b:73:9a:c9:40:4a:13:
                    7f:87:6b:e7:6c:85:2f:18:79:09:13:38:83:c6:61:
                    55:9d:e1:3b:c2:1d:76:fe:07:50:1c:e7:3c:14:af:
                    93:5c:72:ca:38:19:34:65:a0:47:51:21:29:9e:15:
                    a7:1b:f0:97:af:70:f7:af:96:2b:3e:d1:b8:72:35:
                    e7:49:9d:a8:32:40:59:55:21:49:7b:2b:57:16:7a:
                    13:16:bc:90:f4:3a:b2:32:58:aa:6d:0a:bb:7a:a8:
                    c7:1a:70:f6:8b:7c:a6:4a:f8:3f:4a:4d:3d:93:c6:
                    f7:99:85:ea:93:e5:58:c9:32:08:f9:c8:1e:58:5f:
                    29:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:93:62:32:8C:B0:1E:9F:EE:3D:F3:23:8E:22:E2:02:31:9C:42:D9
            X509v3 Authority Key Identifier:
                keyid:97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/FA516C08336911F193F8F304CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.177.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         b3:a6:08:14:85:2c:bf:2f:ec:8c:f3:b4:d2:4c:3d:5d:cf:80:
         f9:72:ea:6b:54:43:91:1d:78:b9:0f:36:84:20:13:04:34:f3:
         43:b3:ce:f0:ea:12:8a:77:ad:51:ee:60:e2:71:1a:ab:6f:25:
         55:72:dc:00:e0:8b:b7:9f:34:e4:bc:06:f6:56:eb:26:d7:b1:
         f6:ab:31:d0:0a:ce:0b:8e:9b:70:3f:54:a1:09:40:e1:45:d9:
         77:ab:ee:37:fd:d3:c7:e5:e1:03:fb:d6:81:a8:64:99:46:9a:
         c6:29:46:8c:a9:e4:50:b5:1e:5e:f1:99:31:08:e9:fe:f0:f0:
         9f:7b:43:60:0a:1a:5c:f0:05:fb:dd:73:b6:9c:08:e2:82:d0:
         b5:0b:8a:ae:2f:74:89:14:aa:90:3f:b1:89:1e:3b:0c:27:9c:
         04:5a:52:37:f1:48:48:86:eb:56:6f:eb:a7:3c:ff:74:88:a2:
         27:83:8a:5b:b1:e1:e8:07:10:33:ef:aa:61:c8:bc:28:50:2d:
         43:2c:2b:75:e0:ae:fc:43:57:e0:d5:33:af:fe:38:ad:f5:56:
         81:ef:25:96:96:79:7b:84:09:29:b7:b9:f0:60:72:90:dc:d1:
         e2:e3:80:f2:07:cc:db:7e:fb:ee:d4:60:8d:16:9e:a7:e9:a6:
         7a:98:a8:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:29:31 2026 by rpki-client