Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/348608D48A4511F1B7909D1ACF1D38B0.roa
File:                     348608D48A4511F1B7909D1ACF1D38B0.roa (raw, json)
Hash identifier:          bTsyMSJ9AGxaLnr15//My4xyTfYU4xOgd8A/ZOKcpRw=
Subject key identifier:   28:80:12:23:E6:43:42:39:76:68:56:4C:E2:B1:D9:13:AF:B5:7B:BD
Certificate issuer:       /CN=F3682104AF/serialNumber=8B1026953ECF7C4CE139FE9A59BDD7228A153544
Certificate serial:       097B
Authority key identifier: 8B:10:26:95:3E:CF:7C:4C:E1:39:FE:9A:59:BD:D7:22:8A:15:35:44
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ixAmlT7PfEzhOf6aWb3XIooVNUQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/348608D48A4511F1B7909D1ACF1D38B0.roa
Signing time:             Tue 28 Jul 2026 05:28:47 +0000
ROA not before:           Tue 28 Jul 2026 05:28:43 +0000
ROA not after:            Fri 31 Jul 2043 05:28:43 +0000
asID:                     198949
IP address blocks:        105.160.0.0/13 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/ixAmlT7PfEzhOf6aWb3XIooVNUQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/ixAmlT7PfEzhOf6aWb3XIooVNUQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ixAmlT7PfEzhOf6aWb3XIooVNUQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 30 Jul 2026 06:39:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2427 (0x97b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682104AF, serialNumber=8B1026953ECF7C4CE139FE9A59BDD7228A153544
        Validity
            Not Before: Jul 28 05:28:43 2026 GMT
            Not After : Jul 31 05:28:43 2043 GMT
        Subject: CN=6a683e0f-596e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e6:12:5f:25:ee:69:e0:e7:89:e4:87:17:49:
                    3a:8f:a6:93:ca:3c:77:87:59:d4:72:1c:a2:36:04:
                    8c:9d:9f:f0:cb:c9:1a:d6:fe:fd:98:eb:b2:b0:f3:
                    97:4b:f0:ed:88:4a:39:e6:89:cb:a9:fc:71:9e:e1:
                    6d:0f:94:42:7f:3c:3d:c4:16:63:06:b0:5e:4b:ab:
                    22:21:d9:a6:70:95:35:18:ce:a2:d5:e2:c4:db:24:
                    d1:12:82:14:0f:5e:3b:60:4b:4a:7e:a2:26:ed:59:
                    94:88:91:d3:d8:7d:1c:3e:97:a4:1c:61:45:8c:ee:
                    d4:52:d9:1a:d3:2f:42:bc:dd:b7:7c:b2:1f:30:2b:
                    a0:11:0f:8f:58:6e:6f:59:94:5e:c5:af:2f:49:39:
                    69:19:1a:d8:d0:ab:7b:7b:5d:71:4d:7f:22:46:31:
                    c0:4a:4d:be:1f:18:61:59:82:bb:cf:3c:c8:c6:87:
                    da:9e:d9:0e:45:90:db:e6:76:7a:cf:ca:2f:5e:ee:
                    9f:e3:1c:6a:3a:bf:65:82:16:a9:82:8d:76:ef:99:
                    75:d2:76:2b:50:4f:d2:d5:8d:c6:ae:08:ca:fe:94:
                    82:09:ca:09:ac:85:35:c7:b8:73:0f:db:51:ed:75:
                    7c:c3:d7:32:e1:fa:69:16:ae:94:ab:cf:0b:7e:8c:
                    ed:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:80:12:23:E6:43:42:39:76:68:56:4C:E2:B1:D9:13:AF:B5:7B:BD
            X509v3 Authority Key Identifier:
                keyid:8B:10:26:95:3E:CF:7C:4C:E1:39:FE:9A:59:BD:D7:22:8A:15:35:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/ixAmlT7PfEzhOf6aWb3XIooVNUQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ixAmlT7PfEzhOf6aWb3XIooVNUQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/348608D48A4511F1B7909D1ACF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  105.160.0.0/13

    Signature Algorithm: sha256WithRSAEncryption
         10:1f:46:0c:bb:02:a5:0d:e3:2e:46:30:05:4d:e0:f2:86:6c:
         1c:48:d0:7e:d4:5c:80:b3:70:42:08:a9:a3:f3:bb:d0:7b:21:
         d6:a8:08:53:b2:5f:f9:39:f9:60:0a:14:16:17:68:fc:3f:63:
         04:16:81:a9:68:db:41:3e:be:d6:b0:cf:b2:c7:cc:d9:5b:45:
         69:99:40:33:68:e6:e4:e2:5c:27:86:0e:98:82:45:5c:ba:81:
         c6:f5:19:f6:4c:26:b5:b5:7d:6a:83:60:f2:ad:2d:79:59:47:
         6d:61:0d:67:d7:da:82:ed:6d:ce:9b:29:5b:b4:48:76:dc:37:
         5a:d8:79:df:45:65:70:11:88:b7:ef:8b:88:8a:61:47:fd:88:
         d3:23:fb:57:dd:05:a4:98:be:9a:7e:5e:96:04:5c:c2:f5:4c:
         ad:0f:eb:95:94:89:7e:d9:9a:d9:f9:58:84:0a:cc:11:8a:8d:
         04:39:38:cf:54:06:22:71:3c:24:16:1c:6f:9e:6a:05:45:da:
         50:05:71:d1:d3:61:5c:af:9c:42:b3:81:a4:2e:1f:34:dc:7a:
         c2:79:1b:f8:47:43:41:7d:ea:97:d5:67:b1:69:d6:00:11:77:
         87:c8:6b:60:62:fd:d9:db:94:55:6e:e5:d9:1b:6c:99:c7:d2:
         40:07:16:ce
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgICCXswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODIxMDRBRjExMC8GA1UEBRMoOEIxMDI2OTUzRUNGN0M0Q0UxMzlGRTlBNTlCREQ3
MjI4QTE1MzU0NDAeFw0yNjA3MjgwNTI4NDNaFw00MzA3MzEwNTI4NDNaMBgxFjAU
BgNVBAMTDTZhNjgzZTBmLTU5NmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC+5hJfJe5p4OeJ5IcXSTqPppPKPHeHWdRyHKI2BIydn/DLyRrW/v2Y67Kw
85dL8O2ISjnmicup/HGe4W0PlEJ/PD3EFmMGsF5LqyIh2aZwlTUYzqLV4sTbJNES
ghQPXjtgS0p+oibtWZSIkdPYfRw+l6QcYUWM7tRS2RrTL0K83bd8sh8wK6ARD49Y
bm9ZlF7Fry9JOWkZGtjQq3t7XXFNfyJGMcBKTb4fGGFZgrvPPMjGh9qe2Q5FkNvm
dnrPyi9e7p/jHGo6v2WCFqmCjXbvmXXSditQT9LVjcauCMr+lIIJygmshTXHuHMP
21HtdXzD1zLh+mkWrpSrzwt+jO37AgMBAAGjggKkMIICoDAdBgNVHQ4EFgQUKIAS
I+ZDQjl2aFZM4rHZE6+1e70wHwYDVR0jBBgwFoAUixAmlT7PfEzhOf6aWb3XIooV
NUQwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyMTA0LzA5Q0NCOTRDQTc2MzExRUFCQkMxOTExQ0Y4QUVBMjI4L2l4QW1s
VDdQZkV6aE9mNmFXYjNYSW9vVk5VUS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2l4QW1sVDdQZkV6aE9mNmFXYjNYSW9vVk5VUS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyMTA0LzA5Q0NCOTRDQTc2MzExRUFCQkMxOTExQ0Y4
QUVBMjI4LzM0ODYwOEQ0OEE0NTExRjFCNzkwOUQxQUNGMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwNpoDANBgkqhkiG9w0BAQsF
AAOCAQEAEB9GDLsCpQ3jLkYwBU3g8oZsHEjQftRcgLNwQgipo/O70Hsh1qgIU7Jf
+Tn5YAoUFhdo/D9jBBaBqWjbQT6+1rDPssfM2VtFaZlAM2jm5OJcJ4YOmIJFXLqB
xvUZ9kwmtbV9aoNg8q0teVlHbWENZ9fagu1tzpspW7RIdtw3Wth530VlcBGIt++L
iIphR/2I0yP7V90FpJi+mn5elgRcwvVMrQ/rlZSJftma2flYhArMEYqNBDk4z1QG
InE8JBYcb55qBUXaUAVx0dNhXK+cQrOBpC4fNNx6wnkb+EdDQX3ql9VnsWnWABF3
h8hrYGL92duUVW7l2RtsmcfSQAcWzg==
-----END CERTIFICATE-----
Generated at Tue Jul 28 20:08:35 2026 by rpki-client