Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369E9B3/EE40A58A558C11EFAFCCFBA0762E951A/8036BCAE2A7F11F19DD1749ADAE4EC9C.roa
File:                     8036BCAE2A7F11F19DD1749ADAE4EC9C.roa (raw, json)
Hash identifier:          Br53n/pGReLNyDpsiSvYoijagBzl59OaUoRNTDvz4ms=
Subject key identifier:   74:4F:C8:4B:63:0A:24:2A:A1:F4:20:FF:B6:96:2C:3A:5D:A7:F3:37
Certificate issuer:       /CN=F369E9B3AF/serialNumber=F574B16BA86AD96E00DEDACD6341F9A824EA47A7
Certificate serial:       027C
Authority key identifier: F5:74:B1:6B:A8:6A:D9:6E:00:DE:DA:CD:63:41:F9:A8:24:EA:47:A7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/9XSxa6hq2W4A3trNY0H5qCTqR6c.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369E9B3/EE40A58A558C11EFAFCCFBA0762E951A/8036BCAE2A7F11F19DD1749ADAE4EC9C.roa
Signing time:             Sat 28 Mar 2026 08:24:13 +0000
ROA not before:           Sat 28 Mar 2026 08:24:08 +0000
ROA not after:            Wed 31 Mar 2027 08:24:08 +0000
asID:                     329472
IP address blocks:        102.202.236.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369E9B3/EE40A58A558C11EFAFCCFBA0762E951A/9XSxa6hq2W4A3trNY0H5qCTqR6c.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369E9B3/EE40A58A558C11EFAFCCFBA0762E951A/9XSxa6hq2W4A3trNY0H5qCTqR6c.mft
                          rsync://rpki.afrinic.net/repository/afrinic/9XSxa6hq2W4A3trNY0H5qCTqR6c.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Apr 2026 04:22:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 636 (0x27c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369E9B3AF, serialNumber=F574B16BA86AD96E00DEDACD6341F9A824EA47A7
        Validity
            Not Before: Mar 28 08:24:08 2026 GMT
            Not After : Mar 31 08:24:08 2027 GMT
        Subject: CN=69c7902d-086d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:80:3a:8a:a7:c8:17:76:90:26:a7:13:b1:25:
                    5c:9a:49:1d:51:ce:ab:10:bf:6f:2b:a1:d7:17:09:
                    e6:d0:0e:0a:7d:92:34:d1:2a:51:49:23:63:c5:47:
                    91:2d:eb:8e:1b:b4:f8:ac:17:a6:d5:3b:0d:47:f6:
                    e6:1e:e4:ab:8b:79:f1:bb:42:f2:59:e1:1c:57:eb:
                    22:50:e2:a1:24:80:c6:e9:d6:7f:d8:06:52:e5:11:
                    ab:bc:4c:10:39:a4:ac:08:b3:3f:12:1e:b0:0f:dd:
                    a2:6c:1f:62:43:93:85:6a:5d:03:8b:91:86:4b:df:
                    5c:ea:c7:2c:16:20:02:6a:c2:71:3d:56:0e:d6:c9:
                    59:7b:08:1c:be:fb:d2:d3:e5:02:09:37:ca:43:14:
                    05:19:7f:90:f5:cd:86:2f:ef:0e:ee:1b:7c:e6:70:
                    f2:44:65:9f:a9:c2:8e:af:ba:8d:70:29:89:52:c9:
                    f9:2b:55:7b:5b:b4:8d:74:7f:af:b1:7d:1d:ee:90:
                    85:54:e7:71:76:87:23:6b:fa:8e:28:ab:3e:8f:21:
                    e0:96:08:e5:a2:b3:f7:e4:ea:f6:ca:71:f0:3f:6b:
                    2c:f9:7d:72:32:42:0d:d8:bb:b9:ae:d1:8d:2a:4c:
                    d6:cc:51:8f:21:d4:18:ef:0a:a1:1f:85:f3:1c:a6:
                    8e:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:4F:C8:4B:63:0A:24:2A:A1:F4:20:FF:B6:96:2C:3A:5D:A7:F3:37
            X509v3 Authority Key Identifier:
                keyid:F5:74:B1:6B:A8:6A:D9:6E:00:DE:DA:CD:63:41:F9:A8:24:EA:47:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369E9B3/EE40A58A558C11EFAFCCFBA0762E951A/9XSxa6hq2W4A3trNY0H5qCTqR6c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9XSxa6hq2W4A3trNY0H5qCTqR6c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369E9B3/EE40A58A558C11EFAFCCFBA0762E951A/8036BCAE2A7F11F19DD1749ADAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.202.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3b:82:a5:64:7e:19:61:fe:c1:5c:85:b1:a2:52:b9:c5:68:a4:
         0b:d8:f7:38:4f:c0:8f:e8:8a:77:9a:d2:b6:16:18:0e:bf:9d:
         56:b6:6e:b3:39:a3:3e:90:a0:f7:86:0b:5f:15:ca:70:f3:5f:
         75:94:3a:b0:22:5e:ed:66:28:de:b2:18:5a:95:00:56:d8:e1:
         60:f0:de:72:6d:1c:8e:d2:0f:1e:10:ae:3b:fd:24:fb:23:6c:
         41:c2:3b:b9:71:a8:48:a6:12:b2:c0:c5:c2:3e:3c:f9:9a:bd:
         a6:77:4f:37:15:37:ca:67:dc:6e:48:40:62:a0:22:8f:18:f8:
         32:11:c8:7d:9d:48:a3:55:f3:62:8f:9b:de:4b:fe:e4:c6:54:
         71:b3:9c:48:15:1f:8a:d5:77:d3:42:63:1d:d2:94:b2:ab:4b:
         38:29:ca:63:eb:6b:8f:4a:66:ff:33:a2:17:a2:be:42:74:82:
         8f:33:77:48:34:df:23:b4:2c:00:3b:e6:1e:8d:20:14:87:9a:
         30:f5:8f:2c:e5:2f:a8:a7:7b:45:57:d0:24:17:eb:39:8e:3b:
         ce:f5:c2:69:92:e0:79:a0:b0:4d:0f:b9:33:ba:18:20:f9:0a:
         b0:0f:07:88:13:06:69:d9:94:b9:19:f4:ed:47:65:d5:89:d5:
         ab:2c:ef:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:19:24 2026 by rpki-client