Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/5F6C45B02D1911F19C780B7BDAE4EC9C.roa
File:                     5F6C45B02D1911F19C780B7BDAE4EC9C.roa (raw, json)
Hash identifier:          bOxuL7xuj8ZVGs3jT5rSLBPTBOPxm9e39rt/LXAf8q4=
Subject key identifier:   F6:C2:3C:58:4F:4A:07:51:FD:E1:95:EA:D3:88:48:A2:BE:B6:4F:E6
Certificate issuer:       /CN=F36A1CEFAF/serialNumber=82F1C6611A3A1467DB3D78A4A5FED50A08A57B13
Certificate serial:       0776
Authority key identifier: 82:F1:C6:61:1A:3A:14:67:DB:3D:78:A4:A5:FE:D5:0A:08:A5:7B:13
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/gvHGYRo6FGfbPXikpf7VCgilexM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/5F6C45B02D1911F19C780B7BDAE4EC9C.roa
Signing time:             Tue 31 Mar 2026 15:50:43 +0000
ROA not before:           Tue 31 Mar 2026 15:50:38 +0000
ROA not after:            Mon 31 Mar 2036 15:50:38 +0000
asID:                     37645
IP address blocks:        102.218.180.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/gvHGYRo6FGfbPXikpf7VCgilexM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Apr 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1910 (0x776)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A1CEFAF, serialNumber=82F1C6611A3A1467DB3D78A4A5FED50A08A57B13
        Validity
            Not Before: Mar 31 15:50:38 2026 GMT
            Not After : Mar 31 15:50:38 2036 GMT
        Subject: CN=69cbed52-844f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:cb:8f:76:43:e7:e5:5c:d1:70:9f:63:d2:e3:
                    1e:7a:7f:31:20:7a:95:2c:6b:bb:66:77:9c:02:7f:
                    9e:12:e7:79:7d:0e:40:70:4f:c9:56:3c:fe:7e:f2:
                    ee:38:ee:44:9c:38:eb:fb:af:5a:4d:16:ba:ac:d1:
                    92:71:f6:6d:aa:53:66:93:d2:6e:be:18:51:23:c1:
                    ba:ac:c3:3c:f5:f6:40:dd:e2:fb:be:6f:c2:69:24:
                    74:d2:37:d4:f5:96:8a:2a:58:e5:39:a2:5c:e3:08:
                    e0:ca:ee:7e:15:c6:7a:ee:dc:b0:53:c3:e5:83:64:
                    6a:1c:5e:a2:89:48:34:bb:29:f9:88:0f:15:de:f7:
                    fd:cb:63:32:41:f8:16:fa:29:28:b4:02:a1:81:ae:
                    25:f0:ba:e1:6f:53:e8:f3:f7:26:0d:e2:01:5a:74:
                    11:e8:4f:e3:8b:51:6a:32:d8:70:d6:fc:47:fc:e3:
                    af:2a:a2:be:fa:b5:59:ca:d1:c1:7d:31:39:14:ca:
                    e1:76:f3:ae:37:64:ba:01:c1:2a:17:20:38:79:35:
                    f5:6e:f3:6f:00:ab:0d:df:7b:28:47:f9:ce:0c:85:
                    a2:a6:da:56:2a:4f:b8:23:f5:c3:a1:7c:17:0a:dc:
                    f1:c2:9a:d1:c1:b2:7a:27:a2:81:73:28:11:b3:98:
                    db:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:C2:3C:58:4F:4A:07:51:FD:E1:95:EA:D3:88:48:A2:BE:B6:4F:E6
            X509v3 Authority Key Identifier:
                keyid:82:F1:C6:61:1A:3A:14:67:DB:3D:78:A4:A5:FE:D5:0A:08:A5:7B:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gvHGYRo6FGfbPXikpf7VCgilexM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/5F6C45B02D1911F19C780B7BDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.218.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0b:ea:b2:4e:84:c1:e5:4b:66:68:65:23:0d:0c:d0:d1:2e:03:
         f5:a4:0e:d3:58:3d:90:9a:c6:68:f0:fe:47:88:2f:de:80:b9:
         f2:e1:21:4f:78:b4:e5:9d:06:00:c5:4d:b4:d5:c6:0e:bf:ff:
         c3:86:58:b2:23:8a:8c:45:48:20:42:72:7c:fb:b5:4c:72:fd:
         17:c2:95:7c:86:87:c9:68:46:25:30:75:ea:80:c0:87:f3:c2:
         e3:f8:01:91:2f:ff:1b:44:ab:ad:c4:5f:04:5d:7e:b2:ca:0d:
         3a:be:53:23:e9:67:a6:d4:5a:b0:6c:65:e9:ae:c6:b0:40:be:
         24:93:4d:e4:58:53:0f:91:fc:7a:11:bf:30:c4:b2:31:43:f0:
         22:1f:9d:bd:b0:3e:5e:a9:7c:74:2d:32:0c:ae:cb:9e:6d:94:
         ba:1a:b4:4f:20:f4:85:42:27:de:42:5a:30:3e:70:d5:41:7c:
         f6:8c:c4:45:f6:f7:c6:2e:5e:b5:4c:0a:1b:f4:cf:02:ba:90:
         14:f8:77:a3:78:cf:df:02:d1:d5:5f:83:1e:cc:fc:fe:ef:38:
         99:bb:55:20:8d:92:93:93:d3:55:e1:65:c9:3d:ea:21:c2:a4:
         63:09:37:e1:69:31:6d:07:32:3f:7b:e1:1d:27:21:58:c6:b8:
         38:73:d0:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:50:23 2026 by rpki-client