Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A34E4/CC8FC36CDA3011EE9E6C98AA775412E6/1D81231A52A711F1A84AD4F5CE1D38B0.roa
File:                     1D81231A52A711F1A84AD4F5CE1D38B0.roa (raw, json)
Hash identifier:          ZcEp6winc684xewT0hJzkqUYVlWOfnDVdOhpHbygoic=
Subject key identifier:   C0:E3:52:FE:BD:35:96:96:7F:FC:CE:84:41:FD:70:DC:9C:F4:81:C3
Certificate issuer:       /CN=F36A34E4AR/serialNumber=2C671F4259707027237540BF62265A2D97EB95CB
Certificate serial:       0349
Authority key identifier: 2C:67:1F:42:59:70:70:27:23:75:40:BF:62:26:5A:2D:97:EB:95:CB
Authority info access:    rsync://rpki.afrinic.net/repository/arin/LGcfQllwcCcjdUC_YiZaLZfrlcs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A34E4/CC8FC36CDA3011EE9E6C98AA775412E6/1D81231A52A711F1A84AD4F5CE1D38B0.roa
Signing time:             Mon 18 May 2026 10:48:34 +0000
ROA not before:           Mon 18 May 2026 10:48:29 +0000
ROA not after:            Mon 17 May 2027 10:48:29 +0000
asID:                     37613
IP address blocks:        169.239.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A34E4/CC8FC36CDA3011EE9E6C98AA775412E6/LGcfQllwcCcjdUC_YiZaLZfrlcs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A34E4/CC8FC36CDA3011EE9E6C98AA775412E6/LGcfQllwcCcjdUC_YiZaLZfrlcs.mft
                          rsync://rpki.afrinic.net/repository/arin/LGcfQllwcCcjdUC_YiZaLZfrlcs.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 15 Jun 2026 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 841 (0x349)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A34E4AR, serialNumber=2C671F4259707027237540BF62265A2D97EB95CB
        Validity
            Not Before: May 18 10:48:29 2026 GMT
            Not After : May 17 10:48:29 2027 GMT
        Subject: CN=6a0aee81-ad26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:cd:20:66:ba:c6:b7:7a:0e:43:38:d0:43:d5:
                    7e:9d:0d:1e:2f:a3:fc:21:94:90:d6:ea:86:42:21:
                    f8:fb:c0:47:86:1b:61:31:87:27:7e:af:06:8d:95:
                    c7:7d:64:06:24:04:39:8a:a5:95:aa:9a:de:99:c1:
                    a5:e6:5c:15:fb:86:94:46:c1:5c:3c:8a:26:22:6b:
                    90:fb:74:4b:c9:31:9d:a2:1e:47:3d:17:42:e5:12:
                    98:c0:53:f9:b7:e6:50:11:c7:4a:cf:ae:ec:1e:c6:
                    f3:d6:05:39:2b:65:7c:e1:00:1d:d3:0f:b2:23:28:
                    6c:bf:4a:cb:92:40:58:ab:08:22:de:14:92:b6:e2:
                    59:a8:04:15:50:c8:27:02:19:79:4f:a6:83:f5:ba:
                    26:81:5f:3f:c2:5f:f0:09:0b:d7:a8:10:64:35:21:
                    8e:4d:7a:d6:69:7e:85:ad:0d:7f:9d:b0:0e:b2:36:
                    91:68:94:43:7c:85:f8:19:91:2c:e8:5d:e7:dd:7d:
                    76:c4:7d:86:2e:22:4c:c6:3f:8f:b5:03:06:87:95:
                    a2:43:2b:91:ae:b2:35:59:cc:fa:2d:45:59:2a:d1:
                    e3:bd:f4:09:36:24:07:4c:69:c3:46:3b:77:7a:39:
                    3d:3c:87:97:6e:24:ad:30:8c:15:af:18:98:30:6e:
                    64:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:E3:52:FE:BD:35:96:96:7F:FC:CE:84:41:FD:70:DC:9C:F4:81:C3
            X509v3 Authority Key Identifier:
                keyid:2C:67:1F:42:59:70:70:27:23:75:40:BF:62:26:5A:2D:97:EB:95:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A34E4/CC8FC36CDA3011EE9E6C98AA775412E6/LGcfQllwcCcjdUC_YiZaLZfrlcs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/LGcfQllwcCcjdUC_YiZaLZfrlcs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A34E4/CC8FC36CDA3011EE9E6C98AA775412E6/1D81231A52A711F1A84AD4F5CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.239.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:72:e2:27:21:8f:05:5b:83:45:d9:69:d8:7e:7b:4b:1b:68:
         c2:8f:ff:76:60:21:a1:c8:9b:64:d7:24:96:41:d3:09:6e:90:
         7a:e0:74:bb:48:4f:ea:f4:07:ba:dc:31:4e:5a:1a:67:ef:42:
         33:0b:63:4b:7f:3d:17:ee:95:b8:fc:d8:ae:22:30:2f:ae:3a:
         16:9f:1f:98:db:f0:d2:cf:c8:8b:87:98:ba:de:c5:4c:af:61:
         9c:fa:68:79:ed:46:65:1b:71:25:e4:c5:8f:07:50:5d:13:ff:
         d2:52:dc:59:20:87:9a:bf:e8:7f:d8:48:8e:2e:8f:18:3b:70:
         c3:cd:fe:cc:95:c0:5b:7c:ed:b0:1a:5f:56:d3:ef:54:56:46:
         82:0f:ca:73:a4:86:8f:f0:1b:fb:4a:c4:52:01:03:f8:6f:4b:
         3b:67:05:d8:12:b0:2b:2e:71:54:ca:7b:e7:d0:4c:d4:60:a4:
         df:29:fe:a1:f7:e5:3c:67:ee:bf:d4:33:8b:3e:47:4c:cd:88:
         55:d3:9f:d3:f0:f0:1b:25:aa:4f:b8:7b:fb:09:ca:83:67:fb:
         61:13:a7:40:d0:d8:9f:e3:c5:8e:fe:91:aa:c7:53:6d:b2:00:
         10:fc:83:92:4b:be:33:40:2e:71:f7:09:7b:53:7c:46:ad:05:
         30:69:a2:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:33:55 2026 by rpki-client