Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A41A0/F063CE320A9711EEB9B425234AD9E6FC/0E6074FA52A511F187479FE9CE1D38B0.roa
File:                     0E6074FA52A511F187479FE9CE1D38B0.roa (raw, json)
Hash identifier:          qmsm209xtAFWImZocN27LMHqGAIJP4T5JyMpaW7qQDU=
Subject key identifier:   C3:B8:ED:FF:6B:BB:18:E2:6E:02:10:2C:6A:2D:2C:EC:ED:B8:18:A2
Certificate issuer:       /CN=F36A41A0AF/serialNumber=5F228C46BEF2B4CBA94CB29F10C3680EE2883DB3
Certificate serial:       046B
Authority key identifier: 5F:22:8C:46:BE:F2:B4:CB:A9:4C:B2:9F:10:C3:68:0E:E2:88:3D:B3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/XyKMRr7ytMupTLKfEMNoDuKIPbM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A41A0/F063CE320A9711EEB9B425234AD9E6FC/0E6074FA52A511F187479FE9CE1D38B0.roa
Signing time:             Mon 18 May 2026 10:33:49 +0000
ROA not before:           Mon 18 May 2026 10:33:45 +0000
ROA not after:            Tue 18 May 2027 10:33:45 +0000
asID:                     37613
IP address blocks:        41.242.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A41A0/F063CE320A9711EEB9B425234AD9E6FC/XyKMRr7ytMupTLKfEMNoDuKIPbM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A41A0/F063CE320A9711EEB9B425234AD9E6FC/XyKMRr7ytMupTLKfEMNoDuKIPbM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/XyKMRr7ytMupTLKfEMNoDuKIPbM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 15 Jun 2026 00:07:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1131 (0x46b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A41A0AF, serialNumber=5F228C46BEF2B4CBA94CB29F10C3680EE2883DB3
        Validity
            Not Before: May 18 10:33:45 2026 GMT
            Not After : May 18 10:33:45 2027 GMT
        Subject: CN=6a0aeb0d-dcbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:fa:bc:61:13:d6:64:2c:27:82:f5:a6:f3:04:
                    c2:7b:3d:62:7d:67:68:08:b8:1c:d6:67:4d:99:ff:
                    cb:a3:00:f7:88:8b:2a:ab:75:82:50:bd:de:a9:fc:
                    01:bf:97:d5:ec:d5:9f:7c:83:a5:b2:23:98:c0:66:
                    ed:5b:23:db:f9:29:47:db:43:fd:33:7e:4c:39:d6:
                    63:f9:d4:9a:e3:6a:45:a2:1a:90:43:f2:26:e7:cd:
                    ff:14:c7:58:25:c8:4e:ce:2d:ab:aa:2a:b8:3d:e0:
                    61:0e:8c:76:88:ed:7f:b0:9a:c1:39:4e:ea:e7:a7:
                    b7:b9:91:92:e6:bc:72:c5:3f:c7:c4:0d:06:2a:07:
                    50:35:fb:5f:d9:d4:08:bb:ed:97:b4:c1:d7:da:ee:
                    81:ed:65:f1:24:c4:9e:3c:6e:96:fd:d3:ac:28:18:
                    51:d4:77:4a:01:ac:47:4b:4a:0f:bc:3a:22:bb:3b:
                    f8:c5:4b:3b:65:ec:d9:b8:ca:e7:98:76:d4:5f:fe:
                    94:c9:e6:07:93:b6:f0:79:36:00:5d:1e:a8:dc:eb:
                    64:c0:89:88:7a:0b:d0:35:1a:9b:69:dc:b1:9b:64:
                    4c:26:2d:d1:c2:86:69:66:77:55:c4:65:ec:a5:6c:
                    fe:9d:68:2d:dd:fb:33:d4:c3:bc:8e:ab:50:3f:df:
                    33:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:B8:ED:FF:6B:BB:18:E2:6E:02:10:2C:6A:2D:2C:EC:ED:B8:18:A2
            X509v3 Authority Key Identifier:
                keyid:5F:22:8C:46:BE:F2:B4:CB:A9:4C:B2:9F:10:C3:68:0E:E2:88:3D:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A41A0/F063CE320A9711EEB9B425234AD9E6FC/XyKMRr7ytMupTLKfEMNoDuKIPbM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XyKMRr7ytMupTLKfEMNoDuKIPbM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A41A0/F063CE320A9711EEB9B425234AD9E6FC/0E6074FA52A511F187479FE9CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.242.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:e4:7c:9e:29:81:b7:bf:53:a8:5f:00:f9:e2:41:6a:3e:9a:
         fc:bb:1e:81:67:c7:06:10:dc:08:37:ed:08:b4:18:09:80:12:
         82:ab:3d:42:1e:bd:8c:ff:30:59:ce:64:c1:61:d0:80:58:e0:
         8a:51:5d:2a:26:ff:bc:4e:b2:39:88:12:db:ef:39:6d:5f:92:
         c4:03:dd:53:98:c3:35:df:7c:40:e2:07:92:bf:e8:94:95:6f:
         f8:fd:12:6a:55:92:5d:c1:e3:35:db:a7:10:bc:6d:a5:b1:2b:
         62:15:15:46:d4:35:aa:ef:ab:72:78:0b:0c:ed:61:1c:b4:c7:
         2a:c0:06:c8:20:47:18:2e:e1:40:04:31:8b:4e:83:d7:cb:a4:
         be:70:30:7f:16:85:e9:0a:b2:48:8a:42:1b:e0:f4:5b:27:2e:
         6d:72:8c:f0:92:ea:f9:07:8f:91:d4:53:9f:73:bf:85:87:4b:
         b4:b0:d8:ce:79:85:6f:75:34:42:4f:b6:66:2f:fe:9a:59:5b:
         bb:c2:29:73:29:62:08:67:85:93:da:f7:43:7c:e1:e8:79:0c:
         71:34:01:3c:0b:9d:42:5c:b6:5e:d4:51:2d:a6:bb:da:33:54:
         9a:eb:47:55:dc:d2:15:73:f4:cf:60:94:49:2b:a0:8c:da:80:
         38:b1:53:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:54:15 2026 by rpki-client