Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/7ABC7650641E11F19351D3B4CE1D38B0.roa
File:                     7ABC7650641E11F19351D3B4CE1D38B0.roa (raw, json)
Hash identifier:          vU0h95lDgAxSIzbpmav0a02fs24DfcjVOpzDPENILEU=
Subject key identifier:   F1:37:4E:55:9E:DA:C5:72:1F:40:3E:56:48:04:7F:4A:A1:6C:2E:58
Certificate issuer:       /CN=F36CB1BEAF/serialNumber=A5F0A2BB8B79EDD6D37C077ADFEA082514C0420F
Certificate serial:       035B
Authority key identifier: A5:F0:A2:BB:8B:79:ED:D6:D3:7C:07:7A:DF:EA:08:25:14:C0:42:0F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/pfCiu4t57dbTfAd63-oIJRTAQg8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/7ABC7650641E11F19351D3B4CE1D38B0.roa
Signing time:             Tue 09 Jun 2026 16:15:50 +0000
ROA not before:           Tue 09 Jun 2026 16:15:45 +0000
ROA not after:            Fri 08 Jun 2029 16:15:45 +0000
asID:                     37577
IP address blocks:        197.239.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/pfCiu4t57dbTfAd63-oIJRTAQg8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/pfCiu4t57dbTfAd63-oIJRTAQg8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/pfCiu4t57dbTfAd63-oIJRTAQg8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 14 Jun 2026 04:05:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 859 (0x35b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36CB1BEAF, serialNumber=A5F0A2BB8B79EDD6D37C077ADFEA082514C0420F
        Validity
            Not Before: Jun  9 16:15:45 2026 GMT
            Not After : Jun  8 16:15:45 2029 GMT
        Subject: CN=6a283c36-9b01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:49:9c:ab:4a:68:d0:38:d7:55:fd:bc:a9:a9:
                    bd:ec:77:70:83:8b:3a:04:38:60:77:49:84:b1:cb:
                    31:7f:c1:25:5d:d6:05:ca:f4:f6:ae:72:44:34:bb:
                    47:44:2a:45:e7:8b:bd:6b:d8:b3:fd:71:45:18:30:
                    12:8f:9d:38:cb:44:a0:62:c6:e3:a9:a5:af:6b:c1:
                    a4:df:07:ef:00:98:c2:6b:43:0f:a1:75:75:cb:7b:
                    42:45:4b:26:c4:fa:77:f3:06:64:5f:33:44:33:e9:
                    ac:ac:ef:8e:28:e3:af:60:0e:a5:5b:d3:fc:b9:c7:
                    62:c5:0c:f6:85:ec:33:3e:50:ae:3b:9a:4f:1a:3c:
                    92:15:fa:7e:25:32:2e:94:c8:b2:0c:b5:8a:76:f4:
                    f2:48:19:b8:91:73:db:83:f2:49:76:99:99:2a:b3:
                    e9:f8:cf:ec:6f:d2:6f:4a:6d:78:3a:46:39:c1:da:
                    84:24:02:3b:83:41:ab:5a:33:10:92:e2:ba:bb:30:
                    5c:f0:ac:59:93:aa:b8:19:ab:53:10:89:9f:75:a9:
                    14:67:45:f2:cf:2d:c2:8f:52:e4:20:67:78:36:33:
                    1e:76:fb:0f:be:f7:b6:5e:c7:4a:43:f7:0b:86:f1:
                    18:60:38:1f:3b:5b:e9:6d:7e:5f:00:fc:fe:0c:7d:
                    c3:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:37:4E:55:9E:DA:C5:72:1F:40:3E:56:48:04:7F:4A:A1:6C:2E:58
            X509v3 Authority Key Identifier:
                keyid:A5:F0:A2:BB:8B:79:ED:D6:D3:7C:07:7A:DF:EA:08:25:14:C0:42:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/pfCiu4t57dbTfAd63-oIJRTAQg8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/pfCiu4t57dbTfAd63-oIJRTAQg8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/7ABC7650641E11F19351D3B4CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  197.239.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:92:c6:56:f1:30:61:98:99:cb:3e:03:e5:50:41:39:b8:cf:
         ed:1b:87:fa:84:25:6b:93:d0:e7:79:f6:e5:da:ab:1f:ac:27:
         92:83:3b:39:78:ee:99:b6:eb:b3:2d:ea:65:fb:3c:77:96:44:
         ce:77:2c:8b:1e:8e:49:18:26:23:b3:a4:b3:67:61:ce:c7:74:
         85:83:c6:f2:28:bc:49:57:f8:bd:b8:fb:cc:f6:97:d6:6c:8d:
         a8:56:8f:4a:a8:b4:a3:9c:40:43:e4:6c:3a:9d:37:9c:f1:7f:
         8a:87:c6:3f:76:7c:08:ee:0f:60:9e:a4:55:41:06:7e:0a:9e:
         b3:ce:30:e5:32:1a:b1:ae:05:e0:78:f4:74:00:4c:4f:e6:6f:
         40:b9:85:e2:6e:85:50:96:e8:73:ff:97:d3:14:ef:a4:27:6e:
         34:52:99:a5:4f:22:56:8f:f4:b6:2c:15:63:ee:05:55:73:e9:
         b1:07:33:14:9f:b1:fa:ed:c6:30:34:78:d3:fb:8f:c6:e0:50:
         d5:35:ae:89:7f:ae:31:89:e5:05:ae:c6:95:ba:8d:01:17:e0:
         77:f8:05:f0:9e:5e:7b:b9:5f:51:da:10:63:ef:fb:da:2b:23:
         37:fe:8e:ba:ac:e3:87:21:f8:18:a3:aa:d6:88:b3:27:2e:1e:
         ae:9e:ae:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:51:20 2026 by rpki-client