Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DC7AB/2B4A370E99EA11ECAD087A6A5A40D577/2710347C8AA411F1A2A25AD8CE1D38B0.roa
File:                     2710347C8AA411F1A2A25AD8CE1D38B0.roa (raw, json)
Hash identifier:          GHw8L4dHRyTAeqyB0dwejInA8D/eS9lWv6WE6XlU93A=
Subject key identifier:   AB:80:03:6D:C5:FC:66:73:1E:CD:32:CA:69:29:B7:F5:1D:04:B0:F3
Certificate issuer:       /CN=F36DC7ABAF/serialNumber=7BA891054608365FB8EB2380DD6700FDD36B930D
Certificate serial:       0679
Authority key identifier: 7B:A8:91:05:46:08:36:5F:B8:EB:23:80:DD:67:00:FD:D3:6B:93:0D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/e6iRBUYINl-46yOA3WcA_dNrkw0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36DC7AB/2B4A370E99EA11ECAD087A6A5A40D577/2710347C8AA411F1A2A25AD8CE1D38B0.roa
Signing time:             Tue 28 Jul 2026 16:48:26 +0000
ROA not before:           Tue 28 Jul 2026 16:48:22 +0000
ROA not after:            Wed 27 Feb 2030 16:48:22 +0000
asID:                     37441
IP address blocks:        196.3.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36DC7AB/2B4A370E99EA11ECAD087A6A5A40D577/e6iRBUYINl-46yOA3WcA_dNrkw0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36DC7AB/2B4A370E99EA11ECAD087A6A5A40D577/e6iRBUYINl-46yOA3WcA_dNrkw0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/e6iRBUYINl-46yOA3WcA_dNrkw0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 30 Jul 2026 16:50:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1657 (0x679)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36DC7ABAF, serialNumber=7BA891054608365FB8EB2380DD6700FDD36B930D
        Validity
            Not Before: Jul 28 16:48:22 2026 GMT
            Not After : Feb 27 16:48:22 2030 GMT
        Subject: CN=6a68dd5a-f46c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:14:52:ec:10:59:1d:60:cc:ea:15:57:82:fb:
                    d7:cb:22:e2:6b:bd:c9:ca:fa:f0:bb:10:27:91:55:
                    c5:6f:d8:f8:91:f7:2f:90:5d:e8:d8:a9:8b:8a:4d:
                    ed:6c:43:17:6a:28:4d:de:c4:59:35:2d:01:f6:59:
                    3f:a2:b0:e2:4f:a6:8b:5b:be:53:1d:7d:0e:cc:4e:
                    3e:8b:0f:22:f5:9a:9a:45:22:6b:57:a2:c5:b4:d4:
                    90:70:fa:d9:ea:17:3a:1e:6a:99:b3:84:5d:57:c2:
                    2a:c3:ea:a4:f2:9b:09:3e:24:96:89:33:a5:58:08:
                    66:4e:01:53:d2:e5:64:59:9e:07:2d:37:78:4c:7e:
                    31:ce:ed:86:1d:88:09:1d:a4:35:87:50:df:ec:56:
                    1b:10:7f:69:ef:2c:f3:19:a5:b6:a1:ff:f0:8b:95:
                    e7:22:77:0e:d3:cd:a0:d1:12:1b:db:82:31:a2:59:
                    22:af:46:5a:f2:d6:fd:e8:78:6c:dc:1b:1e:7d:8e:
                    6f:df:f8:43:3a:a8:af:63:49:f3:fb:f7:c4:44:f8:
                    9c:5c:8e:3b:00:cb:3a:53:91:30:e4:e6:a1:d3:00:
                    eb:1e:54:b6:77:1d:42:6f:31:f0:b2:02:70:d7:d4:
                    59:c8:c9:a0:98:cb:57:15:fd:d3:1c:c8:32:e0:ca:
                    98:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:80:03:6D:C5:FC:66:73:1E:CD:32:CA:69:29:B7:F5:1D:04:B0:F3
            X509v3 Authority Key Identifier:
                keyid:7B:A8:91:05:46:08:36:5F:B8:EB:23:80:DD:67:00:FD:D3:6B:93:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36DC7AB/2B4A370E99EA11ECAD087A6A5A40D577/e6iRBUYINl-46yOA3WcA_dNrkw0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/e6iRBUYINl-46yOA3WcA_dNrkw0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DC7AB/2B4A370E99EA11ECAD087A6A5A40D577/2710347C8AA411F1A2A25AD8CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.3.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:7e:b4:ad:55:a8:06:7c:12:6c:00:a6:5e:fd:c0:84:ae:35:
         f1:50:72:b9:3b:cc:c9:c9:2b:dd:82:bc:1e:79:a5:c4:2d:94:
         3c:9b:d1:0b:f9:0a:9b:b4:82:43:2c:8d:3a:15:a2:11:c6:6a:
         f6:51:9b:44:ef:df:6d:e8:6c:cc:c0:9a:a1:df:42:29:1c:f8:
         2a:50:40:d0:ca:de:2f:e6:43:90:8c:12:49:97:b8:dc:93:68:
         09:31:24:fe:1c:f6:8d:90:ff:d7:14:36:07:41:b6:1d:2c:34:
         9e:7a:fc:5d:8a:87:6c:32:a8:f5:52:ff:a0:b7:7b:3c:02:79:
         2c:7c:16:eb:de:06:99:b5:1b:e4:9b:e2:5e:56:6d:66:70:3c:
         dd:f6:f8:da:96:8e:b3:4e:ac:ee:b3:4b:72:14:4d:51:62:f8:
         9d:1e:8c:43:1d:ea:80:b8:a1:b5:9c:8f:3b:f9:dd:70:52:3d:
         07:55:41:27:ae:0f:84:ab:84:27:c3:bb:c7:cd:21:05:48:ec:
         e0:7e:de:10:75:04:67:5a:da:98:28:c9:41:e0:c1:26:ea:73:
         27:2c:25:2d:8b:02:b8:fc:84:92:88:f8:d5:b5:e1:a9:3e:e2:
         ed:5a:e6:37:ba:6a:cc:fe:18:da:ca:d0:91:5a:f3:7f:35:21:
         6c:1e:7a:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:14:16 2026 by rpki-client