Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EF186/095B7A2A548011EE8C8F332D4AD9E6FC/4C48DA2612F611F1B5248399DAE4EC9C.roa
File:                     4C48DA2612F611F1B5248399DAE4EC9C.roa (raw, json)
Hash identifier:          OXzgTGgx4S/oSGvITx8UeMg88z8cpWLInyd97X90v+o=
Subject key identifier:   5F:17:9E:77:C0:F1:1A:4D:E1:46:5A:36:A8:F4:BE:F7:55:0E:C7:16
Certificate issuer:       /CN=F36EF186AF/serialNumber=F377D4D428F9465B15449C6AFD4532C422446964
Certificate serial:       03BA
Authority key identifier: F3:77:D4:D4:28:F9:46:5B:15:44:9C:6A:FD:45:32:C4:22:44:69:64
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/83fU1Cj5RlsVRJxq_UUyxCJEaWQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36EF186/095B7A2A548011EE8C8F332D4AD9E6FC/4C48DA2612F611F1B5248399DAE4EC9C.roa
Signing time:             Thu 26 Feb 2026 09:34:08 +0000
ROA not before:           Thu 26 Feb 2026 09:34:02 +0000
ROA not after:            Wed 28 Feb 2046 09:34:02 +0000
asID:                     328611
IP address blocks:        102.203.56.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36EF186/095B7A2A548011EE8C8F332D4AD9E6FC/83fU1Cj5RlsVRJxq_UUyxCJEaWQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36EF186/095B7A2A548011EE8C8F332D4AD9E6FC/83fU1Cj5RlsVRJxq_UUyxCJEaWQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/83fU1Cj5RlsVRJxq_UUyxCJEaWQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Mar 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 954 (0x3ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36EF186AF, serialNumber=F377D4D428F9465B15449C6AFD4532C422446964
        Validity
            Not Before: Feb 26 09:34:02 2026 GMT
            Not After : Feb 28 09:34:02 2046 GMT
        Subject: CN=69a01390-2601
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:35:06:bd:6b:8f:08:fb:22:e3:b9:83:f3:28:
                    fc:fd:38:f3:a6:c2:49:50:5d:75:8d:d7:f1:5e:72:
                    6e:3f:0f:04:a4:63:c6:ea:d7:32:b1:fd:d7:d4:66:
                    a2:07:bc:5f:20:2d:95:5b:8a:b1:4b:9a:a2:56:98:
                    0d:61:ce:86:7e:3b:ac:9a:47:5d:34:d4:02:91:96:
                    ce:9d:45:82:5e:9f:6f:c1:d7:d8:75:58:c7:c2:82:
                    54:66:d7:c2:43:1a:ef:48:71:c4:e2:d9:ce:29:7a:
                    68:fc:87:76:eb:c6:21:af:92:3d:9a:b8:2c:6e:c7:
                    b2:85:e3:29:17:5e:3a:b2:cb:cc:6a:51:8e:59:a5:
                    c9:86:3a:e3:e3:aa:db:cb:e2:89:d7:b8:96:a9:c3:
                    f3:c6:c5:70:1e:b0:74:25:ad:85:17:d6:33:9f:19:
                    ac:74:fc:52:13:1c:08:ac:aa:a2:8a:e4:12:cc:86:
                    45:3e:e5:4f:10:6a:fc:28:4a:5f:62:80:75:b5:3a:
                    57:10:6c:3e:fe:39:7b:76:a0:3d:84:c9:1c:0d:9d:
                    88:60:85:4f:a0:04:73:fc:f8:5a:55:a7:da:30:ec:
                    bc:87:d7:43:6c:79:b2:eb:c7:63:00:b1:be:09:b5:
                    09:69:59:e9:dd:18:c1:b0:b5:3e:40:5d:58:c4:df:
                    f9:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:17:9E:77:C0:F1:1A:4D:E1:46:5A:36:A8:F4:BE:F7:55:0E:C7:16
            X509v3 Authority Key Identifier:
                keyid:F3:77:D4:D4:28:F9:46:5B:15:44:9C:6A:FD:45:32:C4:22:44:69:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36EF186/095B7A2A548011EE8C8F332D4AD9E6FC/83fU1Cj5RlsVRJxq_UUyxCJEaWQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/83fU1Cj5RlsVRJxq_UUyxCJEaWQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EF186/095B7A2A548011EE8C8F332D4AD9E6FC/4C48DA2612F611F1B5248399DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.203.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7c:38:d8:fe:50:4c:ad:43:e9:43:a8:4c:dd:0e:1a:6a:d0:96:
         72:5a:6a:30:2f:76:b1:d6:c3:16:57:be:ed:4f:e8:02:86:23:
         47:3b:3b:91:8f:22:49:c5:84:76:f2:8d:74:08:e0:a7:d4:8b:
         bb:fa:29:79:42:1b:bf:19:2a:3a:59:b4:ab:af:f3:18:fd:4c:
         22:6e:90:26:f5:f7:52:ac:4d:f6:62:ba:16:cd:d8:73:e9:02:
         22:f0:fb:c9:21:d3:f8:b4:43:81:23:2c:4f:94:57:fe:08:7b:
         24:27:8e:62:08:ea:f4:5f:92:e4:2f:95:fb:4c:f7:f7:6c:d9:
         01:58:03:e4:85:bd:0f:ac:4c:c6:46:85:c2:00:fb:d1:85:a2:
         2e:ea:73:93:a1:e2:3e:6d:ac:21:62:07:a2:46:83:8e:30:a5:
         7c:a8:c7:6d:c0:68:2a:d8:cf:4a:b0:50:13:4b:e9:7e:51:3a:
         1a:f6:d2:c5:93:e3:70:6f:43:a3:c9:9c:dc:12:0b:47:e1:48:
         d6:fe:e1:78:e7:41:6a:0f:be:04:c9:36:d8:2c:68:89:71:cf:
         73:00:c1:ae:a9:fe:db:c9:dd:74:48:7c:04:05:f3:11:f4:50:
         fc:6a:49:da:32:14:58:b2:7e:00:f8:84:6c:e0:9a:48:b9:f8:
         ab:29:97:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:01:07 2026 by rpki-client