Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F0133/5041A708E58611ECAFC22A87F1222468/9EB86A96634711F19C778F1CCF1D38B0.roa
File:                     9EB86A96634711F19C778F1CCF1D38B0.roa (raw, json)
Hash identifier:          IIR04ujeixANpE1nIcYKkmtOPYw3lT5knLPQfvE77Uk=
Subject key identifier:   43:70:C9:42:8A:30:06:C3:4E:37:8C:EF:9A:0A:81:1D:83:CB:37:00
Certificate issuer:       /CN=F36F0133AF/serialNumber=6630C7840846F2F6909754F1341466CDAFEA2FD4
Certificate serial:       05F2
Authority key identifier: 66:30:C7:84:08:46:F2:F6:90:97:54:F1:34:14:66:CD:AF:EA:2F:D4
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ZjDHhAhG8vaQl1TxNBRmza_qL9Q.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F0133/5041A708E58611ECAFC22A87F1222468/9EB86A96634711F19C778F1CCF1D38B0.roa
Signing time:             Mon 08 Jun 2026 14:37:48 +0000
ROA not before:           Mon 08 Jun 2026 14:37:44 +0000
ROA not after:            Tue 08 Jul 2036 14:37:44 +0000
asID:                     30983
IP address blocks:        102.216.118.0/24 maxlen: 24
                          2001:43f8:1670::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F0133/5041A708E58611ECAFC22A87F1222468/ZjDHhAhG8vaQl1TxNBRmza_qL9Q.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F0133/5041A708E58611ECAFC22A87F1222468/ZjDHhAhG8vaQl1TxNBRmza_qL9Q.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ZjDHhAhG8vaQl1TxNBRmza_qL9Q.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 15 Jun 2026 00:07:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1522 (0x5f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F0133AF, serialNumber=6630C7840846F2F6909754F1341466CDAFEA2FD4
        Validity
            Not Before: Jun  8 14:37:44 2026 GMT
            Not After : Jul  8 14:37:44 2036 GMT
        Subject: CN=6a26d3bc-131f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ec:60:e8:c3:b2:79:9d:a1:fa:46:09:14:c8:
                    22:ff:4d:fa:1d:98:eb:9b:27:2a:37:85:19:f3:85:
                    9b:95:36:7c:65:39:c9:09:3a:62:03:59:f9:99:d1:
                    43:e1:da:fc:8e:09:01:04:b4:cc:fd:a5:af:ba:83:
                    b3:59:f6:f8:9a:f9:99:92:74:14:5b:89:f2:18:3b:
                    75:54:f2:89:66:e3:f9:c6:33:35:c9:e9:63:f7:7f:
                    01:84:41:76:ae:0c:bb:4b:4f:c2:54:bd:eb:7c:10:
                    77:2d:59:96:67:f8:28:fa:ed:75:8d:d9:24:b4:35:
                    27:37:a4:bc:9e:91:e2:4b:a2:b9:7b:4f:12:70:ce:
                    cf:a2:36:e8:0f:80:fc:20:25:d6:c0:a3:38:62:a2:
                    24:50:49:d4:10:c6:bb:f5:6a:99:f2:16:d4:0d:0c:
                    05:27:a1:04:d0:54:a1:2e:9e:5a:02:e3:e5:ce:5b:
                    0f:9d:a9:43:1d:b5:d5:1f:1a:56:40:15:d3:51:a3:
                    5c:97:6b:86:9a:2d:f6:64:f0:48:cc:8d:54:2c:7e:
                    97:47:3e:dd:81:65:1d:78:69:7a:08:3b:26:77:f8:
                    8c:f0:11:2a:97:93:4d:46:4f:a7:36:c4:61:6d:79:
                    16:67:ce:a9:f0:56:50:83:cc:b7:0b:f5:69:3f:f5:
                    bc:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:70:C9:42:8A:30:06:C3:4E:37:8C:EF:9A:0A:81:1D:83:CB:37:00
            X509v3 Authority Key Identifier:
                keyid:66:30:C7:84:08:46:F2:F6:90:97:54:F1:34:14:66:CD:AF:EA:2F:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0133/5041A708E58611ECAFC22A87F1222468/ZjDHhAhG8vaQl1TxNBRmza_qL9Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ZjDHhAhG8vaQl1TxNBRmza_qL9Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0133/5041A708E58611ECAFC22A87F1222468/9EB86A96634711F19C778F1CCF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.216.118.0/24
                IPv6:
                  2001:43f8:1670::/48

    Signature Algorithm: sha256WithRSAEncryption
         66:54:05:b8:19:00:27:10:78:48:9c:a1:59:16:b1:3d:ab:d7:
         85:24:a2:86:3e:10:71:dc:28:20:42:b5:83:77:f7:29:30:0b:
         de:e6:ad:82:1a:1a:92:5b:fc:ca:5a:17:97:64:03:c4:b4:6c:
         c6:f3:7f:16:66:ee:41:83:38:a3:c5:82:f1:56:5e:e1:4f:0e:
         1c:d2:fd:f0:80:24:f1:52:00:bf:52:c4:7a:d6:ab:f7:e7:46:
         f2:f5:ba:5e:07:30:3c:0c:1e:98:2c:85:94:7e:ec:cd:d9:07:
         33:0e:67:fb:ad:43:61:b2:c3:28:04:2b:ec:d1:cc:99:85:cd:
         dd:3f:84:07:68:7e:5f:f9:0e:36:a2:13:af:4b:63:d2:cd:22:
         60:e2:f2:40:06:15:c3:4e:ac:66:bb:29:18:77:0a:c1:c3:0b:
         e5:32:b7:73:8c:73:2b:9b:a8:0d:29:56:54:7c:f8:c7:0d:26:
         08:c2:e0:82:99:62:9b:89:ad:30:13:ee:0a:6f:dd:d1:45:ed:
         de:99:6c:d7:06:df:09:e6:98:7a:18:f7:84:26:17:0a:62:b0:
         35:57:ea:17:d9:2b:25:52:4c:b0:e3:61:85:07:de:b0:63:ec:
         d9:c6:ef:e4:60:ce:86:3d:c9:90:eb:19:44:bf:ad:4d:09:89:
         9c:00:8c:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:53:29 2026 by rpki-client