Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F2B14/43F81B58ED1C11EA9F838C55F8AEA228/D318CC8C60AD11F1834B33D2CE1D38B0.roa
File:                     D318CC8C60AD11F1834B33D2CE1D38B0.roa (raw, json)
Hash identifier:          vytVxGQ5+3+xcP2yd2fLQ/SusudZIXkMM5vt1VWGOmM=
Subject key identifier:   FD:B9:59:42:4A:F8:D8:BB:EB:61:A0:47:66:6B:A9:67:2E:04:8A:74
Certificate issuer:       /CN=F36F2B14AF/serialNumber=90E899936DF9E68B9A7505BFBE63B8AFA0A77AE9
Certificate serial:       089E
Authority key identifier: 90:E8:99:93:6D:F9:E6:8B:9A:75:05:BF:BE:63:B8:AF:A0:A7:7A:E9
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/kOiZk2355ouadQW_vmO4r6Cneuk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F2B14/43F81B58ED1C11EA9F838C55F8AEA228/D318CC8C60AD11F1834B33D2CE1D38B0.roa
Signing time:             Fri 05 Jun 2026 07:11:52 +0000
ROA not before:           Fri 05 Jun 2026 07:11:47 +0000
ROA not after:            Sat 05 Jun 2032 07:11:47 +0000
asID:                     37239
IP address blocks:        196.46.184.0/24 maxlen: 24
                          196.46.185.0/24 maxlen: 24
                          196.46.186.0/24 maxlen: 24
                          196.46.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F2B14/43F81B58ED1C11EA9F838C55F8AEA228/kOiZk2355ouadQW_vmO4r6Cneuk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F2B14/43F81B58ED1C11EA9F838C55F8AEA228/kOiZk2355ouadQW_vmO4r6Cneuk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/kOiZk2355ouadQW_vmO4r6Cneuk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 15 Jun 2026 00:07:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2206 (0x89e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F2B14AF, serialNumber=90E899936DF9E68B9A7505BFBE63B8AFA0A77AE9
        Validity
            Not Before: Jun  5 07:11:47 2026 GMT
            Not After : Jun  5 07:11:47 2032 GMT
        Subject: CN=6a2276b7-60e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:50:d6:99:ad:a4:d8:30:73:60:37:fc:29:b0:
                    03:16:41:17:14:cd:57:f0:32:d2:d0:92:c9:a6:54:
                    0b:3c:27:fa:13:a4:0c:02:d7:0d:d5:cb:b8:5b:41:
                    3e:31:ab:07:3e:c4:80:74:7a:c9:79:39:4c:d4:82:
                    4c:f1:65:c0:31:e3:fb:9f:6d:dc:0b:59:6c:4e:c5:
                    3b:c7:24:6a:d3:82:c2:41:92:eb:1c:e0:75:ed:6d:
                    c3:07:4d:57:3d:7e:84:5c:4f:77:56:ec:ae:bf:2b:
                    c2:04:36:a4:db:d3:d1:25:6c:a5:de:f8:35:e5:5a:
                    54:52:f7:4b:cd:6c:69:0a:71:87:ce:84:ae:13:03:
                    59:bf:35:43:e2:cf:0a:f0:09:83:dd:90:e5:51:97:
                    8f:15:7d:c9:82:d3:27:57:d4:a3:63:c5:1a:d3:12:
                    2b:4d:47:19:7f:05:e0:f7:80:e8:00:e6:8e:93:84:
                    9a:e5:d3:ce:28:ce:8c:e5:b1:e1:9f:b1:97:7e:05:
                    9a:0a:f2:7b:46:39:ae:8a:c0:39:bf:d2:72:ab:7c:
                    40:ab:8a:1c:01:2b:8b:28:01:50:fc:43:ce:27:ab:
                    72:5c:47:f8:49:c3:bb:53:16:69:3d:52:d3:cf:3a:
                    ee:58:1e:ad:93:9a:f1:3d:29:52:e2:a4:08:52:2d:
                    d5:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:B9:59:42:4A:F8:D8:BB:EB:61:A0:47:66:6B:A9:67:2E:04:8A:74
            X509v3 Authority Key Identifier:
                keyid:90:E8:99:93:6D:F9:E6:8B:9A:75:05:BF:BE:63:B8:AF:A0:A7:7A:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F2B14/43F81B58ED1C11EA9F838C55F8AEA228/kOiZk2355ouadQW_vmO4r6Cneuk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kOiZk2355ouadQW_vmO4r6Cneuk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F2B14/43F81B58ED1C11EA9F838C55F8AEA228/D318CC8C60AD11F1834B33D2CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.46.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         35:72:b4:2d:2e:8a:ed:89:19:ae:65:db:4b:ce:5f:8e:37:22:
         dc:a2:7a:22:4a:16:c6:27:79:f2:b0:ee:5e:59:93:0f:9d:2a:
         d3:da:89:ea:00:a2:9f:70:7d:4d:09:e0:62:82:a5:6b:46:b7:
         b3:52:4a:ab:a1:a9:ee:0e:8a:6f:52:b8:16:e2:50:88:09:ed:
         48:3a:d0:4b:6a:54:37:95:f4:8f:1e:a2:70:ab:a9:82:ab:8d:
         75:91:d8:e2:6b:7d:e6:c2:91:f1:c6:b8:7f:84:d1:fe:17:d2:
         c7:63:08:cf:db:be:bb:b7:1c:e4:f2:fe:0d:2c:b9:5b:41:66:
         48:3f:44:18:11:74:e4:23:80:bd:b8:b5:f6:f6:f8:82:71:6c:
         13:b1:f1:08:d2:4a:df:dc:b1:0f:d4:1c:3b:e7:ee:c9:8f:cf:
         26:f1:57:cf:3c:b0:83:1c:10:a9:f8:d7:f7:07:e0:30:9f:3d:
         01:b1:cb:0f:9e:f9:9b:ae:9d:c7:66:27:e7:e9:50:9a:20:f9:
         9f:b4:f3:26:85:a9:7e:6c:29:43:b5:67:e6:16:74:83:3f:af:
         e9:78:1c:87:ab:cb:18:4f:dd:79:64:83:f9:46:d4:bc:8b:a9:
         51:94:7c:26:a7:ad:8f:dc:95:a1:f9:f9:44:36:d4:25:a2:6d:
         dd:b7:4a:23
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCJ4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RjJCMTRBRjExMC8GA1UEBRMoOTBFODk5OTM2REY5RTY4QjlBNzUwNUJGQkU2M0I4
QUZBMEE3N0FFOTAeFw0yNjA2MDUwNzExNDdaFw0zMjA2MDUwNzExNDdaMBgxFjAU
BgNVBAMTDTZhMjI3NmI3LTYwZTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC/UNaZraTYMHNgN/wpsAMWQRcUzVfwMtLQksmmVAs8J/oTpAwC1w3Vy7hb
QT4xqwc+xIB0esl5OUzUgkzxZcAx4/ufbdwLWWxOxTvHJGrTgsJBkusc4HXtbcMH
TVc9foRcT3dW7K6/K8IENqTb09ElbKXe+DXlWlRS90vNbGkKcYfOhK4TA1m/NUPi
zwrwCYPdkOVRl48VfcmC0ydX1KNjxRrTEitNRxl/BeD3gOgA5o6ThJrl084ozozl
seGfsZd+BZoK8ntGOa6KwDm/0nKrfECrihwBK4soAVD8Q84nq3JcR/hJw7tTFmk9
UtPPOu5YHq2TmvE9KVLipAhSLdXxAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU/blZ
Qkr42LvrYaBHZmupZy4EinQwHwYDVR0jBBgwFoAUkOiZk2355ouadQW/vmO4r6Cn
eukwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkYyQjE0LzQzRjgxQjU4RUQxQzExRUE5RjgzOEM1NUY4QUVBMjI4L2tPaVpr
MjM1NW91YWRRV192bU80cjZDbmV1ay5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2tPaVprMjM1NW91YWRRV192bU80cjZDbmV1ay5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkYyQjE0LzQzRjgxQjU4RUQxQzExRUE5RjgzOEM1NUY4
QUVBMjI4L0QzMThDQzhDNjBBRDExRjE4MzRCMzNEMkNFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALELrgwDQYJKoZIhvcNAQEL
BQADggEBADVytC0uiu2JGa5l20vOX443ItyieiJKFsYnefKw7l5Zkw+dKtPaieoA
op9wfU0J4GKCpWtGt7NSSquhqe4Oim9SuBbiUIgJ7Ug60EtqVDeV9I8eonCrqYKr
jXWR2OJrfebCkfHGuH+E0f4X0sdjCM/bvru3HOTy/g0suVtBZkg/RBgRdOQjgL24
tfb2+IJxbBOx8QjSSt/csQ/UHDvn7smPzybxV888sIMcEKn41/cH4DCfPQGxyw+e
+ZuuncdmJ+fpUJog+Z+08yaFqX5sKUO1Z+YWdIM/r+l4HIeryxhP3Xlkg/lG1LyL
qVGUfCanrY/claH5+UQ21CWibd23SiM=
-----END CERTIFICATE-----
Generated at Sat Jun 13 05:45:28 2026 by rpki-client