Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362B8A8/B5C94E4C9C2511EBAD78FF53F8AEA228/DA69750684CD11F19045A2C3CE1D38B0.roa
File:                     DA69750684CD11F19045A2C3CE1D38B0.roa (raw, json)
Hash identifier:          1uwkY55OYXRSudwaNkFwqQWOniZ4GFdGkJ3WLBKwqLQ=
Subject key identifier:   58:48:8D:31:9C:A2:3A:5D:38:BB:A0:6A:15:62:0B:78:CA:B3:CF:82
Certificate issuer:       /CN=F362B8A8AF/serialNumber=DF376480DCF07A1B7AD164DE64A3EA215F247541
Certificate serial:       0803
Authority key identifier: DF:37:64:80:DC:F0:7A:1B:7A:D1:64:DE:64:A3:EA:21:5F:24:75:41
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/3zdkgNzweht60WTeZKPqIV8kdUE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362B8A8/B5C94E4C9C2511EBAD78FF53F8AEA228/DA69750684CD11F19045A2C3CE1D38B0.roa
Signing time:             Tue 21 Jul 2026 06:31:50 +0000
ROA not before:           Tue 21 Jul 2026 06:31:45 +0000
ROA not after:            Mon 21 Jul 2036 06:31:45 +0000
asID:                     37053
IP address blocks:        102.215.212.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362B8A8/B5C94E4C9C2511EBAD78FF53F8AEA228/3zdkgNzweht60WTeZKPqIV8kdUE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362B8A8/B5C94E4C9C2511EBAD78FF53F8AEA228/3zdkgNzweht60WTeZKPqIV8kdUE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/3zdkgNzweht60WTeZKPqIV8kdUE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 26 Jul 2026 00:07:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2051 (0x803)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362B8A8AF, serialNumber=DF376480DCF07A1B7AD164DE64A3EA215F247541
        Validity
            Not Before: Jul 21 06:31:45 2026 GMT
            Not After : Jul 21 06:31:45 2036 GMT
        Subject: CN=6a5f1255-1c30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:1d:81:8c:5d:7b:70:a4:56:8c:0b:d3:81:ba:
                    18:5a:60:da:7a:bb:47:a1:3c:89:a2:b7:36:22:0d:
                    8a:a4:57:ff:5b:7f:14:f9:b2:d3:59:47:48:cd:31:
                    40:bf:cb:b0:e9:ba:6a:5b:7c:6d:3e:ca:c9:fe:39:
                    c6:b9:67:0f:ec:6b:d2:35:2d:21:bc:d1:3d:31:65:
                    15:57:b6:71:3e:2c:b2:24:b2:58:22:8f:a1:f8:82:
                    f3:e8:43:02:6b:12:18:13:45:3d:0f:e9:1c:92:dd:
                    b4:29:17:2f:1e:59:00:44:7b:5c:23:72:4b:c9:0b:
                    39:59:ca:60:89:7f:1a:9f:76:0a:55:80:dc:b4:a8:
                    3d:ba:a1:7d:72:67:3e:93:1a:51:66:f6:54:97:d9:
                    42:be:41:13:71:93:ef:d4:fa:72:3d:b6:22:6a:c1:
                    da:87:82:f1:35:1b:c1:c9:4f:9a:c0:7d:2c:b0:8d:
                    92:00:f8:a3:94:d7:f5:4c:80:1c:36:da:5a:b5:55:
                    df:1f:f0:97:e0:d3:ce:47:cd:cc:cc:97:1f:1d:a8:
                    22:9d:e1:4e:89:ff:8e:6d:7b:07:fb:25:d6:5f:44:
                    5e:c3:34:47:d5:c8:1f:a5:cd:b6:8a:e8:9e:66:68:
                    86:9f:1f:38:cc:7c:19:16:47:9c:e6:07:2a:31:d2:
                    09:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:48:8D:31:9C:A2:3A:5D:38:BB:A0:6A:15:62:0B:78:CA:B3:CF:82
            X509v3 Authority Key Identifier:
                keyid:DF:37:64:80:DC:F0:7A:1B:7A:D1:64:DE:64:A3:EA:21:5F:24:75:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362B8A8/B5C94E4C9C2511EBAD78FF53F8AEA228/3zdkgNzweht60WTeZKPqIV8kdUE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/3zdkgNzweht60WTeZKPqIV8kdUE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362B8A8/B5C94E4C9C2511EBAD78FF53F8AEA228/DA69750684CD11F19045A2C3CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.215.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         23:fb:af:64:1a:23:68:e1:3c:5a:fd:c9:0a:ce:82:59:8c:2e:
         49:ad:88:ba:97:32:bc:ee:56:b7:24:73:b3:18:db:32:e3:a9:
         05:c2:c6:16:49:f4:e9:6a:db:e1:57:24:b9:89:c4:50:98:66:
         9e:a6:18:a8:65:3c:1a:13:5b:9a:f2:8b:2c:7c:c9:e0:aa:2d:
         e4:66:5d:8c:e0:e9:b8:4b:fc:44:c6:07:99:d1:56:02:a8:40:
         e9:76:e8:5c:0f:de:71:e2:38:54:3a:b6:9c:f4:40:89:71:8d:
         d8:90:ff:cc:24:b3:9a:6a:1e:86:c5:e9:1c:03:97:0d:71:66:
         a2:50:a8:12:aa:0a:e5:c2:87:33:0d:5c:0b:94:9f:b7:5d:2f:
         0f:ac:04:ff:89:9a:61:f6:7c:96:b9:49:3b:69:10:ec:90:0b:
         e3:27:40:16:69:83:4e:79:fd:eb:19:f8:ef:59:c5:49:6a:ce:
         00:f0:e4:25:d8:8e:b5:f9:7a:56:bb:05:cf:a6:43:fe:0b:55:
         16:50:e6:e2:15:d8:da:8e:50:37:1a:52:59:bc:2a:f1:4b:aa:
         f8:1d:77:92:df:9b:5d:57:b3:f5:ff:d7:3c:5b:9d:91:8d:0f:
         39:6d:20:f4:0f:e8:27:29:50:40:ab:17:35:58:b0:eb:31:db:
         00:5b:ee:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:59:24 2026 by rpki-client