Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/26E616D447A011F1AD9F3EE9CE1D38B0.roa
File:                     26E616D447A011F1AD9F3EE9CE1D38B0.roa (raw, json)
Hash identifier:          0xp0/ebXb3W3EhJUtpULdby3XNB5Jonq7VYyw3KiTdg=
Subject key identifier:   A0:64:39:39:33:4E:FF:FA:95:CA:F0:C1:94:34:9B:AE:14:DC:BB:4D
Certificate issuer:       /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial:       1130
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/26E616D447A011F1AD9F3EE9CE1D38B0.roa
Signing time:             Mon 04 May 2026 10:01:00 +0000
ROA not before:           Mon 04 May 2026 10:00:56 +0000
ROA not after:            Wed 05 May 2027 10:00:56 +0000
asID:                     55154
IP address blocks:        196.251.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 14 May 2026 10:40:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4400 (0x1130)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
        Validity
            Not Before: May  4 10:00:56 2026 GMT
            Not After : May  5 10:00:56 2027 GMT
        Subject: CN=69f86e5c-3988
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:20:6b:c5:c5:e2:1d:22:e8:f4:66:e9:04:f3:
                    d9:14:58:6d:f1:98:6f:15:82:e0:1d:1f:5e:f3:c7:
                    9a:4d:44:1e:0f:ee:37:4d:65:30:18:2d:98:bc:2b:
                    ff:67:e1:ca:0b:94:e0:ac:c8:8d:ca:74:69:0a:a1:
                    26:f6:a2:dd:df:28:ab:e8:7a:24:03:bd:7e:85:61:
                    ca:1f:38:df:eb:b3:7c:e3:4d:72:72:38:53:42:a8:
                    7d:63:ff:65:f8:80:71:e6:15:0e:ea:c6:6f:96:f9:
                    8e:55:dc:38:56:02:81:72:9c:5d:2d:b2:df:66:6c:
                    c1:36:be:ee:9b:3f:c3:db:3a:7f:0d:6f:15:22:8f:
                    11:88:b9:8c:45:c6:c6:3a:46:29:c4:c3:75:f1:1b:
                    0b:3d:21:b1:25:1e:e5:ce:78:e9:92:11:66:22:67:
                    7c:07:eb:b2:77:9b:ec:9f:6f:ad:71:00:86:a8:ff:
                    9a:a3:c9:3b:63:29:71:8d:78:a9:76:b0:23:fd:a2:
                    c8:08:af:f5:a9:d6:c8:9c:e1:bb:52:24:17:6b:6d:
                    77:05:85:26:b1:0d:2c:f4:f3:28:6f:f2:b3:c9:39:
                    53:5d:38:be:d5:70:d8:1b:5d:48:8c:88:78:2a:61:
                    bf:9e:77:bb:5c:0e:ed:6f:a6:ff:36:15:64:72:69:
                    56:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:64:39:39:33:4E:FF:FA:95:CA:F0:C1:94:34:9B:AE:14:DC:BB:4D
            X509v3 Authority Key Identifier:
                keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/26E616D447A011F1AD9F3EE9CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.251.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:d4:cd:9a:34:76:cf:f7:ba:3a:8a:66:74:55:28:03:ab:62:
         e5:d6:89:79:75:ba:3e:c9:d3:88:6e:33:90:9e:dd:c8:e6:c7:
         c0:d2:fb:f5:67:77:b0:a1:bf:18:91:9a:0e:a2:71:0f:cd:86:
         d2:31:21:15:5a:fa:d5:a9:fe:e5:ba:99:1b:b5:d4:27:f1:39:
         f2:8b:60:53:de:fb:c8:8a:a1:b0:a1:cf:54:ed:e6:c2:8b:b9:
         1e:d3:0f:35:39:32:ea:a5:10:d4:e6:e6:85:70:9c:60:04:e4:
         43:8a:e0:d0:d6:d6:c4:6e:e7:33:f3:36:a0:6d:65:18:93:f3:
         cc:ea:4a:fd:a0:4c:16:38:af:57:30:14:3e:1b:68:0a:19:79:
         5f:8a:cd:1e:be:dc:82:0b:f7:5d:6f:62:ec:99:01:51:06:22:
         d6:07:aa:2f:93:30:f3:fa:b9:cb:11:c3:99:5a:d3:96:d3:70:
         a8:d2:96:a0:0c:3a:2d:9d:ed:75:ff:72:07:77:5c:10:3c:e0:
         ce:7e:62:1e:8a:d3:75:38:d1:3e:36:28:84:36:1c:cf:b4:60:
         6a:c0:7b:8a:da:1a:46:8c:ab:a1:86:a2:d6:73:be:75:f4:8e:
         b1:e7:03:d7:91:c1:fe:7e:8b:80:eb:bd:8b:46:27:c9:c8:56:
         dd:47:89:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:10:07 2026 by rpki-client