Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/36AB445A479A11F1A8978EC7CE1D38B0.roa
File:                     36AB445A479A11F1A8978EC7CE1D38B0.roa (raw, json)
Hash identifier:          bIkVTN+4nJyUhN1rrKy98SsKwwWAAIaJVyl0ZNi4nK8=
Subject key identifier:   4E:52:79:17:88:09:03:E2:6D:C7:E0:B5:7E:7D:C3:06:DF:5C:57:55
Certificate issuer:       /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial:       1112
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/36AB445A479A11F1A8978EC7CE1D38B0.roa
Signing time:             Mon 04 May 2026 09:18:30 +0000
ROA not before:           Mon 04 May 2026 09:18:25 +0000
ROA not after:            Wed 05 May 2027 09:18:25 +0000
asID:                     55154
IP address blocks:        196.251.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 14 May 2026 10:40:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4370 (0x1112)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
        Validity
            Not Before: May  4 09:18:25 2026 GMT
            Not After : May  5 09:18:25 2027 GMT
        Subject: CN=69f86465-0abf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:49:9b:fa:92:08:da:ab:de:bd:0c:59:af:c6:
                    50:b7:96:93:13:85:57:c6:00:ed:1b:1f:21:d7:24:
                    81:d3:1f:55:22:01:09:31:30:0c:de:ec:5b:48:f5:
                    da:bf:44:cb:4d:d3:04:5f:b9:5f:93:0b:0e:53:c8:
                    9b:d1:09:c8:6b:42:9e:1f:dc:6c:9e:48:c1:e6:79:
                    95:e7:cf:67:2c:ce:e4:04:e5:41:6c:8f:4c:a6:9a:
                    d8:bb:3b:e2:17:99:15:3b:8f:98:06:09:68:6f:e6:
                    9f:bf:71:b7:c3:8e:24:8d:10:15:e3:b8:d6:b6:16:
                    69:fe:ef:d5:04:96:49:ac:ce:72:fd:5d:85:f8:5b:
                    19:34:85:3e:85:58:e5:93:dd:68:4c:ed:fc:f1:b2:
                    09:db:b8:5f:0e:4d:ed:4d:4e:e6:8b:1a:2a:61:03:
                    4f:9b:3c:e4:6c:b1:cd:3b:fd:70:35:6d:9f:70:f2:
                    8d:1b:58:5a:a5:67:94:8e:81:51:27:86:f9:b9:6c:
                    ad:5e:13:f9:50:4f:82:e0:a0:55:53:28:83:50:b6:
                    1e:a2:3d:19:8a:07:03:a3:87:37:42:75:33:1d:f1:
                    56:ee:ae:76:56:bd:67:a9:b0:a5:75:20:84:b4:6a:
                    5d:36:fa:7d:d6:cf:1c:50:f7:46:27:c7:25:ab:3f:
                    4a:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:52:79:17:88:09:03:E2:6D:C7:E0:B5:7E:7D:C3:06:DF:5C:57:55
            X509v3 Authority Key Identifier:
                keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/36AB445A479A11F1A8978EC7CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.251.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:b0:73:b6:da:dd:ee:23:8b:67:b6:81:e5:09:f1:e4:37:c1:
         ec:9d:7f:8c:cb:ae:69:96:54:de:0f:fb:cd:69:f5:5f:d9:e1:
         f6:4a:88:1b:5a:72:6e:7e:3c:32:8e:28:f9:46:f2:32:6b:58:
         c4:23:54:a8:36:de:26:61:d6:15:f4:d0:64:3d:f1:73:95:e9:
         d8:a7:71:96:25:13:fb:be:ec:44:1e:45:c5:29:e2:e9:14:4e:
         ec:80:b0:a7:ad:3d:0f:36:30:f2:23:f5:74:c0:06:1c:e5:4f:
         c3:9c:01:b2:c3:6e:60:62:cd:50:b9:f7:00:91:ac:e8:c3:fa:
         b1:4f:17:68:90:3e:56:95:95:89:9c:6b:73:b2:97:af:44:99:
         29:88:c3:65:0a:de:18:29:2d:26:9c:27:66:41:21:d8:19:77:
         5a:83:46:2a:17:79:f8:c8:80:e6:0e:cf:aa:e5:56:a8:51:40:
         fa:39:54:69:19:95:87:76:ad:5f:c4:0d:27:46:6f:b5:4b:9b:
         ee:8e:a9:b9:af:6f:ee:51:49:71:92:da:b6:be:30:25:a4:57:
         30:18:d7:66:10:2b:c8:2c:e7:5a:7a:44:ac:0f:82:c1:e4:1d:
         d9:b0:fa:8b:60:c6:60:aa:db:f3:c4:65:ec:e6:3b:53:df:72:
         8a:5c:c5:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:59:06 2026 by rpki-client