Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363CC24/056BF3E26CD011ED8D69ACA2F1222468/55CCADD2846D11F19B6D63E3CE1D38B0.roa
File:                     55CCADD2846D11F19B6D63E3CE1D38B0.roa (raw, json)
Hash identifier:          Co4M2YUZIIMwZ/Mjl/UOCazGGG1y5Ehn76wqFaDQ03I=
Subject key identifier:   CA:41:72:36:F0:B0:50:5A:2D:45:9D:29:6A:E1:7B:91:97:E5:5A:4A
Certificate issuer:       /CN=F363CC24AR/serialNumber=A9CB76AF6BC2B486D581AF29A19E595D9C04CD04
Certificate serial:       0562
Authority key identifier: A9:CB:76:AF:6B:C2:B4:86:D5:81:AF:29:A1:9E:59:5D:9C:04:CD:04
Authority info access:    rsync://rpki.afrinic.net/repository/arin/qct2r2vCtIbVga8poZ5ZXZwEzQQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363CC24/056BF3E26CD011ED8D69ACA2F1222468/55CCADD2846D11F19B6D63E3CE1D38B0.roa
Signing time:             Mon 20 Jul 2026 19:00:55 +0000
ROA not before:           Mon 20 Jul 2026 19:00:51 +0000
ROA not after:            Sun 01 Jul 2046 19:00:51 +0000
asID:                     328029
IP address blocks:        160.119.0.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363CC24/056BF3E26CD011ED8D69ACA2F1222468/qct2r2vCtIbVga8poZ5ZXZwEzQQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363CC24/056BF3E26CD011ED8D69ACA2F1222468/qct2r2vCtIbVga8poZ5ZXZwEzQQ.mft
                          rsync://rpki.afrinic.net/repository/arin/qct2r2vCtIbVga8poZ5ZXZwEzQQ.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 26 Jul 2026 00:26:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1378 (0x562)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363CC24AR, serialNumber=A9CB76AF6BC2B486D581AF29A19E595D9C04CD04
        Validity
            Not Before: Jul 20 19:00:51 2026 GMT
            Not After : Jul  1 19:00:51 2046 GMT
        Subject: CN=6a5e7067-906c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:6c:95:5f:bf:ad:16:53:b6:65:b4:66:19:c4:
                    6c:ba:da:0e:2e:b4:2e:a1:81:a9:a5:0c:55:96:87:
                    d1:b5:e3:c9:41:60:0c:47:ac:0a:2f:3a:e9:97:37:
                    fb:4c:51:de:ce:25:be:af:f8:3e:30:5b:2e:84:aa:
                    05:1e:f0:9b:27:ad:d7:ea:8d:96:ff:31:1e:ee:48:
                    a7:59:33:2a:57:01:e4:eb:96:d0:3a:80:f4:46:0d:
                    f6:df:e9:9a:cc:4b:31:3f:7b:ca:02:54:3a:dc:da:
                    71:a5:71:eb:12:9e:ba:7c:ea:e8:10:8f:b4:96:35:
                    14:10:9a:5e:fb:82:3c:33:53:da:28:9c:e0:bc:63:
                    1a:67:ce:57:cf:d3:5c:51:78:28:75:9f:30:1d:f5:
                    a6:ab:61:da:a8:0d:2b:06:0a:31:4d:ee:a6:82:8e:
                    d1:12:3f:69:be:e6:c1:fe:75:63:b8:8e:ce:1a:f2:
                    81:f7:eb:2a:65:91:8d:c0:66:5a:62:40:18:30:48:
                    ce:24:da:61:2a:e7:90:bf:04:3d:38:fe:a7:ab:79:
                    ff:09:19:fd:4d:e1:46:64:2a:32:b2:18:9f:a0:6f:
                    26:13:69:d5:d0:26:92:1c:bb:94:2c:bb:95:9c:90:
                    0e:1f:57:2a:8e:4b:0b:95:e5:19:09:4b:7e:a7:35:
                    51:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:41:72:36:F0:B0:50:5A:2D:45:9D:29:6A:E1:7B:91:97:E5:5A:4A
            X509v3 Authority Key Identifier:
                keyid:A9:CB:76:AF:6B:C2:B4:86:D5:81:AF:29:A1:9E:59:5D:9C:04:CD:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363CC24/056BF3E26CD011ED8D69ACA2F1222468/qct2r2vCtIbVga8poZ5ZXZwEzQQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/qct2r2vCtIbVga8poZ5ZXZwEzQQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363CC24/056BF3E26CD011ED8D69ACA2F1222468/55CCADD2846D11F19B6D63E3CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.119.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         18:ce:1d:d9:83:8a:53:93:ec:f7:16:a8:c6:a8:90:87:20:d9:
         6a:0b:e8:27:7d:74:10:dc:fd:f1:78:3c:fb:5b:1b:11:10:a7:
         19:b3:4a:a5:71:bc:f3:de:44:36:bb:f4:5b:65:b4:47:ec:7e:
         b5:fa:fa:ad:91:f3:65:5c:27:3b:7a:6c:58:ee:0f:8a:c4:50:
         75:b5:78:2e:28:8d:f2:87:9f:ea:6f:f7:84:4f:2a:3c:c9:fc:
         1e:44:de:8e:08:32:2c:3c:99:71:bc:e4:32:7e:30:16:97:d3:
         db:74:69:81:9e:88:07:64:4e:46:81:2b:78:25:ed:bf:70:25:
         cd:d8:37:49:36:52:41:0a:9d:f3:0e:54:4c:2e:c4:c3:bd:9f:
         a5:78:e4:d7:cb:41:4e:5e:1b:5e:21:58:69:8b:48:38:5f:53:
         3f:22:24:dc:ea:8d:70:9a:7b:b4:e3:bb:59:c1:4d:a2:e1:bc:
         54:a5:17:cb:d0:55:50:67:e2:40:03:6c:9e:71:2f:6c:77:93:
         a9:19:6a:d2:d5:fb:d1:eb:e3:97:73:cd:33:ab:bb:34:a1:9c:
         a3:64:94:ab:51:2f:7c:31:6f:78:39:ab:28:12:d6:d7:94:08:
         63:dc:36:9e:4e:4f:83:42:26:3a:50:b1:ec:63:0e:75:00:55:
         5b:9e:a7:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:41:45 2026 by rpki-client