Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363CC24/F12D22986CCF11ED858882A2F1222468/927918B47E9211F1B10E100BCF1D38B0.roa
File:                     927918B47E9211F1B10E100BCF1D38B0.roa (raw, json)
Hash identifier:          t1dmJ5rTWfJPttLndRXr3M5OZ9VvePtT9qEnQGPsMKA=
Subject key identifier:   42:25:21:32:E3:D0:A6:2A:1A:3E:50:5E:2F:37:8B:F2:51:09:4B:F4
Certificate issuer:       /CN=F363CC24AF/serialNumber=22585A9073DBD8DC7A5504457FF9DC789729744E
Certificate serial:       055E
Authority key identifier: 22:58:5A:90:73:DB:D8:DC:7A:55:04:45:7F:F9:DC:78:97:29:74:4E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/IlhakHPb2Nx6VQRFf_nceJcpdE4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363CC24/F12D22986CCF11ED858882A2F1222468/927918B47E9211F1B10E100BCF1D38B0.roa
Signing time:             Mon 13 Jul 2026 08:12:22 +0000
ROA not before:           Mon 13 Jul 2026 08:12:17 +0000
ROA not after:            Sun 01 Jul 2046 08:12:17 +0000
asID:                     328029
IP address blocks:        196.61.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363CC24/F12D22986CCF11ED858882A2F1222468/IlhakHPb2Nx6VQRFf_nceJcpdE4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363CC24/F12D22986CCF11ED858882A2F1222468/IlhakHPb2Nx6VQRFf_nceJcpdE4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/IlhakHPb2Nx6VQRFf_nceJcpdE4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 25 Jul 2026 16:12:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1374 (0x55e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363CC24AF, serialNumber=22585A9073DBD8DC7A5504457FF9DC789729744E
        Validity
            Not Before: Jul 13 08:12:17 2026 GMT
            Not After : Jul  1 08:12:17 2046 GMT
        Subject: CN=6a549de5-6c2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:83:73:96:21:51:a8:60:0a:ee:8c:0c:d5:97:
                    bc:8a:76:42:c8:b0:d9:45:0d:ce:42:c8:4e:36:fb:
                    1d:b7:3c:36:82:f7:ae:a7:74:dc:19:fe:15:e9:d0:
                    52:1e:f3:c5:17:ec:6b:9a:58:52:85:4e:92:9b:18:
                    14:0a:2f:05:74:5f:c4:43:af:db:ae:66:ec:3f:b5:
                    c5:84:fb:f4:ac:4b:be:b9:66:11:7a:75:19:73:c2:
                    53:a6:26:8c:61:5b:4c:45:34:32:f3:13:f7:cc:08:
                    0e:c4:22:6b:16:04:ed:50:22:69:24:95:05:3d:b0:
                    ba:34:11:8a:ae:e1:ae:2b:d4:0d:06:87:6c:4e:6f:
                    68:7d:5b:97:ed:ce:ef:f9:63:d1:77:4c:8c:0e:12:
                    c1:da:65:7c:18:cf:71:b2:52:b7:bd:55:d4:9b:71:
                    40:a9:cb:c0:9e:a0:2d:82:f3:27:8d:e4:d5:58:94:
                    7e:7a:4c:7c:4b:04:8d:69:df:1c:64:15:3c:d4:ff:
                    da:eb:84:db:7b:bf:e8:06:0a:0a:6e:2b:53:62:99:
                    f4:85:76:e2:ec:0a:d5:a9:e5:c3:9c:d2:4e:da:d5:
                    c0:7c:8a:83:ab:77:a7:62:6c:64:0d:2f:8e:ad:87:
                    95:1f:53:2c:3f:7b:70:9f:34:f5:dd:fb:74:ea:82:
                    95:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:25:21:32:E3:D0:A6:2A:1A:3E:50:5E:2F:37:8B:F2:51:09:4B:F4
            X509v3 Authority Key Identifier:
                keyid:22:58:5A:90:73:DB:D8:DC:7A:55:04:45:7F:F9:DC:78:97:29:74:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363CC24/F12D22986CCF11ED858882A2F1222468/IlhakHPb2Nx6VQRFf_nceJcpdE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/IlhakHPb2Nx6VQRFf_nceJcpdE4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363CC24/F12D22986CCF11ED858882A2F1222468/927918B47E9211F1B10E100BCF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.61.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         c7:7d:a0:78:95:a2:ac:c8:76:2c:5c:66:5c:8f:5d:ef:36:6a:
         01:fa:d9:e3:87:f3:e7:50:3b:23:e6:1a:9c:17:6d:e5:25:00:
         48:39:73:c5:35:dc:c1:57:13:e3:1a:b5:54:1b:84:6b:c2:46:
         8e:bf:a4:67:17:a2:bd:61:79:54:0b:f8:ed:b0:43:ba:77:03:
         b4:a9:9a:f9:88:5b:1d:0d:c3:79:ba:07:ab:b0:f9:fd:1e:f9:
         d4:0b:92:68:a6:10:47:61:6e:a0:2a:68:ea:ac:e7:ef:90:78:
         28:4e:cd:d7:08:d3:60:1f:9f:85:26:ad:a5:86:19:fe:86:c3:
         81:13:c9:36:e0:40:25:8f:77:2d:83:48:da:1e:9b:89:77:77:
         2d:80:52:6a:aa:e5:14:dd:55:b3:e8:cf:3f:8c:d0:e9:3e:20:
         c6:aa:32:86:cf:92:6b:60:cc:00:b2:3f:7e:27:46:f6:da:57:
         82:ad:4e:0b:58:89:fd:5b:55:3a:2e:16:8f:23:08:38:66:c3:
         41:eb:4d:41:fb:8e:fb:00:21:3e:e0:b5:69:ec:5f:28:36:2a:
         0c:b3:62:c6:82:fc:a2:8f:df:e4:30:c7:00:fd:3a:28:3b:97:
         58:c0:14:9a:1f:61:96:31:fb:c5:47:0c:63:b1:6d:c6:85:0d:
         35:d8:2e:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:07:12 2026 by rpki-client