Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363D469/4468EECA9BF511EDBA51D1A3F1222468/6B0CF4A01BB211F1BF1363BCDAE4EC9C.roa
File:                     6B0CF4A01BB211F1BF1363BCDAE4EC9C.roa (raw, json)
Hash identifier:          zqrxmGzHxf00Ful8fe2O7UdKyjTFD4P58fcJp6Qx10M=
Subject key identifier:   9D:1D:7C:36:8F:BA:C0:FD:61:D7:6A:21:57:16:1E:BF:58:02:28:73
Certificate issuer:       /CN=F363D469AF/serialNumber=B81EA23A178F6080E7D80EF306B004E9A1DCE110
Certificate serial:       04A9
Authority key identifier: B8:1E:A2:3A:17:8F:60:80:E7:D8:0E:F3:06:B0:04:E9:A1:DC:E1:10
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/uB6iOhePYIDn2A7zBrAE6aHc4RA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363D469/4468EECA9BF511EDBA51D1A3F1222468/6B0CF4A01BB211F1BF1363BCDAE4EC9C.roa
Signing time:             Mon 09 Mar 2026 12:20:54 +0000
ROA not before:           Mon 09 Mar 2026 12:20:50 +0000
ROA not after:            Sun 09 Mar 2036 12:20:50 +0000
asID:                     328253
IP address blocks:        2c0f:4cc0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363D469/4468EECA9BF511EDBA51D1A3F1222468/uB6iOhePYIDn2A7zBrAE6aHc4RA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363D469/4468EECA9BF511EDBA51D1A3F1222468/uB6iOhePYIDn2A7zBrAE6aHc4RA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/uB6iOhePYIDn2A7zBrAE6aHc4RA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1193 (0x4a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363D469AF, serialNumber=B81EA23A178F6080E7D80EF306B004E9A1DCE110
        Validity
            Not Before: Mar  9 12:20:50 2026 GMT
            Not After : Mar  9 12:20:50 2036 GMT
        Subject: CN=69aebb26-7bfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:d8:fe:b5:44:b1:e2:e5:88:f2:af:9b:8c:38:
                    96:04:73:9b:69:d3:62:a2:53:5a:b7:45:91:5c:16:
                    c3:a9:b6:2c:82:db:ab:fa:cf:ad:e3:ac:d5:86:4f:
                    76:31:18:23:15:fe:ec:f7:3a:29:e9:61:32:ef:6f:
                    76:e1:55:56:b0:36:0a:fb:97:76:b3:c9:2a:26:96:
                    4a:91:fc:73:f3:94:71:bb:f4:b6:17:a1:dd:c0:45:
                    4a:ae:28:98:7a:a7:8a:3b:98:ea:66:ce:39:d8:29:
                    38:9f:ea:08:22:21:84:4b:6e:f2:1b:88:c0:ea:03:
                    59:51:16:19:0a:21:25:42:f6:f4:73:a9:b7:55:5b:
                    c4:e0:f0:8d:a0:59:7d:c2:4f:0d:22:c9:d9:68:70:
                    93:6a:db:4c:f6:d7:c6:43:60:55:e2:1d:ed:f0:9d:
                    a3:7a:f1:8d:c0:38:3a:50:85:fe:22:1e:b6:4b:79:
                    c6:79:38:ba:3f:7a:c7:5a:17:63:77:dc:d1:d4:d3:
                    78:d6:db:d3:37:67:20:74:34:f4:81:15:7b:6f:14:
                    c0:df:80:8e:38:f7:c1:3b:e0:91:2d:cd:4d:db:0e:
                    55:a1:c9:73:25:9b:e8:d1:5e:73:1f:57:ec:b7:54:
                    cc:86:b3:1a:33:aa:7a:bb:78:a1:42:ca:14:a2:84:
                    52:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:1D:7C:36:8F:BA:C0:FD:61:D7:6A:21:57:16:1E:BF:58:02:28:73
            X509v3 Authority Key Identifier:
                keyid:B8:1E:A2:3A:17:8F:60:80:E7:D8:0E:F3:06:B0:04:E9:A1:DC:E1:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363D469/4468EECA9BF511EDBA51D1A3F1222468/uB6iOhePYIDn2A7zBrAE6aHc4RA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/uB6iOhePYIDn2A7zBrAE6aHc4RA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363D469/4468EECA9BF511EDBA51D1A3F1222468/6B0CF4A01BB211F1BF1363BCDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:4cc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         3c:6d:15:a1:d6:03:62:1e:ac:65:e6:b5:30:2e:43:b1:0f:46:
         7d:b8:0a:3a:ad:e7:28:cc:46:39:3d:7d:6f:94:5b:18:3f:89:
         82:fc:02:de:a1:47:40:99:d0:41:a3:02:5e:65:4c:dc:22:ee:
         8a:a6:70:4b:f6:6a:55:fd:ed:fc:44:4e:46:3e:f3:4a:99:af:
         be:2f:48:cb:a3:62:e9:22:24:0d:2b:f4:ef:13:94:01:ec:3e:
         4b:6c:af:e7:f5:37:82:35:58:77:ff:e2:e4:cb:47:3b:64:68:
         dc:b6:9e:aa:7e:37:95:98:70:b1:a8:b5:ed:ac:92:ab:57:99:
         bc:95:81:1d:2c:7d:05:06:04:9e:a5:76:96:83:71:7b:9a:25:
         74:8e:d0:9e:3b:a2:8c:be:be:29:e4:6d:bb:ea:d6:70:fb:6e:
         ae:5a:da:bc:43:f1:16:75:06:c0:d3:bc:7e:f5:bb:4c:2b:d7:
         1e:f0:9b:23:8e:a7:10:c3:ad:c0:8c:f8:6f:69:65:8d:a0:38:
         74:96:8c:87:50:c4:fc:29:e4:96:8a:00:5b:37:5f:59:d1:c2:
         98:ff:b9:3d:02:df:c2:38:8b:e7:09:11:6d:d6:dc:77:be:08:
         ee:df:01:03:d9:75:6e:99:4a:2a:c0:d2:ca:69:83:41:46:fa:
         6d:94:f8:b2
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBKkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
M0Q0NjlBRjExMC8GA1UEBRMoQjgxRUEyM0ExNzhGNjA4MEU3RDgwRUYzMDZCMDA0
RTlBMURDRTExMDAeFw0yNjAzMDkxMjIwNTBaFw0zNjAzMDkxMjIwNTBaMBgxFjAU
BgNVBAMTDTY5YWViYjI2LTdiZmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDe2P61RLHi5Yjyr5uMOJYEc5tp02KiU1q3RZFcFsOptiyC26v6z63jrNWG
T3YxGCMV/uz3OinpYTLvb3bhVVawNgr7l3azySomlkqR/HPzlHG79LYXod3ARUqu
KJh6p4o7mOpmzjnYKTif6ggiIYRLbvIbiMDqA1lRFhkKISVC9vRzqbdVW8Tg8I2g
WX3CTw0iydlocJNq20z218ZDYFXiHe3wnaN68Y3AODpQhf4iHrZLecZ5OLo/esda
F2N33NHU03jW29M3ZyB0NPSBFXtvFMDfgI4498E74JEtzU3bDlWhyXMlm+jRXnMf
V+y3VMyGsxozqnq7eKFCyhSihFKpAgMBAAGjggKmMIICojAdBgNVHQ4EFgQUnR18
No+6wP1h12ohVxYev1gCKHMwHwYDVR0jBBgwFoAUuB6iOhePYIDn2A7zBrAE6aHc
4RAwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjNENDY5LzQ0NjhFRUNBOUJGNTExRURCQTUxRDFBM0YxMjIyNDY4L3VCNmlP
aGVQWUlEbjJBN3pCckFFNmFIYzRSQS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3VCNmlPaGVQWUlEbjJBN3pCckFFNmFIYzRSQS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjNENDY5LzQ0NjhFRUNBOUJGNTExRURCQTUxRDFBM0Yx
MjIyNDY4LzZCMENGNEEwMUJCMjExRjFCRjEzNjNCQ0RBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAsD0zAMA0GCSqGSIb3DQEB
CwUAA4IBAQA8bRWh1gNiHqxl5rUwLkOxD0Z9uAo6recozEY5PX1vlFsYP4mC/ALe
oUdAmdBBowJeZUzcIu6KpnBL9mpV/e38RE5GPvNKma++L0jLo2LpIiQNK/TvE5QB
7D5LbK/n9TeCNVh3/+Lky0c7ZGjctp6qfjeVmHCxqLXtrJKrV5m8lYEdLH0FBgSe
pXaWg3F7miV0jtCeO6KMvr4p5G276tZw+26uWtq8Q/EWdQbA07x+9btMK9ce8Jsj
jqcQw63AjPhvaWWNoDh0loyHUMT8KeSWigBbN19Z0cKY/7k9At/COIvnCRFt1tx3
vgju3wED2XVumUoqwNLKaYNBRvptlPiy
-----END CERTIFICATE-----
Generated at Fri Mar 27 00:07:29 2026 by rpki-client