Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364379D/67C6AD4CBF3D11EDA6BF88F1F1222468/8187B4F485CA11F1910971BFCE1D38B0.roa
File:                     8187B4F485CA11F1910971BFCE1D38B0.roa (raw, json)
Hash identifier:          MUhyY35RIQ7mJxQxOOJkiFFWoyA7V3uNiEOaAsw+ZGQ=
Subject key identifier:   FE:0F:F6:27:C5:AC:C7:4D:D1:B0:10:75:1B:73:4E:54:64:3B:DA:9C
Certificate issuer:       /CN=F364379DAF/serialNumber=100CBD464A905A5B568F7ADCEF1F9D20BC752331
Certificate serial:       0501
Authority key identifier: 10:0C:BD:46:4A:90:5A:5B:56:8F:7A:DC:EF:1F:9D:20:BC:75:23:31
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/EAy9RkqQWltWj3rc7x-dILx1IzE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364379D/67C6AD4CBF3D11EDA6BF88F1F1222468/8187B4F485CA11F1910971BFCE1D38B0.roa
Signing time:             Wed 22 Jul 2026 12:40:23 +0000
ROA not before:           Wed 22 Jul 2026 12:40:19 +0000
ROA not after:            Tue 31 Jul 2035 12:40:19 +0000
asID:                     37014
IP address blocks:        102.201.232.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364379D/67C6AD4CBF3D11EDA6BF88F1F1222468/EAy9RkqQWltWj3rc7x-dILx1IzE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364379D/67C6AD4CBF3D11EDA6BF88F1F1222468/EAy9RkqQWltWj3rc7x-dILx1IzE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/EAy9RkqQWltWj3rc7x-dILx1IzE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 26 Jul 2026 00:07:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1281 (0x501)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364379DAF, serialNumber=100CBD464A905A5B568F7ADCEF1F9D20BC752331
        Validity
            Not Before: Jul 22 12:40:19 2026 GMT
            Not After : Jul 31 12:40:19 2035 GMT
        Subject: CN=6a60ba37-dde6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:9f:1d:e1:9f:fc:32:0e:a1:36:db:2b:09:05:
                    b5:aa:4b:9f:6d:a4:b2:af:69:25:53:0a:5e:50:11:
                    0c:54:86:88:f2:d8:73:8d:31:31:53:b6:86:d7:d3:
                    ac:5a:e3:40:c5:92:a4:3e:89:f0:a7:21:c8:96:1c:
                    18:e8:e8:be:0c:21:66:f7:12:12:23:0d:98:bf:85:
                    ce:1e:36:27:35:3a:83:b8:47:74:00:47:31:0e:f0:
                    75:dd:c9:77:53:c4:e0:e2:0d:ce:68:41:11:e3:17:
                    b5:90:e0:4d:f0:7f:a2:4b:68:8e:89:46:2f:ee:31:
                    cd:ef:5f:dd:64:0b:12:13:21:1d:5d:48:d5:79:92:
                    58:7f:05:79:91:7a:22:fc:ec:a4:39:0f:b4:25:c8:
                    72:36:f9:02:3b:92:26:1a:5d:c3:77:f2:64:58:2e:
                    00:8e:4d:53:7a:df:99:91:bb:f4:45:2e:ff:c1:ec:
                    5a:15:47:d2:0c:51:64:e2:95:b1:db:dd:9b:a0:af:
                    06:22:89:84:66:6a:ec:90:d6:3f:4f:e5:a8:c7:6c:
                    7e:3d:43:e3:06:ba:d7:31:2c:09:a6:48:d7:fd:e8:
                    00:ba:07:6e:27:4c:df:0b:43:c6:d6:64:d5:bd:67:
                    9c:fc:97:78:58:88:51:ca:30:cf:31:74:23:4d:4c:
                    5e:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:0F:F6:27:C5:AC:C7:4D:D1:B0:10:75:1B:73:4E:54:64:3B:DA:9C
            X509v3 Authority Key Identifier:
                keyid:10:0C:BD:46:4A:90:5A:5B:56:8F:7A:DC:EF:1F:9D:20:BC:75:23:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364379D/67C6AD4CBF3D11EDA6BF88F1F1222468/EAy9RkqQWltWj3rc7x-dILx1IzE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/EAy9RkqQWltWj3rc7x-dILx1IzE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364379D/67C6AD4CBF3D11EDA6BF88F1F1222468/8187B4F485CA11F1910971BFCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.201.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7d:a7:04:87:47:9e:db:66:c7:5f:61:29:2e:6e:9c:5f:2b:94:
         e6:55:c8:79:9a:2e:b5:be:e6:86:28:8e:88:5e:b2:2d:a7:7e:
         3f:01:15:cc:4c:f6:5f:fd:e5:9d:19:02:26:21:4f:16:ae:b0:
         12:82:e3:4e:5d:ec:0e:56:15:2f:da:5b:08:18:21:8c:4e:a6:
         22:f1:ca:ea:c9:2c:ac:1c:15:a9:40:06:f5:91:17:c1:41:25:
         f2:3a:dd:e5:b5:e9:e2:d7:ee:71:1c:60:4d:cb:30:35:09:3a:
         c9:bd:bd:84:89:40:9d:15:2d:76:a3:e2:9c:57:6b:5f:2f:0a:
         2f:c3:f1:60:13:ce:be:39:a2:51:89:71:e8:32:58:6b:c6:6d:
         59:77:d9:3b:16:d7:cf:7b:47:9f:98:7d:f7:d6:4a:66:ff:a2:
         2a:56:fe:19:ac:1d:a4:0f:03:d1:10:5d:92:9c:cf:66:78:d3:
         a8:3d:61:ef:57:bf:8f:b7:a9:51:de:d9:38:12:cf:22:f6:53:
         ef:32:34:c0:33:cf:75:7e:b8:65:ad:d0:8b:b0:29:76:a0:00:
         39:1f:62:6f:28:95:cb:17:2b:09:14:ac:14:fd:21:0e:bd:20:
         21:74:50:d4:ba:ae:63:b4:c5:0d:28:d2:f6:e3:f0:f1:45:5e:
         03:6f:10:13
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBQEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NDM3OURBRjExMC8GA1UEBRMoMTAwQ0JENDY0QTkwNUE1QjU2OEY3QURDRUYxRjlE
MjBCQzc1MjMzMTAeFw0yNjA3MjIxMjQwMTlaFw0zNTA3MzExMjQwMTlaMBgxFjAU
BgNVBAMTDTZhNjBiYTM3LWRkZTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDKnx3hn/wyDqE22ysJBbWqS59tpLKvaSVTCl5QEQxUhojy2HONMTFTtobX
06xa40DFkqQ+ifCnIciWHBjo6L4MIWb3EhIjDZi/hc4eNic1OoO4R3QARzEO8HXd
yXdTxODiDc5oQRHjF7WQ4E3wf6JLaI6JRi/uMc3vX91kCxITIR1dSNV5klh/BXmR
eiL87KQ5D7QlyHI2+QI7kiYaXcN38mRYLgCOTVN635mRu/RFLv/B7FoVR9IMUWTi
lbHb3ZugrwYiiYRmauyQ1j9P5ajHbH49Q+MGutcxLAmmSNf96AC6B24nTN8LQ8bW
ZNW9Z5z8l3hYiFHKMM8xdCNNTF6VAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU/g/2
J8Wsx03RsBB1G3NOVGQ72pwwHwYDVR0jBBgwFoAUEAy9RkqQWltWj3rc7x+dILx1
IzEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjQzNzlELzY3QzZBRDRDQkYzRDExRURBNkJGODhGMUYxMjIyNDY4L0VBeTlS
a3FRV2x0V2ozcmM3eC1kSUx4MUl6RS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0VBeTlSa3FRV2x0V2ozcmM3eC1kSUx4MUl6RS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjQzNzlELzY3QzZBRDRDQkYzRDExRURBNkJGODhGMUYx
MjIyNDY4LzgxODdCNEY0ODVDQTExRjE5MTA5NzFCRkNFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJmyegwDQYJKoZIhvcNAQEL
BQADggEBAH2nBIdHnttmx19hKS5unF8rlOZVyHmaLrW+5oYojohesi2nfj8BFcxM
9l/95Z0ZAiYhTxausBKC405d7A5WFS/aWwgYIYxOpiLxyurJLKwcFalABvWRF8FB
JfI63eW16eLX7nEcYE3LMDUJOsm9vYSJQJ0VLXaj4pxXa18vCi/D8WATzr45olGJ
cegyWGvGbVl32TsW1897R5+YfffWSmb/oipW/hmsHaQPA9EQXZKcz2Z406g9Ye9X
v4+3qVHe2TgSzyL2U+8yNMAzz3V+uGWt0IuwKXagADkfYm8olcsXKwkUrBT9IQ69
ICF0UNS6rmO0xQ0o0vbj8PFFXgNvEBM=
-----END CERTIFICATE-----
Generated at Fri Jul 24 08:14:22 2026 by rpki-client