Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/5F1BE914815911F1837D86A6CE1D38B0.roa
File:                     5F1BE914815911F1837D86A6CE1D38B0.roa (raw, json)
Hash identifier:          7vqHMdCsCum4FjIj8Qd8P+PK62Lp3GwdxMQ0BjUSP6Q=
Subject key identifier:   EC:69:7C:5F:C8:F1:4C:84:5E:37:13:78:34:CF:5C:02:B7:D6:97:33
Certificate issuer:       /CN=F364712FAF/serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
Certificate serial:       07E1
Authority key identifier: 3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/5F1BE914815911F1837D86A6CE1D38B0.roa
Signing time:             Thu 16 Jul 2026 21:00:28 +0000
ROA not before:           Thu 16 Jul 2026 21:00:22 +0000
ROA not after:            Thu 31 Jul 2036 21:00:22 +0000
asID:                     29975
IP address blocks:        105.245.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 26 Jul 2026 00:07:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2017 (0x7e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364712FAF, serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
        Validity
            Not Before: Jul 16 21:00:22 2026 GMT
            Not After : Jul 31 21:00:22 2036 GMT
        Subject: CN=6a59466b-1b7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:41:c8:83:13:5d:55:48:b1:04:83:f8:00:98:
                    0e:25:ab:53:31:74:d5:91:30:c9:a7:5e:2a:0b:f2:
                    fb:a7:28:45:ec:53:43:67:4a:46:16:3e:eb:6a:ec:
                    2d:e4:8e:a2:0f:fa:e2:e8:e9:00:8d:19:ac:5a:5b:
                    a6:d4:d0:3c:76:6c:36:97:7c:06:46:5a:dc:d2:20:
                    ff:3a:47:e6:cc:4f:b1:b3:83:71:c1:96:4e:15:59:
                    79:36:6e:a0:30:db:ea:1c:a1:a9:67:dd:bf:0c:81:
                    3e:41:26:00:60:18:d6:8b:4d:dd:45:66:6f:85:cd:
                    a3:7c:17:a8:19:ef:b1:f1:b9:e1:7f:cb:af:9a:18:
                    20:1e:78:80:ff:74:74:06:d5:71:20:b3:da:03:9e:
                    87:c1:b2:40:81:57:d6:89:0c:e8:2e:c7:30:75:d4:
                    e3:38:eb:bc:4c:b4:ca:0b:1f:95:ae:fa:e1:09:ab:
                    ce:1e:d2:ab:84:c8:76:f5:a3:61:7d:94:94:16:3f:
                    fe:03:c0:21:36:af:90:48:64:87:1b:2f:a4:df:3b:
                    f6:03:57:9f:fa:64:a4:3b:73:81:29:f5:c2:02:96:
                    60:de:d5:4d:e5:71:9c:a9:ed:78:35:87:8e:fa:07:
                    e5:27:6b:29:fe:f5:f1:e2:2e:ae:0c:3e:0f:f1:49:
                    9e:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:69:7C:5F:C8:F1:4C:84:5E:37:13:78:34:CF:5C:02:B7:D6:97:33
            X509v3 Authority Key Identifier:
                keyid:3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/5F1BE914815911F1837D86A6CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  105.245.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         9b:b3:97:ad:ff:d9:7f:ce:f6:d6:b7:d2:4c:cd:bc:f1:80:8b:
         eb:13:90:18:c2:53:e7:37:27:cc:a3:44:eb:a3:cf:a7:88:86:
         6e:f5:9b:09:44:b8:33:7f:1e:ba:b6:de:27:83:a6:c6:61:b6:
         74:32:72:4b:f5:3c:be:b1:ef:ca:9c:06:25:92:fd:50:a0:bb:
         2f:84:f9:fc:c7:60:a8:2c:5f:67:06:bd:ba:c8:d9:80:de:fb:
         3b:e8:d2:52:26:eb:a2:b9:e4:3d:db:3d:ed:26:5c:be:bb:6a:
         7b:54:e1:ad:21:b0:e3:84:86:f7:2b:c0:7f:de:ca:ce:a5:12:
         aa:c5:f5:5a:0a:5e:71:20:8e:68:c1:33:af:3b:b9:d4:bf:3a:
         02:17:e2:6b:88:1d:b1:63:60:32:35:bb:85:22:9c:9c:30:7b:
         20:9b:54:0e:7b:95:09:5c:6a:f9:92:db:07:8a:f5:69:f1:42:
         f2:18:39:59:10:ae:03:ae:f4:a7:7e:f3:40:2b:18:60:b1:7a:
         04:f1:37:4f:c3:51:3e:dd:3d:41:ce:b5:51:f7:9c:c1:65:b6:
         04:9e:19:44:83:be:01:b7:64:b0:d7:f4:76:ff:59:b5:f8:8d:
         29:bf:77:ba:66:b8:e8:a2:1c:3f:ca:4d:d5:0e:57:00:be:bf:
         cf:3b:6c:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:39:46 2026 by rpki-client