Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364AFEC/C1CCFE3680F711EFACC908AA762E951A/891AA3144AD011F1A5F406D1CE1D38B0.roa
File:                     891AA3144AD011F1A5F406D1CE1D38B0.roa (raw, json)
Hash identifier:          R5VazyGMM/yIbU9SGaoSbNz2YQwMP47fvbl1HozxYLg=
Subject key identifier:   2E:B6:3D:DA:7A:DA:93:CC:BE:67:ED:08:BB:1E:D0:18:4C:D4:EF:27
Certificate issuer:       /CN=F364AFECAF/serialNumber=46466D356ACB19519D64CD829BED403D042004EC
Certificate serial:       0264
Authority key identifier: 46:46:6D:35:6A:CB:19:51:9D:64:CD:82:9B:ED:40:3D:04:20:04:EC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/RkZtNWrLGVGdZM2Cm-1APQQgBOw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364AFEC/C1CCFE3680F711EFACC908AA762E951A/891AA3144AD011F1A5F406D1CE1D38B0.roa
Signing time:             Fri 08 May 2026 11:24:54 +0000
ROA not before:           Fri 08 May 2026 11:24:49 +0000
ROA not after:            Sun 02 Apr 2028 11:24:49 +0000
asID:                     329497
IP address blocks:        102.203.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364AFEC/C1CCFE3680F711EFACC908AA762E951A/RkZtNWrLGVGdZM2Cm-1APQQgBOw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364AFEC/C1CCFE3680F711EFACC908AA762E951A/RkZtNWrLGVGdZM2Cm-1APQQgBOw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/RkZtNWrLGVGdZM2Cm-1APQQgBOw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 14 May 2026 04:32:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 612 (0x264)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364AFECAF, serialNumber=46466D356ACB19519D64CD829BED403D042004EC
        Validity
            Not Before: May  8 11:24:49 2026 GMT
            Not After : Apr  2 11:24:49 2028 GMT
        Subject: CN=69fdc806-f7af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:64:2e:2f:b6:ee:39:4f:5b:d7:0a:a4:b8:81:
                    dc:64:d6:a4:12:d6:9c:c6:cc:6e:a4:1e:e3:f1:c9:
                    63:52:70:d1:75:1e:55:36:2a:ed:f8:9c:7f:12:c9:
                    62:d1:c8:c1:4c:1d:15:85:08:5b:84:58:e2:1b:8f:
                    eb:bc:c9:51:9a:2e:4a:90:e8:b6:27:e9:d2:59:19:
                    2c:36:0c:2c:02:4a:8b:9e:0a:b3:72:28:76:98:f5:
                    95:11:30:38:f0:6c:b4:73:9f:66:a9:68:1e:72:c4:
                    26:a9:7b:12:3c:96:65:30:1f:3b:56:80:a2:0c:40:
                    11:50:aa:ac:b3:ff:3a:86:a2:df:aa:ff:d5:84:1e:
                    ff:80:02:5e:66:73:42:35:f7:1c:da:18:87:20:04:
                    f8:1d:fc:bd:a3:ba:5b:50:78:9f:a0:e6:62:8a:33:
                    74:15:fb:fb:0a:88:41:9b:25:b3:63:ac:88:7e:40:
                    a5:31:a8:2c:a3:73:2f:8d:2b:16:cc:ce:eb:38:b2:
                    5d:e0:2d:61:2a:70:86:c9:00:48:8b:32:2b:b1:85:
                    88:cd:62:5a:0d:ff:c8:3c:f0:9a:f9:dd:2d:6f:b4:
                    d5:05:1c:74:eb:37:b6:ec:25:ea:09:5c:fb:25:8c:
                    bc:16:7c:1d:e3:3b:f7:68:f9:6c:36:2a:f7:2e:f3:
                    6f:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:B6:3D:DA:7A:DA:93:CC:BE:67:ED:08:BB:1E:D0:18:4C:D4:EF:27
            X509v3 Authority Key Identifier:
                keyid:46:46:6D:35:6A:CB:19:51:9D:64:CD:82:9B:ED:40:3D:04:20:04:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364AFEC/C1CCFE3680F711EFACC908AA762E951A/RkZtNWrLGVGdZM2Cm-1APQQgBOw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/RkZtNWrLGVGdZM2Cm-1APQQgBOw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364AFEC/C1CCFE3680F711EFACC908AA762E951A/891AA3144AD011F1A5F406D1CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.203.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:09:c1:ce:3f:5b:dc:a7:26:ec:97:54:19:d4:0e:94:91:64:
         ea:8a:0d:f8:a5:34:a9:37:c1:f8:ef:67:e7:15:11:a0:93:fc:
         e0:2c:5f:9c:72:67:73:4a:9c:fa:e3:09:4d:d7:22:b0:ea:45:
         0b:ef:8e:d7:3f:88:c8:9f:6d:c7:7f:76:ac:aa:a0:fd:b0:26:
         0b:11:8d:91:80:d7:7e:27:5f:1e:fb:ca:98:ca:4d:5c:5d:ff:
         bd:c2:e6:f4:9e:6d:7a:e3:b9:bf:9f:72:16:a9:64:87:6e:e2:
         f7:a6:be:2e:63:aa:65:1b:02:87:e9:72:0d:59:d5:e9:5d:52:
         5c:13:18:c8:b7:7b:8e:cf:60:fa:e1:f8:b9:42:59:47:16:c4:
         3f:77:f2:1e:9b:58:fc:55:be:3b:d0:10:d2:b7:ee:40:ce:9f:
         d2:49:c6:08:15:69:b7:e0:60:0f:68:1c:57:08:42:c5:d0:54:
         0b:82:76:64:30:8c:4b:ea:ff:37:7c:4d:8b:49:e3:d5:75:13:
         52:96:8a:3f:6f:8c:73:96:17:cd:bc:5a:77:25:c7:bf:bb:57:
         46:3f:bd:b5:bd:0f:08:78:88:25:87:2c:a1:90:50:3d:87:a9:
         f5:a7:b8:a5:eb:97:73:1c:7b:05:89:f1:fe:9b:4e:6b:f5:d4:
         9c:be:c1:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:44:38 2026 by rpki-client