Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366E94B/61E32A7E27B411EE92E3412B4AD9E6FC/B12A449A172C11F1B3C40CEEDAE4EC9C.roa
File:                     B12A449A172C11F1B3C40CEEDAE4EC9C.roa (raw, json)
Hash identifier:          9757G8U3pHairY8IIUuSJeTALGIP38lpNN+8XxY9ekc=
Subject key identifier:   7E:39:0F:79:7E:D0:C4:4A:E9:3F:A0:78:63:C1:CD:84:88:23:97:A4
Certificate issuer:       /CN=F366E94BAF/serialNumber=57508CDF49523A38133E97BC0C1BF4A7A35F67A4
Certificate serial:       03DB
Authority key identifier: 57:50:8C:DF:49:52:3A:38:13:3E:97:BC:0C:1B:F4:A7:A3:5F:67:A4
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/V1CM30lSOjgTPpe8DBv0p6NfZ6Q.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366E94B/61E32A7E27B411EE92E3412B4AD9E6FC/B12A449A172C11F1B3C40CEEDAE4EC9C.roa
Signing time:             Tue 03 Mar 2026 18:13:34 +0000
ROA not before:           Tue 03 Mar 2026 18:13:30 +0000
ROA not after:            Sun 31 Mar 2030 18:13:30 +0000
asID:                     329247
IP address blocks:        2c0f:4340::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366E94B/61E32A7E27B411EE92E3412B4AD9E6FC/V1CM30lSOjgTPpe8DBv0p6NfZ6Q.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366E94B/61E32A7E27B411EE92E3412B4AD9E6FC/V1CM30lSOjgTPpe8DBv0p6NfZ6Q.mft
                          rsync://rpki.afrinic.net/repository/afrinic/V1CM30lSOjgTPpe8DBv0p6NfZ6Q.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 987 (0x3db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366E94BAF, serialNumber=57508CDF49523A38133E97BC0C1BF4A7A35F67A4
        Validity
            Not Before: Mar  3 18:13:30 2026 GMT
            Not After : Mar 31 18:13:30 2030 GMT
        Subject: CN=69a724ce-3cae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:77:a5:eb:88:0b:d2:fd:08:8f:db:29:d5:ce:
                    36:f7:09:83:14:1e:f2:b1:47:20:84:87:e0:46:82:
                    ad:76:aa:cc:05:ae:f4:e7:40:11:38:dc:ac:23:ee:
                    a2:15:01:5e:65:80:58:41:30:2d:5b:e8:4e:61:fa:
                    d3:4e:14:91:69:67:32:9f:a8:6b:8d:62:89:42:80:
                    5d:51:5e:2f:f6:cc:80:11:2a:c0:90:4a:eb:61:92:
                    8e:17:48:a9:fa:af:f8:ff:34:78:94:dc:f0:6a:81:
                    1b:d8:1f:cb:5c:32:3d:2a:21:8e:ca:ed:6f:96:54:
                    53:20:5f:bb:e0:f1:c0:b7:fc:7e:94:ec:ab:3b:8d:
                    36:ca:71:b6:c3:b7:29:df:5f:95:62:0c:8f:fa:67:
                    9d:75:ae:5e:ee:0a:93:6d:5b:29:7f:f6:60:93:2b:
                    91:89:34:fd:b0:e4:20:72:61:76:ed:e7:37:67:8a:
                    db:dc:e0:7d:50:a5:ce:b6:00:0e:88:c1:bd:d6:1e:
                    1b:94:71:f3:23:d8:fc:6b:4b:ca:64:a8:68:3a:d2:
                    c2:01:78:57:95:92:41:fa:a9:35:16:07:e2:9c:54:
                    75:af:cf:0b:79:03:38:99:2f:ce:f5:a3:99:f3:61:
                    5a:c2:0a:36:ee:f7:d8:03:42:d5:24:ad:be:fa:a9:
                    e2:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:39:0F:79:7E:D0:C4:4A:E9:3F:A0:78:63:C1:CD:84:88:23:97:A4
            X509v3 Authority Key Identifier:
                keyid:57:50:8C:DF:49:52:3A:38:13:3E:97:BC:0C:1B:F4:A7:A3:5F:67:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366E94B/61E32A7E27B411EE92E3412B4AD9E6FC/V1CM30lSOjgTPpe8DBv0p6NfZ6Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/V1CM30lSOjgTPpe8DBv0p6NfZ6Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366E94B/61E32A7E27B411EE92E3412B4AD9E6FC/B12A449A172C11F1B3C40CEEDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:4340::/32

    Signature Algorithm: sha256WithRSAEncryption
         51:49:cd:73:42:e2:54:0b:f5:63:20:57:91:25:4f:43:1c:43:
         79:c2:4e:92:15:30:56:4b:a0:e8:53:33:92:2b:c3:7e:9f:79:
         1c:37:27:a6:6e:74:3e:aa:9c:47:08:85:4d:f5:a8:b4:15:8c:
         9c:91:13:99:61:4b:63:2e:9d:bd:1a:5d:97:56:94:d7:b0:52:
         a2:65:2b:8a:76:d3:ac:91:98:80:5e:50:33:e9:61:32:99:21:
         ec:78:13:b1:16:1c:41:25:b4:6b:2e:b9:b4:3f:88:ab:2e:b4:
         af:a8:64:98:3c:f3:cc:29:42:dc:ff:2d:82:fe:b1:2b:09:08:
         6c:a4:98:90:b2:b4:54:29:38:1e:67:8e:e6:32:2a:f1:0c:a6:
         f9:fc:0f:95:ed:8e:ef:06:b2:17:f6:b8:3f:76:09:28:84:ab:
         2c:2e:bb:1c:1d:c8:6f:3d:ae:09:36:15:7d:88:d6:62:06:92:
         70:74:eb:9a:2e:1e:8c:26:19:1d:93:f5:a7:53:c2:fd:61:c4:
         5b:48:1c:2d:b1:8b:6c:47:8c:66:e9:f1:8f:cc:12:30:e7:0a:
         37:9b:5d:af:48:0c:5d:d7:20:61:a5:06:3b:1c:ab:c4:c4:c3:
         72:e9:74:c4:ca:82:ff:f5:75:ad:a4:64:47:91:ae:42:ec:91:
         0f:1c:71:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:03:06 2026 by rpki-client