Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369F058/8B32E79A553911E9A572702FF8AEA228/574BF07E282D11F197E71890DAE4EC9C.roa
File:                     574BF07E282D11F197E71890DAE4EC9C.roa (raw, json)
Hash identifier:          ra5Q0ZW/tTeltnEPjbaZN+uGuxXkH1j94J7to5jyLRY=
Subject key identifier:   9C:E0:D4:FB:FD:0F:F0:E5:48:46:BB:6B:78:79:E5:08:E4:C8:DA:13
Certificate issuer:       /CN=F369F058AF/serialNumber=C92E885827C67619E13175703017C4442DDFEACF
Certificate serial:       0A4A
Authority key identifier: C9:2E:88:58:27:C6:76:19:E1:31:75:70:30:17:C4:44:2D:DF:EA:CF
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/yS6IWCfGdhnhMXVwMBfERC3f6s8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369F058/8B32E79A553911E9A572702FF8AEA228/574BF07E282D11F197E71890DAE4EC9C.roa
Signing time:             Wed 25 Mar 2026 09:31:03 +0000
ROA not before:           Wed 25 Mar 2026 09:30:58 +0000
ROA not after:            Thu 27 Mar 2036 09:30:58 +0000
asID:                     328114
IP address blocks:        102.203.48.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369F058/8B32E79A553911E9A572702FF8AEA228/yS6IWCfGdhnhMXVwMBfERC3f6s8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369F058/8B32E79A553911E9A572702FF8AEA228/yS6IWCfGdhnhMXVwMBfERC3f6s8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/yS6IWCfGdhnhMXVwMBfERC3f6s8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2634 (0xa4a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369F058AF, serialNumber=C92E885827C67619E13175703017C4442DDFEACF
        Validity
            Not Before: Mar 25 09:30:58 2026 GMT
            Not After : Mar 27 09:30:58 2036 GMT
        Subject: CN=69c3ab57-df9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f0:68:02:1e:e6:6a:d2:ef:85:8f:dc:74:a8:
                    91:81:e4:64:d0:b3:33:16:47:8a:ac:39:05:1c:14:
                    61:e6:a6:77:e2:67:c5:ad:cf:b2:43:50:ef:e5:23:
                    86:58:0f:3f:be:5f:e9:b4:a6:5a:86:82:79:82:de:
                    11:97:41:b2:fa:84:87:46:fa:55:64:c3:e7:2f:e7:
                    e6:30:7f:74:bb:f8:6d:c3:42:4f:e7:a1:a4:26:4f:
                    d1:69:ab:5d:8c:71:8d:96:f3:e5:56:11:35:f4:d9:
                    0f:bd:57:8c:a3:5b:e5:8e:6f:c1:0e:a0:8b:d8:f3:
                    20:64:df:51:4d:b9:0a:bd:0b:28:6c:7a:c7:c5:ab:
                    b1:98:d6:f6:47:32:c4:c4:36:ce:6e:f4:93:f1:30:
                    4e:90:86:84:af:ad:e2:36:05:3a:ca:6a:d4:4c:39:
                    e8:4f:69:88:ae:41:62:46:e7:ce:60:61:ae:19:52:
                    65:c3:1c:5d:14:48:9f:29:89:bf:1f:7a:24:a6:6e:
                    92:6c:da:11:30:c1:44:3b:41:1e:98:d1:08:4e:6c:
                    b7:38:c7:a5:a3:f6:22:18:47:4f:84:26:26:20:8d:
                    ac:55:06:b6:87:c3:72:be:ad:62:aa:17:d8:26:33:
                    e5:50:c9:cc:ed:f0:43:a6:3a:3d:35:17:ff:33:5c:
                    4b:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:E0:D4:FB:FD:0F:F0:E5:48:46:BB:6B:78:79:E5:08:E4:C8:DA:13
            X509v3 Authority Key Identifier:
                keyid:C9:2E:88:58:27:C6:76:19:E1:31:75:70:30:17:C4:44:2D:DF:EA:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369F058/8B32E79A553911E9A572702FF8AEA228/yS6IWCfGdhnhMXVwMBfERC3f6s8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/yS6IWCfGdhnhMXVwMBfERC3f6s8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369F058/8B32E79A553911E9A572702FF8AEA228/574BF07E282D11F197E71890DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.203.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         35:3a:e0:32:c5:82:e5:1b:a2:a1:ff:46:fc:df:1a:68:82:06:
         89:e2:82:d7:07:f4:1f:6d:06:86:39:5a:6f:57:3e:fc:57:d6:
         47:10:d1:08:b7:d8:e1:ef:b5:b8:15:91:5e:80:1d:0a:ae:41:
         51:da:1e:0f:c4:3c:26:a9:d2:e8:51:05:64:c0:0b:8e:9a:ff:
         94:1c:c6:e4:5d:26:1e:c3:8c:e0:c9:54:20:ba:34:52:19:91:
         41:4b:a8:33:d0:19:20:b6:70:17:26:f0:00:c4:26:8b:64:6e:
         b5:20:dc:f4:66:e0:64:ee:eb:75:86:2f:92:98:31:55:be:7e:
         62:ed:02:a3:5f:cd:59:85:69:c9:21:78:b1:b8:3a:7d:d5:30:
         bd:52:a5:1f:4b:ef:70:23:14:79:64:2e:89:53:6b:29:12:e8:
         30:33:46:fb:06:4c:32:5f:e1:12:3d:10:c3:da:22:b5:48:94:
         0d:19:53:de:d6:29:80:57:70:cf:27:5d:84:b5:83:57:f4:22:
         cb:2a:ab:69:b8:cb:95:15:77:da:41:a5:32:68:be:a7:6f:dd:
         36:25:d2:14:ed:0b:a1:81:48:81:a0:77:2d:b2:7d:a9:c4:08:
         00:dc:4a:60:14:fd:17:3f:a5:62:d5:7a:4f:a3:ff:e0:81:55:
         69:d1:4f:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:24:39 2026 by rpki-client