Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E373D/4D22ACD68B7311E9A49A4368F8AEA228/C7DF70DA22B611F1A9E4ACB5DAE4EC9C.roa
File:                     C7DF70DA22B611F1A9E4ACB5DAE4EC9C.roa (raw, json)
Hash identifier:          FzSMi1ExAtIbBrOh99I/Xg/w2xrMl9lU3Ek0la62bJM=
Subject key identifier:   07:50:A9:6B:62:FF:9A:B4:95:95:0B:16:AD:3D:29:11:BA:17:A0:CC
Certificate issuer:       /CN=F36E373DAF/serialNumber=FD8E045884B1669EBD430AE566721D97404A6CE8
Certificate serial:       0A42
Authority key identifier: FD:8E:04:58:84:B1:66:9E:BD:43:0A:E5:66:72:1D:97:40:4A:6C:E8
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/_Y4EWISxZp69QwrlZnIdl0BKbOg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E373D/4D22ACD68B7311E9A49A4368F8AEA228/C7DF70DA22B611F1A9E4ACB5DAE4EC9C.roa
Signing time:             Wed 18 Mar 2026 10:39:46 +0000
ROA not before:           Wed 18 Mar 2026 10:39:41 +0000
ROA not after:            Tue 18 Mar 2036 10:39:41 +0000
asID:                     327733
IP address blocks:        102.212.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E373D/4D22ACD68B7311E9A49A4368F8AEA228/_Y4EWISxZp69QwrlZnIdl0BKbOg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E373D/4D22ACD68B7311E9A49A4368F8AEA228/_Y4EWISxZp69QwrlZnIdl0BKbOg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/_Y4EWISxZp69QwrlZnIdl0BKbOg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2626 (0xa42)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E373DAF, serialNumber=FD8E045884B1669EBD430AE566721D97404A6CE8
        Validity
            Not Before: Mar 18 10:39:41 2026 GMT
            Not After : Mar 18 10:39:41 2036 GMT
        Subject: CN=69ba80f2-bd18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ac:4b:7f:90:85:fc:ad:da:b5:82:f8:53:33:
                    1f:1b:f4:ca:76:1e:1e:c5:96:72:2f:83:a6:d6:58:
                    1b:f4:d1:6b:aa:75:c7:d5:c0:c0:b6:32:c4:7d:d3:
                    c2:30:16:7e:8a:e8:98:47:29:54:b9:4d:e3:d8:1d:
                    89:27:19:a9:96:a4:a1:6f:d5:f5:b3:bd:bf:11:a2:
                    cc:7e:37:26:d3:66:48:eb:d8:f3:84:d2:6d:ba:c0:
                    be:c3:16:3c:d1:c9:67:16:59:07:7f:62:52:1f:2d:
                    89:57:12:76:37:29:00:67:14:47:cd:e4:32:7e:1c:
                    9a:9c:b2:5d:9f:54:29:55:de:99:37:1d:95:c6:f6:
                    25:3e:22:6b:8d:1a:62:0e:20:cf:b4:f2:9c:67:29:
                    30:a4:0e:21:4f:93:1d:1e:83:14:2b:10:1a:33:64:
                    d7:13:3f:8c:3c:b9:fd:ac:ff:4a:c1:b0:1d:0c:44:
                    0e:d2:f8:38:ca:61:cb:6b:c8:bf:ad:9e:d2:64:95:
                    9d:04:eb:a2:03:5f:f6:12:8f:73:88:8e:62:ee:66:
                    65:ba:a4:cb:22:0e:47:83:8b:ed:2a:45:b5:8c:67:
                    09:ef:0e:3b:60:49:4b:df:22:b5:6f:f0:1a:50:88:
                    e2:1b:99:f6:15:49:7f:f5:ab:96:45:95:39:0f:6b:
                    5e:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:50:A9:6B:62:FF:9A:B4:95:95:0B:16:AD:3D:29:11:BA:17:A0:CC
            X509v3 Authority Key Identifier:
                keyid:FD:8E:04:58:84:B1:66:9E:BD:43:0A:E5:66:72:1D:97:40:4A:6C:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E373D/4D22ACD68B7311E9A49A4368F8AEA228/_Y4EWISxZp69QwrlZnIdl0BKbOg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_Y4EWISxZp69QwrlZnIdl0BKbOg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E373D/4D22ACD68B7311E9A49A4368F8AEA228/C7DF70DA22B611F1A9E4ACB5DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.212.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:47:fe:bd:24:3e:49:ce:ee:53:2b:62:64:c4:7b:5c:2e:10:
         07:ad:7a:37:72:26:01:d3:06:90:9a:95:51:f0:21:48:7d:2d:
         34:e7:6b:19:b3:3b:b3:ce:a1:4f:44:01:c3:2f:9e:93:02:4d:
         81:20:94:22:40:4b:2f:80:3c:7e:2a:99:59:09:83:e3:54:6b:
         43:28:1d:6d:73:9a:3d:8f:ff:dd:ac:e6:ca:d2:35:97:b3:0e:
         2c:f7:1a:e8:3e:a0:0d:11:95:6e:61:06:70:0d:63:43:b2:bf:
         a0:d1:4f:86:00:26:e8:fb:4b:38:6e:b6:c5:ce:2b:46:9d:94:
         8f:08:9e:49:4f:52:74:0f:fa:e0:e2:51:b9:f3:e9:73:69:df:
         ac:8e:6a:2e:d9:71:8c:68:66:ac:0f:a9:db:6b:51:56:86:5b:
         8b:ed:b2:21:80:59:e3:6d:32:a6:47:8e:e3:8e:12:f0:4e:e6:
         50:e2:24:97:6a:e7:93:e1:3b:da:53:b7:b5:f1:bc:f1:e7:ad:
         df:a9:d2:a8:cf:3e:22:30:e4:94:11:46:5e:63:f4:4a:cc:c8:
         db:4a:dd:07:43:de:24:62:54:df:69:1e:0b:36:e4:a1:2e:2b:
         18:ba:48:9a:a2:e5:45:fc:5b:fc:05:30:b5:a6:ab:3e:57:c6:
         21:16:fd:3d
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCkIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RTM3M0RBRjExMC8GA1UEBRMoRkQ4RTA0NTg4NEIxNjY5RUJENDMwQUU1NjY3MjFE
OTc0MDRBNkNFODAeFw0yNjAzMTgxMDM5NDFaFw0zNjAzMTgxMDM5NDFaMBgxFjAU
BgNVBAMTDTY5YmE4MGYyLWJkMTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC3rEt/kIX8rdq1gvhTMx8b9Mp2Hh7FlnIvg6bWWBv00WuqdcfVwMC2MsR9
08IwFn6K6JhHKVS5TePYHYknGamWpKFv1fWzvb8Rosx+NybTZkjr2POE0m26wL7D
FjzRyWcWWQd/YlIfLYlXEnY3KQBnFEfN5DJ+HJqcsl2fVClV3pk3HZXG9iU+ImuN
GmIOIM+08pxnKTCkDiFPkx0egxQrEBozZNcTP4w8uf2s/0rBsB0MRA7S+DjKYctr
yL+tntJklZ0E66IDX/YSj3OIjmLuZmW6pMsiDkeDi+0qRbWMZwnvDjtgSUvfIrVv
8BpQiOIbmfYVSX/1q5ZFlTkPa17VAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUB1Cp
a2L/mrSVlQsWrT0pEboXoMwwHwYDVR0jBBgwFoAU/Y4EWISxZp69QwrlZnIdl0BK
bOgwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkUzNzNELzREMjJBQ0Q2OEI3MzExRTlBNDlBNDM2OEY4QUVBMjI4L19ZNEVX
SVN4WnA2OVF3cmxabklkbDBCS2JPZy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL19ZNEVXSVN4WnA2OVF3cmxabklkbDBCS2JPZy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkUzNzNELzREMjJBQ0Q2OEI3MzExRTlBNDlBNDM2OEY4
QUVBMjI4L0M3REY3MERBMjJCNjExRjFBOUU0QUNCNURBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABm1DIwDQYJKoZIhvcNAQEL
BQADggEBAFJH/r0kPknO7lMrYmTEe1wuEAetejdyJgHTBpCalVHwIUh9LTTnaxmz
O7POoU9EAcMvnpMCTYEglCJASy+APH4qmVkJg+NUa0MoHW1zmj2P/92s5srSNZez
Diz3Gug+oA0RlW5hBnANY0Oyv6DRT4YAJuj7SzhutsXOK0adlI8InklPUnQP+uDi
Ubnz6XNp36yOai7ZcYxoZqwPqdtrUVaGW4vtsiGAWeNtMqZHjuOOEvBO5lDiJJdq
55PhO9pTt7XxvPHnrd+p0qjPPiIw5JQRRl5j9ErMyNtK3QdD3iRiVN9pHgs25KEu
Kxi6SJqi5UX8W/wFMLWmqz5XxiEW/T0=
-----END CERTIFICATE-----
Generated at Thu Mar 26 22:47:32 2026 by rpki-client