Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/080F4E50433C11F1909877A7CE1D38B0.roa
File:                     080F4E50433C11F1909877A7CE1D38B0.roa (raw, json)
Hash identifier:          XAASpHBvAWYCWepIqNL8yJlixGCtt5TAnZQE9AQNI6U=
Subject key identifier:   FC:EE:93:E4:6B:3B:90:B2:8B:DC:F0:0F:A7:F0:36:52:7E:3E:F0:A0
Certificate issuer:       /CN=F36EF7D0AF/serialNumber=3A553B6EF80BF922312F96B8DDC1F219A8C4121B
Certificate serial:       04FA
Authority key identifier: 3A:55:3B:6E:F8:0B:F9:22:31:2F:96:B8:DD:C1:F2:19:A8:C4:12:1B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/080F4E50433C11F1909877A7CE1D38B0.roa
Signing time:             Tue 28 Apr 2026 19:54:14 +0000
ROA not before:           Tue 28 Apr 2026 19:54:09 +0000
ROA not after:            Sun 28 Apr 2030 19:54:09 +0000
asID:                     402044
IP address blocks:        102.212.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 14 May 2026 03:23:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1274 (0x4fa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36EF7D0AF, serialNumber=3A553B6EF80BF922312F96B8DDC1F219A8C4121B
        Validity
            Not Before: Apr 28 19:54:09 2026 GMT
            Not After : Apr 28 19:54:09 2030 GMT
        Subject: CN=69f11066-5a44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:9c:5b:8f:05:5b:1b:94:31:22:00:65:a3:70:
                    a7:fc:e4:09:e9:69:0a:28:8d:6c:aa:32:13:27:5a:
                    33:ca:ce:75:75:5a:d0:3c:e6:be:9f:28:7a:69:2f:
                    ca:31:c9:28:cf:69:7f:b8:ed:80:db:f8:3f:3b:e5:
                    01:80:8d:66:af:43:74:da:31:c7:5d:e0:47:92:93:
                    3d:72:84:7d:3f:e5:27:a5:44:97:d6:9f:78:77:12:
                    b2:47:8c:ab:ca:31:1c:36:16:a1:55:53:51:ba:2b:
                    f9:20:6b:3d:a1:0e:f1:8b:66:08:28:c9:17:18:f0:
                    bd:8e:91:d6:d2:e6:81:87:a6:08:cd:3c:60:1f:25:
                    c9:3b:65:6a:4e:ec:69:0a:ca:b1:c4:61:50:14:f4:
                    d1:14:f9:49:d2:03:ce:50:8c:43:65:25:42:d2:66:
                    cf:25:45:70:0b:08:d2:0d:88:86:58:db:c3:cf:cb:
                    12:0f:7e:34:c8:d9:fa:12:1c:bd:6f:9c:ef:fa:ad:
                    f3:9d:f5:fe:dc:65:11:66:48:1e:fa:77:95:da:ef:
                    2b:5b:b2:1e:2e:51:ed:9d:6a:fc:ee:ce:8d:6a:03:
                    76:53:fa:b7:7c:18:3d:cc:15:0e:a4:46:6b:5e:47:
                    f5:b3:24:dd:19:64:12:c3:25:df:8c:f1:9f:8d:fe:
                    15:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:EE:93:E4:6B:3B:90:B2:8B:DC:F0:0F:A7:F0:36:52:7E:3E:F0:A0
            X509v3 Authority Key Identifier:
                keyid:3A:55:3B:6E:F8:0B:F9:22:31:2F:96:B8:DD:C1:F2:19:A8:C4:12:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/080F4E50433C11F1909877A7CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.212.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:2a:0d:dd:81:e8:a8:69:41:35:4e:08:98:c7:b5:21:16:cb:
         9b:28:d6:67:27:db:00:9c:4d:45:be:d5:46:ba:99:9a:4d:74:
         0a:01:59:17:a3:1e:2b:16:3c:3d:35:52:71:57:b6:31:a0:2e:
         14:ad:54:56:c3:f3:ef:bf:dc:de:c2:08:c3:d6:27:9a:a6:5c:
         d8:15:79:25:1e:4e:b5:2f:32:ba:20:a2:03:3e:32:1b:0a:6e:
         77:0a:52:57:04:89:c5:28:e0:81:bb:5a:d3:78:d7:d4:ad:91:
         f0:3a:2f:44:4d:36:99:3f:7a:db:49:e5:96:63:3c:98:fe:13:
         d8:1d:ca:ad:3a:70:c5:f2:7f:85:2f:16:e3:0f:44:76:f3:97:
         68:f4:07:83:0c:4f:0e:a8:25:59:b3:1f:8f:71:1c:52:48:17:
         a9:4d:ce:8d:bf:a4:19:b2:29:ff:57:a6:10:3f:f9:5a:71:d1:
         ea:09:10:a2:43:d6:d9:22:12:13:90:0a:d1:47:4e:55:76:d0:
         0e:ac:82:51:43:b2:29:81:7f:18:ab:01:9c:d6:c8:af:32:89:
         84:30:b6:1b:26:91:4c:1c:0d:46:70:68:8b:f6:aa:16:7c:cd:
         c1:26:78:fd:6b:02:71:df:25:9e:2b:2f:57:56:ba:74:28:d6:
         6b:9c:5b:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:52:04 2026 by rpki-client