Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/DEA7B08049E811F1A608DED0CE1D38B0.roa
File:                     DEA7B08049E811F1A608DED0CE1D38B0.roa (raw, json)
Hash identifier:          ikwfy3fivqsuFJ6o4dhIyOXv5qwjGU/nm5TFTxuMmxo=
Subject key identifier:   1D:0B:AD:F6:B2:B1:6A:0B:27:F7:27:25:CA:B5:34:45:18:BC:6E:2E
Certificate issuer:       /CN=F36EF7D0AF/serialNumber=3A553B6EF80BF922312F96B8DDC1F219A8C4121B
Certificate serial:       050A
Authority key identifier: 3A:55:3B:6E:F8:0B:F9:22:31:2F:96:B8:DD:C1:F2:19:A8:C4:12:1B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/DEA7B08049E811F1A608DED0CE1D38B0.roa
Signing time:             Thu 07 May 2026 07:46:34 +0000
ROA not before:           Thu 07 May 2026 07:46:29 +0000
ROA not after:            Tue 07 May 2030 07:46:29 +0000
asID:                     214432
IP address blocks:        102.212.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 15 May 2026 00:07:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1290 (0x50a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36EF7D0AF, serialNumber=3A553B6EF80BF922312F96B8DDC1F219A8C4121B
        Validity
            Not Before: May  7 07:46:29 2026 GMT
            Not After : May  7 07:46:29 2030 GMT
        Subject: CN=69fc435a-04a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b3:c2:88:a9:63:07:58:36:1b:a9:b2:10:50:
                    af:a4:08:be:69:0c:4a:09:44:69:5f:9b:6b:bc:02:
                    a5:d0:f3:d7:09:31:34:ce:9b:b0:8e:a4:c0:8c:47:
                    e4:8b:2f:73:2f:be:9d:0a:a5:ff:bc:b9:f1:cf:e6:
                    d2:d8:40:a5:9c:72:c9:3f:5a:44:3e:76:1e:f4:97:
                    59:fa:54:ab:e1:e6:47:5e:3d:d9:b1:a0:66:dd:f7:
                    09:f7:49:8a:6b:44:93:ac:02:25:22:7f:30:b8:2f:
                    e3:66:26:84:7c:3f:51:9e:1a:c5:65:95:91:9b:71:
                    e0:dd:5a:72:18:60:f1:c5:18:78:fa:dd:78:9e:2d:
                    58:60:e3:4f:ad:e6:ae:23:c0:d4:d5:df:02:37:11:
                    c3:23:46:f6:21:eb:16:9a:0c:18:20:a7:19:83:34:
                    d3:7f:2f:92:aa:14:49:b0:20:7d:96:22:66:6b:c4:
                    8a:1c:77:7a:9b:ee:26:7a:21:f8:fd:f7:c4:07:4e:
                    3c:89:5d:68:43:b6:0b:a4:b6:59:4f:92:5a:05:b3:
                    f7:c8:82:8f:95:a6:96:da:30:70:89:c4:60:18:e0:
                    ea:0a:44:ad:14:05:01:fc:a5:cb:aa:08:68:8e:d5:
                    3a:ce:56:39:f4:0b:60:01:ab:ae:2e:cd:92:c3:cd:
                    27:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:0B:AD:F6:B2:B1:6A:0B:27:F7:27:25:CA:B5:34:45:18:BC:6E:2E
            X509v3 Authority Key Identifier:
                keyid:3A:55:3B:6E:F8:0B:F9:22:31:2F:96:B8:DD:C1:F2:19:A8:C4:12:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/DEA7B08049E811F1A608DED0CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.212.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:43:cd:51:c3:75:31:dd:38:30:ce:f3:88:1b:20:bb:d5:5b:
         88:8d:33:03:f3:e6:a0:8a:09:da:fc:ec:7f:42:68:68:b1:f0:
         e2:2a:c2:81:19:2b:d8:a5:f6:fa:8c:56:eb:fe:b2:fa:64:07:
         f1:2c:a7:b4:0a:30:29:8f:dd:40:1d:7b:18:b0:f0:a3:d2:ec:
         2c:ed:55:2b:2d:f7:2d:21:b0:88:b0:2e:b3:1e:96:06:87:d0:
         ac:04:3a:94:cd:fe:5f:9f:7b:2a:13:5a:bc:ac:2d:e6:1f:a6:
         7c:3a:ec:50:78:78:2b:51:51:01:90:88:8f:c0:bf:42:ca:0b:
         2b:1e:41:37:85:30:33:46:1f:8d:5f:7c:46:43:43:aa:07:ad:
         ab:ad:52:93:41:53:a5:93:67:53:dc:fd:f7:b2:91:8c:a6:4a:
         8d:67:9e:7d:2e:60:2f:96:42:54:5e:b0:34:7c:a3:3f:2b:f2:
         02:0d:42:26:f4:68:55:4f:de:5c:8c:cc:ac:3f:ba:a6:88:0b:
         02:7e:3a:f0:1d:56:d9:95:a2:8e:34:16:b5:43:d7:f3:2c:8d:
         86:d4:9a:5c:de:db:e4:a7:75:84:60:c2:7e:8c:cc:ea:fb:19:
         aa:0a:04:78:0e:61:6c:d7:83:6f:96:b3:1e:b9:b3:45:7a:d3:
         d0:86:38:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:24:18 2026 by rpki-client