Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/F6071DBA745911F1B3AC3DAECE1D38B0.roa
File:                     F6071DBA745911F1B3AC3DAECE1D38B0.roa (raw, json)
Hash identifier:          6rtAk/SrfnmDuvbAhgOX2AmFjBMc2jK2tpoyKKKFMc8=
Subject key identifier:   B9:89:D2:30:9A:30:77:63:0C:28:41:B4:F6:05:62:CD:71:C5:F8:93
Certificate issuer:       /CN=F36EF7D0AF/serialNumber=3A553B6EF80BF922312F96B8DDC1F219A8C4121B
Certificate serial:       054D
Authority key identifier: 3A:55:3B:6E:F8:0B:F9:22:31:2F:96:B8:DD:C1:F2:19:A8:C4:12:1B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/F6071DBA745911F1B3AC3DAECE1D38B0.roa
Signing time:             Tue 30 Jun 2026 08:01:56 +0000
ROA not before:           Tue 30 Jun 2026 08:01:51 +0000
ROA not after:            Sun 30 Jun 2030 08:01:51 +0000
asID:                     834
IP address blocks:        102.211.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 25 Jul 2026 03:26:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1357 (0x54d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36EF7D0AF, serialNumber=3A553B6EF80BF922312F96B8DDC1F219A8C4121B
        Validity
            Not Before: Jun 30 08:01:51 2026 GMT
            Not After : Jun 30 08:01:51 2030 GMT
        Subject: CN=6a4377f4-4919
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:62:66:6e:ad:ed:1d:17:4e:c2:c8:a5:f5:c5:
                    44:44:e5:dc:b5:de:3f:ac:dc:0b:af:79:5b:c6:df:
                    cc:81:c9:7d:9a:90:36:86:88:f5:5e:39:60:00:55:
                    ee:67:b9:23:63:e6:32:33:37:de:2f:9b:da:88:79:
                    36:ed:6d:4e:63:c4:71:ed:09:b3:1d:a7:4b:e8:40:
                    8d:b5:92:ca:2b:5f:6c:6a:d9:01:80:df:44:a0:6b:
                    e7:5f:c4:d1:63:5c:4a:7d:ef:37:0f:76:f4:89:a8:
                    a0:20:c9:ed:27:a6:77:91:69:93:25:e4:60:66:41:
                    4e:50:8a:f7:f1:96:23:64:8a:48:cf:a7:75:0d:b9:
                    11:d0:c5:f3:33:82:01:ff:87:b0:74:72:66:8a:d3:
                    ea:62:2e:c6:8a:3b:3c:68:eb:54:15:ab:61:6e:34:
                    c3:1e:d2:d4:34:b7:13:f0:08:5d:07:2e:b2:c3:08:
                    35:4b:49:47:18:a5:50:a9:f4:1b:36:8f:a4:74:d3:
                    a3:5a:cc:c8:65:b7:ea:85:c7:40:d0:1a:a5:09:56:
                    df:ec:8a:27:4c:a5:46:7d:34:a7:52:94:d6:35:01:
                    18:0f:3c:0c:d9:d1:0c:d2:81:be:4b:a5:3a:2d:ce:
                    46:6f:8d:8d:78:e5:91:78:ff:bb:a6:2e:72:18:38:
                    5e:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:89:D2:30:9A:30:77:63:0C:28:41:B4:F6:05:62:CD:71:C5:F8:93
            X509v3 Authority Key Identifier:
                keyid:3A:55:3B:6E:F8:0B:F9:22:31:2F:96:B8:DD:C1:F2:19:A8:C4:12:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/F6071DBA745911F1B3AC3DAECE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.211.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:66:da:58:a7:8c:9e:04:80:2c:bc:4a:25:5a:dd:ac:79:83:
         69:7d:04:e3:c9:5f:42:65:4e:89:79:85:f3:8a:a0:b6:99:3f:
         9f:64:e2:f7:ba:65:f4:c0:90:03:e6:b1:18:04:0b:f3:aa:09:
         dc:bf:5c:7c:42:9b:16:17:77:34:98:0e:d9:b6:41:d9:12:2a:
         58:99:54:6a:5f:fc:f1:58:aa:2e:9b:9d:bf:eb:bb:1a:ff:0b:
         23:ce:33:da:8e:94:2a:b4:13:c9:d3:15:d5:18:c8:d7:a8:b7:
         d4:81:d4:89:0a:21:52:d8:52:fb:e1:85:e9:36:49:94:af:1d:
         e4:c7:a5:a6:33:e0:c3:c8:7d:53:9d:8c:1f:0c:f0:22:1f:02:
         52:52:d8:38:dc:62:15:42:f8:e4:48:e1:c6:82:19:60:15:ca:
         96:67:5b:14:c4:68:4c:77:eb:e6:da:19:39:42:a9:37:9a:42:
         93:60:87:75:86:51:d5:fb:9a:7b:a4:d8:c4:df:1f:6a:23:41:
         f8:e1:71:2a:ba:d7:79:42:4c:f4:5c:82:66:58:14:b1:54:36:
         93:ee:dc:27:39:ae:2f:07:f6:17:54:ff:92:21:de:e3:32:d1:
         82:91:bf:86:31:9e:6f:8b:c3:3f:a5:1b:9d:67:fb:4c:a5:78:
         4d:71:92:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:02:47 2026 by rpki-client