Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F366C1FC/F5CEB8CEC7AD11F1908E3CD7CE1D38B0/E12332E6C7AE11F1A98CF6DBCE1D38B0.roa
File:                     E12332E6C7AE11F1A98CF6DBCE1D38B0.roa (raw, json)
Hash identifier:          LkxUb/2kG/qcaw2E5m9e+l2TxbZ1epEA25XMv5pYoEk=
Subject key identifier:   8F:2A:FF:6E:62:91:62:38:EC:66:FE:27:29:A8:B5:C4:9F:B7:20:FB
Certificate issuer:       /CN=F366C1FCAF/serialNumber=4819CF9F7D81FBA7AD468918F6150CD4BCBCDC07
Certificate serial:       02
Authority key identifier: 48:19:CF:9F:7D:81:FB:A7:AD:46:89:18:F6:15:0C:D4:BC:BC:DC:07
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SBnPn32B-6etRokY9hUM1Ly83Ac.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366C1FC/F5CEB8CEC7AD11F1908E3CD7CE1D38B0/E12332E6C7AE11F1A98CF6DBCE1D38B0.roa
Signing time:             Wed 14 Oct 2026 09:08:54 +0000
ROA not before:           Wed 14 Oct 2026 09:08:49 +0000
ROA not after:            Thu 14 Oct 2027 09:08:49 +0000
asID:                     329828
IP address blocks:        102.200.238.0/24 maxlen: 24
                          2c0f:19a0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366C1FC/F5CEB8CEC7AD11F1908E3CD7CE1D38B0/SBnPn32B-6etRokY9hUM1Ly83Ac.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366C1FC/F5CEB8CEC7AD11F1908E3CD7CE1D38B0/SBnPn32B-6etRokY9hUM1Ly83Ac.mft
                          rsync://rpki.afrinic.net/repository/afrinic/SBnPn32B-6etRokY9hUM1Ly83Ac.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 05 Nov 2026 06:04:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366C1FCAF, serialNumber=4819CF9F7D81FBA7AD468918F6150CD4BCBCDC07
        Validity
            Not Before: Oct 14 09:08:49 2026 GMT
            Not After : Oct 14 09:08:49 2027 GMT
        Subject: CN=6acf46a6-7c7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:12:ec:ca:3f:cd:9f:4a:5b:e1:97:55:77:ce:
                    60:66:f5:f2:49:97:3f:08:33:6f:d6:41:91:84:34:
                    03:6c:8f:e8:5b:b4:9e:72:54:95:6d:86:0d:52:4e:
                    73:01:98:fa:f7:54:5f:5f:fa:41:ff:b0:93:eb:05:
                    50:04:03:97:d0:1a:96:2a:6a:a9:fd:1b:2e:d0:69:
                    0d:3a:50:54:a8:b9:66:44:b3:97:bf:a0:28:8d:ba:
                    98:9d:da:88:1f:2b:fa:af:ab:76:2f:0b:c7:9b:81:
                    f2:82:8e:06:68:63:03:c7:cf:97:8c:e0:dd:ef:40:
                    ae:f4:19:e5:c5:39:87:d7:a1:db:83:40:db:36:61:
                    74:57:3b:5e:07:d1:1f:ae:74:e3:be:79:db:7f:c2:
                    c4:b5:81:33:6e:47:70:97:da:f5:da:bf:91:a5:4b:
                    4d:de:a3:28:c7:0f:f5:c9:a7:4f:7b:08:4c:7e:27:
                    c7:4b:2b:70:26:80:7a:3d:86:d6:33:9f:7f:65:ae:
                    de:e6:70:32:a9:0e:78:ba:cc:b4:c5:b7:69:64:fa:
                    6d:3f:44:60:d6:15:28:4a:fb:cd:d9:34:52:63:bf:
                    38:04:01:b8:fa:42:2f:46:96:9f:bd:53:84:fb:65:
                    60:06:ce:4d:02:9f:d9:3c:71:5d:b5:c4:7e:d6:28:
                    d4:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:2A:FF:6E:62:91:62:38:EC:66:FE:27:29:A8:B5:C4:9F:B7:20:FB
            X509v3 Authority Key Identifier:
                keyid:48:19:CF:9F:7D:81:FB:A7:AD:46:89:18:F6:15:0C:D4:BC:BC:DC:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366C1FC/F5CEB8CEC7AD11F1908E3CD7CE1D38B0/SBnPn32B-6etRokY9hUM1Ly83Ac.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SBnPn32B-6etRokY9hUM1Ly83Ac.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366C1FC/F5CEB8CEC7AD11F1908E3CD7CE1D38B0/E12332E6C7AE11F1A98CF6DBCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.200.238.0/24
                IPv6:
                  2c0f:19a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         3e:44:8c:08:62:fe:4d:0e:77:d2:1e:85:50:14:0a:07:91:86:
         05:3d:4d:7a:bd:b3:b3:ab:41:8e:fd:d5:8e:fb:35:4f:d8:a3:
         f9:be:11:8c:e6:07:b0:f7:b7:17:e9:e9:05:ff:31:8a:96:62:
         59:a3:3a:a0:09:83:33:00:7f:11:7e:31:17:b3:d4:81:09:35:
         0a:70:19:88:c2:86:d2:08:b9:46:63:94:04:b1:ac:2c:0d:d6:
         27:25:02:80:e7:99:ab:3e:c2:1b:ad:6a:c8:8b:b3:98:38:3e:
         c6:04:4d:ce:ee:ef:c6:ab:e4:69:86:ed:cb:76:90:84:6c:8d:
         15:25:0e:7a:85:cf:9e:0c:ff:f6:68:0b:b4:8a:41:4e:11:5f:
         74:16:24:f0:37:a8:ca:ec:06:be:c4:26:9b:9c:21:32:51:3f:
         8a:e4:e3:e4:01:36:e2:c2:35:96:f6:94:ea:8c:16:d4:cd:86:
         df:df:19:99:05:a7:ef:d8:0a:48:3e:68:22:f2:da:eb:3d:f4:
         3f:f4:2f:42:e7:d7:aa:85:85:95:75:02:5b:d7:46:03:9f:fb:
         8e:2b:49:a8:eb:03:a5:1f:3d:5d:29:05:69:d5:f3:c3:e3:54:
         bc:88:62:d3:96:74:20:8e:f9:a8:78:31:31:43:ff:9f:25:0d:
         78:59:df:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----