Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F367D0C5/29E381AEA48911ED81691E87F1222468/38091F36CC1311F1AFFBE6EDCE1D38B0.roa
File:                     38091F36CC1311F1AFFBE6EDCE1D38B0.roa (raw, json)
Hash identifier:          f9KkcvYIzrRlbKzLzx/6gUwY6/Pzf04lBDEV2wTEXuc=
Subject key identifier:   72:D4:68:6B:D0:B6:05:B9:6C:CD:A0:7A:C1:5B:F6:6A:38:CB:ED:80
Certificate issuer:       /CN=F367D0C5AF/serialNumber=569245EDF8EF53DD25E0095A12485B170F10EC3E
Certificate serial:       0588
Authority key identifier: 56:92:45:ED:F8:EF:53:DD:25:E0:09:5A:12:48:5B:17:0F:10:EC:3E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/VpJF7fjvU90l4AlaEkhbFw8Q7D4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367D0C5/29E381AEA48911ED81691E87F1222468/38091F36CC1311F1AFFBE6EDCE1D38B0.roa
Signing time:             Mon 19 Oct 2026 23:17:14 +0000
ROA not before:           Tue 20 Oct 2026 23:17:09 +0000
ROA not after:            Sun 20 Oct 2030 23:17:09 +0000
asID:                     37284
IP address blocks:        102.201.0.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367D0C5/29E381AEA48911ED81691E87F1222468/VpJF7fjvU90l4AlaEkhbFw8Q7D4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367D0C5/29E381AEA48911ED81691E87F1222468/VpJF7fjvU90l4AlaEkhbFw8Q7D4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/VpJF7fjvU90l4AlaEkhbFw8Q7D4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 05 Nov 2026 00:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1416 (0x588)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367D0C5AF, serialNumber=569245EDF8EF53DD25E0095A12485B170F10EC3E
        Validity
            Not Before: Oct 20 23:17:09 2026 GMT
            Not After : Oct 20 23:17:09 2030 GMT
        Subject: CN=6ad6a4fa-a6be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:21:24:67:29:26:72:50:7f:fa:27:16:41:ec:
                    9b:f4:ea:68:53:66:ed:ce:95:75:97:bb:56:8c:4a:
                    be:1b:87:d2:4b:f9:61:18:15:2a:26:fc:30:79:83:
                    6b:9d:8b:0f:a7:3e:9b:46:ff:cb:e7:a2:2c:d4:da:
                    c8:c7:56:ca:58:3d:38:99:94:58:2f:ed:fa:f3:90:
                    5e:27:39:7a:a0:f8:c9:9d:bf:92:70:74:75:dc:7a:
                    88:55:34:a0:79:94:0e:cc:b9:d0:d1:3a:f5:af:55:
                    29:22:85:0a:7a:6d:cd:1f:18:45:5f:f7:11:ef:cf:
                    3f:19:2d:0c:20:c9:63:87:e5:3d:13:cf:c0:06:92:
                    93:31:47:66:4d:e9:f3:aa:5e:9a:7c:5c:42:df:15:
                    4f:46:73:5d:7c:14:dd:1d:9f:a7:bf:d9:6f:71:b6:
                    23:65:c2:cc:15:e3:0a:44:32:ed:5a:39:0d:7e:b4:
                    75:7a:45:d1:81:c1:c4:24:79:45:f3:cb:35:63:d9:
                    dc:ef:dc:31:ad:ff:2f:82:57:a8:bd:75:fe:b3:b3:
                    8c:65:e7:35:dd:0d:74:2f:0e:d8:2b:74:bf:d5:e9:
                    68:37:cd:ca:6b:e5:eb:2a:2a:37:a7:88:dd:b2:82:
                    be:90:0c:1c:32:22:1e:82:18:77:81:cf:0b:57:2b:
                    73:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:D4:68:6B:D0:B6:05:B9:6C:CD:A0:7A:C1:5B:F6:6A:38:CB:ED:80
            X509v3 Authority Key Identifier:
                keyid:56:92:45:ED:F8:EF:53:DD:25:E0:09:5A:12:48:5B:17:0F:10:EC:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367D0C5/29E381AEA48911ED81691E87F1222468/VpJF7fjvU90l4AlaEkhbFw8Q7D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/VpJF7fjvU90l4AlaEkhbFw8Q7D4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367D0C5/29E381AEA48911ED81691E87F1222468/38091F36CC1311F1AFFBE6EDCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.201.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9d:80:a6:20:93:ba:c4:44:63:04:a2:67:98:f4:50:aa:b4:bc:
         e3:19:22:f0:ae:3b:4f:d7:31:1e:70:2a:88:7c:e5:98:37:e0:
         42:90:3d:74:6c:47:8d:3a:c3:94:9e:b5:ab:71:42:91:1a:be:
         9d:b6:a1:6e:29:6e:25:6a:5a:df:fa:d2:1b:40:f1:4a:d6:63:
         58:f8:dc:b2:b8:3f:8d:58:0f:df:35:73:1a:5f:78:9f:b5:c4:
         33:be:e2:d1:6b:a7:56:47:e8:5c:44:6c:8e:f7:6b:97:45:d8:
         d7:6f:86:6e:6a:0a:1b:20:f3:db:18:95:79:31:0b:b2:97:79:
         de:6e:07:b8:9f:ad:bc:18:1c:cb:33:52:30:39:05:bc:e9:23:
         de:4a:a4:7e:b1:96:75:75:af:89:49:fe:e8:16:ce:86:87:6b:
         88:11:39:cc:21:60:67:53:ea:27:8f:70:6b:d0:8c:18:d1:8a:
         bf:0d:b3:1f:71:57:4c:50:70:65:ed:57:c9:c4:d3:78:0b:92:
         28:e9:c4:2b:57:c2:3c:08:06:1d:f0:fe:62:ee:e3:44:95:d3:
         6b:43:93:94:59:41:cc:d9:34:3c:d0:15:fa:93:fc:54:7e:c7:
         85:6d:a4:b9:7f:6f:75:70:c3:2d:1a:ea:56:27:e9:f7:f0:a0:
         9f:ec:09:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----