Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36BD97C/E424AE2A2D9411EC972CA145D8A014CE/AC8F656ED1FD11F18F864FD8CE1D38B0.roa
File:                     AC8F656ED1FD11F18F864FD8CE1D38B0.roa (raw, json)
Hash identifier:          yctHS4Zz1hfDDHV29RTCYyyPbaqDq/2/LwZbhhW3868=
Subject key identifier:   3B:4A:61:93:AB:5F:DE:99:50:D1:2E:44:16:C0:C5:10:3F:05:3F:A2
Certificate issuer:       /CN=F36BD97CAR/serialNumber=EFF4061F35572E6BFA1C24BB2368FCFE2EAE605A
Certificate serial:       076C
Authority key identifier: EF:F4:06:1F:35:57:2E:6B:FA:1C:24:BB:23:68:FC:FE:2E:AE:60:5A
Authority info access:    rsync://rpki.afrinic.net/repository/arin/7_QGHzVXLmv6HCS7I2j8_i6uYFo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BD97C/E424AE2A2D9411EC972CA145D8A014CE/AC8F656ED1FD11F18F864FD8CE1D38B0.roa
Signing time:             Tue 27 Oct 2026 11:58:08 +0000
ROA not before:           Tue 27 Oct 2026 11:58:03 +0000
ROA not after:            Sat 27 Oct 2029 11:58:03 +0000
asID:                     24691
IP address blocks:        160.242.192.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36BD97C/E424AE2A2D9411EC972CA145D8A014CE/7_QGHzVXLmv6HCS7I2j8_i6uYFo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36BD97C/E424AE2A2D9411EC972CA145D8A014CE/7_QGHzVXLmv6HCS7I2j8_i6uYFo.mft
                          rsync://rpki.afrinic.net/repository/arin/7_QGHzVXLmv6HCS7I2j8_i6uYFo.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 06 Nov 2026 00:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1900 (0x76c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BD97CAR, serialNumber=EFF4061F35572E6BFA1C24BB2368FCFE2EAE605A
        Validity
            Not Before: Oct 27 11:58:03 2026 GMT
            Not After : Oct 27 11:58:03 2029 GMT
        Subject: CN=6ae091d0-9475
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:b5:79:2b:4b:19:c7:f0:87:64:b9:63:3f:4b:
                    e4:2a:7e:74:d0:1a:5c:4a:4e:6a:4a:8b:9a:cf:f9:
                    08:5e:6b:58:e1:85:b3:77:e0:d8:31:b4:78:66:95:
                    de:a0:d1:cf:1e:8d:94:d9:9e:ef:06:8c:62:ff:88:
                    bb:9d:cf:86:f0:9e:e0:a9:4d:2e:17:17:b9:47:28:
                    40:f0:17:54:87:89:a6:11:35:1e:84:8c:6a:9b:41:
                    47:48:10:1e:5a:53:24:a9:42:43:b5:5e:b3:03:fb:
                    24:e1:f5:78:1b:ba:08:00:07:21:33:bf:02:88:e3:
                    de:62:34:f3:4d:ed:59:4e:68:f9:cc:03:99:cd:7c:
                    81:b9:62:6d:2b:85:7f:7b:ee:f9:b8:d4:f7:ff:30:
                    3f:94:51:ab:43:61:46:a7:4f:a8:cb:22:c4:bb:c0:
                    2c:a6:8d:48:35:55:fa:f4:c2:33:11:08:d2:40:61:
                    83:5f:f3:b7:36:17:54:fe:8a:8f:1d:01:0c:45:15:
                    c6:83:eb:a4:5c:53:b1:1f:4e:12:c9:df:af:72:8d:
                    67:0b:16:c0:31:56:80:8e:f1:9b:8a:14:86:38:51:
                    c6:39:51:46:f5:cb:7e:1c:32:d1:c5:68:41:ca:3c:
                    59:f6:20:eb:29:ab:0e:68:af:02:6e:1f:0a:7b:27:
                    fb:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:4A:61:93:AB:5F:DE:99:50:D1:2E:44:16:C0:C5:10:3F:05:3F:A2
            X509v3 Authority Key Identifier:
                keyid:EF:F4:06:1F:35:57:2E:6B:FA:1C:24:BB:23:68:FC:FE:2E:AE:60:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BD97C/E424AE2A2D9411EC972CA145D8A014CE/7_QGHzVXLmv6HCS7I2j8_i6uYFo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/7_QGHzVXLmv6HCS7I2j8_i6uYFo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BD97C/E424AE2A2D9411EC972CA145D8A014CE/AC8F656ED1FD11F18F864FD8CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.242.192.0/21

    Signature Algorithm: sha256WithRSAEncryption
         8a:94:d2:70:1e:4f:5b:b5:b7:51:c5:30:c5:23:7d:e1:de:c6:
         dd:b5:0f:06:cf:4e:63:de:b9:60:d5:33:2a:6b:f5:67:b9:c6:
         90:09:6d:e9:2d:56:e6:f5:ce:3f:90:df:76:ee:ee:80:3d:6d:
         ad:5d:5e:0a:64:78:cd:45:2a:5f:c8:d9:b6:7d:6e:82:fc:0b:
         06:f5:0f:63:5e:51:0a:5c:36:7c:85:45:42:4f:3f:f2:b9:7e:
         b2:45:4c:28:9b:ec:8b:0d:8f:f4:56:48:d6:55:0a:d1:cf:17:
         08:21:10:8c:3f:b9:a4:3d:fb:1a:38:18:0e:75:96:58:08:f9:
         95:f5:19:aa:82:31:82:0c:ed:6d:e7:6f:45:37:e7:de:39:79:
         13:45:ed:6d:3f:25:3d:91:a5:b9:fe:79:ab:0a:6e:d3:c3:09:
         df:1e:a3:7b:b1:67:1d:6d:31:13:e9:3f:b9:30:02:fd:0d:de:
         9c:d5:f7:f9:20:92:dc:1b:72:72:5f:f1:b8:c7:3b:b2:bf:99:
         75:a1:f5:02:04:71:df:ee:17:80:e3:1a:96:51:b5:d8:fd:0d:
         57:25:c4:e2:95:c9:2c:32:a8:59:e9:c5:36:11:a2:7a:b2:1a:
         47:d1:5d:c8:d6:e9:f8:fa:d6:17:d4:d8:7b:12:ff:1b:fd:01:
         f0:0d:90:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----