Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F361D6E0/6B9D8F6AD10111F1BF054FEECE1D38B0/BC4ED6B6D10211F1A3C7F6F7CE1D38B0.roa
File:                     BC4ED6B6D10211F1A3C7F6F7CE1D38B0.roa (raw, json)
Hash identifier:          +/unW82N1T6/W19O6X44mEwrdKCYN76rWIFlZis+JKM=
Subject key identifier:   F6:F9:AC:A0:00:42:0D:71:45:20:54:D8:E5:36:80:A7:88:A4:19:FD
Certificate issuer:       /CN=F361D6E0AF/serialNumber=DEE7606D399F8499EA4995FBC9DFC15BB9187D65
Certificate serial:       02
Authority key identifier: DE:E7:60:6D:39:9F:84:99:EA:49:95:FB:C9:DF:C1:5B:B9:18:7D:65
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/3udgbTmfhJnqSZX7yd_BW7kYfWU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361D6E0/6B9D8F6AD10111F1BF054FEECE1D38B0/BC4ED6B6D10211F1A3C7F6F7CE1D38B0.roa
Signing time:             Mon 26 Oct 2026 06:01:51 +0000
ROA not before:           Mon 26 Oct 2026 06:01:46 +0000
ROA not after:            Tue 26 Oct 2027 06:01:46 +0000
asID:                     36947
IP address blocks:        102.201.204.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361D6E0/6B9D8F6AD10111F1BF054FEECE1D38B0/3udgbTmfhJnqSZX7yd_BW7kYfWU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361D6E0/6B9D8F6AD10111F1BF054FEECE1D38B0/3udgbTmfhJnqSZX7yd_BW7kYfWU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/3udgbTmfhJnqSZX7yd_BW7kYfWU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 03 Nov 2026 00:08:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361D6E0AF, serialNumber=DEE7606D399F8499EA4995FBC9DFC15BB9187D65
        Validity
            Not Before: Oct 26 06:01:46 2026 GMT
            Not After : Oct 26 06:01:46 2027 GMT
        Subject: CN=6adeeccf-27cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ca:1c:7a:3b:bc:ce:28:3b:95:01:4f:7e:1c:
                    dc:ce:c7:c0:4e:f3:51:11:f9:80:b8:31:b6:20:8c:
                    86:f3:12:5e:2f:bd:07:1e:7d:fa:30:4d:b8:4e:d1:
                    3f:77:49:76:a5:bc:6b:72:5c:ec:c7:bb:bb:de:f1:
                    6b:fd:40:00:51:4e:6e:86:e8:42:8e:51:e1:73:a5:
                    c9:b4:35:df:fd:6b:f5:35:19:a4:1d:4f:03:34:4f:
                    e2:2c:08:98:42:32:08:2a:94:ea:9c:fb:c2:28:ff:
                    57:7f:3f:48:33:42:ae:b6:5a:ee:63:9c:0a:b6:e8:
                    0d:ce:26:5e:80:7f:ce:68:7b:89:af:11:0b:6c:bf:
                    fd:dd:9d:b8:29:a9:fc:46:ee:61:39:ec:be:88:80:
                    e0:fc:e3:fd:7d:24:e7:19:9e:42:03:fc:5b:d5:e1:
                    b6:4c:5f:1c:8c:dd:6c:31:8a:42:ce:55:8b:e3:a2:
                    fa:67:76:5f:de:68:49:69:f9:9d:e9:3d:25:56:c6:
                    bc:19:41:15:bc:b0:b5:3e:5a:84:fe:ea:d4:50:99:
                    16:32:06:e6:49:b6:30:2a:2d:7c:5d:b4:04:5d:3b:
                    90:da:75:96:79:6f:92:84:ff:e6:4e:65:eb:b3:26:
                    23:bf:b3:4a:7a:08:42:23:60:b2:0e:e0:4a:03:d6:
                    c9:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:F9:AC:A0:00:42:0D:71:45:20:54:D8:E5:36:80:A7:88:A4:19:FD
            X509v3 Authority Key Identifier:
                keyid:DE:E7:60:6D:39:9F:84:99:EA:49:95:FB:C9:DF:C1:5B:B9:18:7D:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361D6E0/6B9D8F6AD10111F1BF054FEECE1D38B0/3udgbTmfhJnqSZX7yd_BW7kYfWU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/3udgbTmfhJnqSZX7yd_BW7kYfWU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361D6E0/6B9D8F6AD10111F1BF054FEECE1D38B0/BC4ED6B6D10211F1A3C7F6F7CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.201.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9d:0d:92:e4:b5:93:61:16:06:09:31:99:5a:05:82:d7:9f:a0:
         32:7c:fa:89:2f:f6:89:d5:fb:ac:bf:53:8f:51:6e:25:64:ff:
         28:e4:39:19:8d:31:fe:ef:be:2b:10:73:37:be:4a:f5:37:57:
         0b:a8:dd:91:21:6c:33:dc:c3:6d:01:48:af:86:dd:f5:37:fd:
         c4:40:68:54:b5:85:8a:9e:0b:1c:f5:85:3a:ae:f8:4f:ea:9a:
         84:13:72:c3:95:3a:d3:5a:38:e4:5c:e6:18:8f:7e:36:7e:6c:
         dd:8c:8a:39:7b:88:ae:4d:ca:42:0b:93:c9:9d:ae:17:b7:86:
         cf:36:24:3f:82:84:d5:fc:47:1f:4f:0d:8d:fb:de:ff:0e:7e:
         d6:4d:a9:92:37:1f:30:f4:41:e5:8f:b4:f8:83:0b:7c:3e:64:
         9b:d2:b0:49:90:41:81:bf:e8:62:f4:e7:aa:28:0f:2a:94:e0:
         d4:b2:a0:1c:13:ca:b5:df:ae:86:82:4c:bb:b3:a3:cf:f6:b6:
         77:21:d9:00:82:02:10:23:f1:21:59:28:b2:78:be:e2:97:35:
         1b:ba:52:32:0b:0e:48:73:b8:2b:1b:78:18:06:57:ec:de:54:
         f8:cd:6e:d6:f0:93:f1:d0:53:b9:6a:e9:a8:c5:57:1d:69:16:
         56:a1:25:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----