Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36250A1/0C146B5EA2A811F18FA880E7CE1D38B0/F312CFCEA5C711F1B3FC18CECE1D38B0.roa
File:                     F312CFCEA5C711F1B3FC18CECE1D38B0.roa (raw, json)
Hash identifier:          EFMA6YNMYBhoHPMBTT30p4Lctr0AmQ5qhgphyC0IGSw=
Subject key identifier:   96:C5:53:86:3F:48:6E:94:55:D4:AD:44:A0:DC:84:D7:14:DA:61:EE
Certificate issuer:       /CN=F36250A1AF/serialNumber=6B9A8419B8BCBAE98C4109C5B13F53DC202D9A79
Certificate serial:       09
Authority key identifier: 6B:9A:84:19:B8:BC:BA:E9:8C:41:09:C5:B1:3F:53:DC:20:2D:9A:79
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/a5qEGbi8uumMQQnFsT9T3CAtmnk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36250A1/0C146B5EA2A811F18FA880E7CE1D38B0/F312CFCEA5C711F1B3FC18CECE1D38B0.roa
Signing time:             Tue 01 Sep 2026 05:42:42 +0000
ROA not before:           Tue 01 Sep 2026 05:42:38 +0000
ROA not after:            Wed 31 Dec 2036 05:42:38 +0000
asID:                     329783
IP address blocks:        102.201.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36250A1/0C146B5EA2A811F18FA880E7CE1D38B0/a5qEGbi8uumMQQnFsT9T3CAtmnk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36250A1/0C146B5EA2A811F18FA880E7CE1D38B0/a5qEGbi8uumMQQnFsT9T3CAtmnk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/a5qEGbi8uumMQQnFsT9T3CAtmnk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 20 Sep 2026 00:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9 (0x9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36250A1AF, serialNumber=6B9A8419B8BCBAE98C4109C5B13F53DC202D9A79
        Validity
            Not Before: Sep  1 05:42:38 2026 GMT
            Not After : Dec 31 05:42:38 2036 GMT
        Subject: CN=6a9665d2-bb24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:97:57:b1:8d:85:9f:a6:04:75:11:80:4f:da:
                    e0:70:11:76:ed:e3:99:29:21:35:4a:42:aa:47:20:
                    04:9b:5f:b6:2b:c1:3e:78:d4:bb:28:95:f6:a0:c7:
                    dd:47:21:a6:2c:ef:d8:ae:05:68:db:06:be:2b:24:
                    a0:3b:75:05:41:de:4d:ea:81:ec:c2:73:25:89:5e:
                    b6:1e:43:eb:a2:c4:48:0b:2d:9b:c2:98:6d:d3:ad:
                    c5:35:1a:81:6d:6c:f4:b2:86:80:7c:80:23:18:94:
                    c0:45:eb:48:62:87:32:b2:80:9b:6a:16:3a:8c:a7:
                    27:fe:65:cf:4d:52:7d:5b:01:96:c9:87:26:84:1b:
                    0b:8f:ac:48:b5:70:eb:8c:8b:b9:eb:ea:cd:d9:60:
                    58:d5:b4:06:13:9c:3a:29:d1:f6:dd:49:26:e6:14:
                    37:e1:d9:8b:77:a7:2f:ab:5c:13:b0:33:24:36:ae:
                    21:7f:f9:a1:ff:93:91:41:3a:c7:7b:4c:d3:10:76:
                    3d:29:8c:88:f9:9d:f8:dc:3f:91:55:e3:65:4f:0c:
                    a6:cb:25:aa:fd:75:a9:77:ec:54:12:03:36:84:d2:
                    8b:e9:e3:f0:ab:63:06:b5:d4:ed:cb:0c:a7:b6:80:
                    e1:d1:a7:4c:dc:30:8c:bd:6b:61:96:d9:19:86:de:
                    1e:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:C5:53:86:3F:48:6E:94:55:D4:AD:44:A0:DC:84:D7:14:DA:61:EE
            X509v3 Authority Key Identifier:
                keyid:6B:9A:84:19:B8:BC:BA:E9:8C:41:09:C5:B1:3F:53:DC:20:2D:9A:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36250A1/0C146B5EA2A811F18FA880E7CE1D38B0/a5qEGbi8uumMQQnFsT9T3CAtmnk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/a5qEGbi8uumMQQnFsT9T3CAtmnk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36250A1/0C146B5EA2A811F18FA880E7CE1D38B0/F312CFCEA5C711F1B3FC18CECE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.201.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:ec:a3:43:b9:f4:a9:4a:53:6e:ec:96:31:1d:13:de:69:56:
         f8:03:14:a0:5c:78:5b:e7:72:64:10:3a:91:86:65:16:b7:3e:
         19:c0:68:9f:13:ec:f9:c1:f5:2e:5a:ab:e4:ea:b4:0c:f4:e1:
         72:bf:28:86:b3:7e:e0:a3:68:7b:cb:84:ce:de:ad:e9:c9:67:
         b1:b0:30:a9:a5:3b:56:09:d7:2c:98:71:f2:f8:ea:65:28:2d:
         01:6a:5e:41:14:ce:4b:e3:88:f8:9f:0f:ea:ff:b3:41:a7:e9:
         2f:9a:ae:22:38:f7:5f:19:db:3c:87:53:1f:d5:8f:3d:ed:7e:
         9d:41:e9:ab:c1:20:33:e5:58:10:b0:54:3c:09:8e:ce:70:31:
         8d:e1:32:f5:ce:76:af:57:ca:51:5a:8f:ca:ed:56:2b:e0:9d:
         fb:2b:c1:f6:1f:b6:a5:a8:e1:c3:bc:86:0f:71:e1:22:03:02:
         cb:6b:02:9f:db:ed:07:92:b5:6e:0c:fb:8c:4b:e2:0b:78:58:
         9b:65:3f:10:30:b5:42:d6:64:d2:a0:87:11:1c:62:bb:dd:ed:
         b5:2c:87:bd:a5:57:a4:5b:82:83:c7:41:ae:2a:71:1d:f4:db:
         e4:b2:ff:ae:e0:68:f1:26:47:6a:d6:c6:53:bd:46:8a:8c:df:
         3e:cc:90:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----