Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3628C37/B37EA5C2EA1511EBA6126201D8A014CE/D973CEC8C97711F1AC35B6F8CE1D38B0.roa
File:                     D973CEC8C97711F1AC35B6F8CE1D38B0.roa (raw, json)
Hash identifier:          6omTEcXAaoaRR7pFaAm+Hq1TyaZmUUT4nQdykKaBeYI=
Subject key identifier:   39:2A:A0:4A:DF:A7:3C:E8:25:81:A6:CE:26:34:9B:A0:E5:D6:4E:9B
Certificate issuer:       /CN=F3628C37AF/serialNumber=039AAF7FE9F60BF0977486FA74B5871859AEA13D
Certificate serial:       07B6
Authority key identifier: 03:9A:AF:7F:E9:F6:0B:F0:97:74:86:FA:74:B5:87:18:59:AE:A1:3D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/A5qvf-n2C_CXdIb6dLWHGFmuoT0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3628C37/B37EA5C2EA1511EBA6126201D8A014CE/D973CEC8C97711F1AC35B6F8CE1D38B0.roa
Signing time:             Fri 16 Oct 2026 15:40:01 +0000
ROA not before:           Fri 16 Oct 2026 15:39:56 +0000
ROA not after:            Wed 15 Oct 2036 15:39:56 +0000
asID:                     328889
IP address blocks:        2c0f:6900:100::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3628C37/B37EA5C2EA1511EBA6126201D8A014CE/A5qvf-n2C_CXdIb6dLWHGFmuoT0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3628C37/B37EA5C2EA1511EBA6126201D8A014CE/A5qvf-n2C_CXdIb6dLWHGFmuoT0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/A5qvf-n2C_CXdIb6dLWHGFmuoT0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 00:08:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1974 (0x7b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3628C37AF, serialNumber=039AAF7FE9F60BF0977486FA74B5871859AEA13D
        Validity
            Not Before: Oct 16 15:39:56 2026 GMT
            Not After : Oct 15 15:39:56 2036 GMT
        Subject: CN=6ad24551-32ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b4:9b:26:2a:67:6e:0d:fb:81:82:0e:e0:af:
                    4b:9f:a2:da:7e:3b:5b:2f:7f:f6:3c:41:51:ca:31:
                    31:36:ca:f8:08:06:ca:98:b5:6c:b2:c3:a9:06:72:
                    5d:d2:b6:0a:13:82:62:8c:84:b9:82:7b:b6:3e:ab:
                    cb:4d:b5:f7:c4:3b:6f:22:22:88:41:0e:3e:a1:39:
                    bf:0d:35:3e:73:2d:07:99:14:05:1e:89:6c:cd:30:
                    11:0e:6d:e6:8c:9b:73:e7:c2:58:37:78:64:ae:74:
                    06:68:b1:19:d7:57:3f:84:2b:1a:dc:d8:ec:db:00:
                    28:77:78:7e:02:11:b2:3d:db:e8:1b:1b:2c:56:76:
                    d4:aa:91:a9:bd:d9:01:65:e2:22:2f:1f:2c:f3:c8:
                    12:b2:ea:d0:57:22:ce:fa:9c:9c:13:b4:74:94:69:
                    88:07:1a:2f:79:a9:0a:f1:42:01:a9:9c:bd:9e:34:
                    4b:2c:59:54:ab:2e:d9:55:ee:6d:c3:29:e1:54:0c:
                    ce:df:b8:05:5d:45:1c:63:b0:e4:69:56:f1:63:19:
                    14:51:bc:36:0a:7e:ee:6c:3c:19:73:8f:56:d7:44:
                    dd:ee:f4:c9:ec:e6:dc:91:20:e3:41:bf:3d:41:4a:
                    1e:0e:b3:e6:d1:6a:3b:d6:14:60:0e:1d:66:5f:11:
                    eb:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:2A:A0:4A:DF:A7:3C:E8:25:81:A6:CE:26:34:9B:A0:E5:D6:4E:9B
            X509v3 Authority Key Identifier:
                keyid:03:9A:AF:7F:E9:F6:0B:F0:97:74:86:FA:74:B5:87:18:59:AE:A1:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3628C37/B37EA5C2EA1511EBA6126201D8A014CE/A5qvf-n2C_CXdIb6dLWHGFmuoT0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/A5qvf-n2C_CXdIb6dLWHGFmuoT0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3628C37/B37EA5C2EA1511EBA6126201D8A014CE/D973CEC8C97711F1AC35B6F8CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:6900:100::/48

    Signature Algorithm: sha256WithRSAEncryption
         83:75:a2:d1:fd:05:60:46:1b:fc:80:7e:a3:da:88:3e:62:d1:
         41:94:5a:af:d6:6c:35:b1:a6:43:05:91:3b:39:88:96:70:89:
         d0:84:5c:a8:19:df:50:75:32:46:98:74:bd:6a:d9:81:2f:16:
         27:f7:44:da:cf:a2:3f:4c:0e:b5:38:dd:c7:77:44:0f:24:39:
         57:ed:40:46:3c:e2:d8:48:17:5e:46:19:f1:27:38:4d:43:1a:
         58:47:65:35:0a:94:37:d6:c4:75:2b:c6:91:cc:57:f4:c1:10:
         79:51:e2:20:63:ac:6e:1f:0e:66:75:2b:e9:a7:20:a2:de:91:
         4b:52:3c:61:fc:f0:47:a5:95:59:5b:c2:ea:4c:59:53:15:36:
         d1:8c:eb:84:80:bf:b6:90:f5:80:24:95:57:48:6e:a7:73:7b:
         78:d4:48:a0:43:7c:89:d6:5d:33:5c:59:8e:a8:31:86:f2:b9:
         26:62:2b:f4:8c:30:41:c3:fc:4e:42:74:d6:ac:4b:9a:8a:ab:
         fe:f4:36:32:8b:1a:0d:1b:ef:20:9c:38:d2:60:0f:2e:05:1d:
         5b:2c:42:5f:87:e0:8a:6f:86:93:cb:7d:df:16:4a:a7:8a:5d:
         ff:57:bb:02:00:3a:7b:c9:1a:9e:9c:99:f8:93:17:1f:6c:b9:
         30:49:c5:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----