Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3642DBC/5FEDEDB6C0CD11F1A176DCD9CE1D38B0/2EBE53A6C0CE11F18DEB96DECE1D38B0.roa
File:                     2EBE53A6C0CE11F18DEB96DECE1D38B0.roa (raw, json)
Hash identifier:          yQqqe76VOjkkSkc5Or+RVXwojklQRtMiUJziaGrwRqo=
Subject key identifier:   21:68:3B:B0:B2:35:F0:1C:C1:61:43:F2:51:B2:FB:1B:AA:90:9C:E9
Certificate issuer:       /CN=F3642DBCAF/serialNumber=808016258E6ACAC32D284F3ADB3FA67259A2BBC0
Certificate serial:       02
Authority key identifier: 80:80:16:25:8E:6A:CA:C3:2D:28:4F:3A:DB:3F:A6:72:59:A2:BB:C0
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/gIAWJY5qysMtKE862z-mclmiu8A.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3642DBC/5FEDEDB6C0CD11F1A176DCD9CE1D38B0/2EBE53A6C0CE11F18DEB96DECE1D38B0.roa
Signing time:             Mon 05 Oct 2026 15:05:21 +0000
ROA not before:           Mon 05 Oct 2026 15:05:07 +0000
ROA not after:            Tue 05 Oct 2027 15:05:07 +0000
asID:                     328199
IP address blocks:        2c0f:f110::/32 maxlen: 32
                          2c0f:f110:1000::/36 maxlen: 36
                          2c0f:f110:2000::/36 maxlen: 36
                          2c0f:f110:3000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3642DBC/5FEDEDB6C0CD11F1A176DCD9CE1D38B0/gIAWJY5qysMtKE862z-mclmiu8A.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3642DBC/5FEDEDB6C0CD11F1A176DCD9CE1D38B0/gIAWJY5qysMtKE862z-mclmiu8A.mft
                          rsync://rpki.afrinic.net/repository/afrinic/gIAWJY5qysMtKE862z-mclmiu8A.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 28 Oct 2026 05:52:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3642DBCAF, serialNumber=808016258E6ACAC32D284F3ADB3FA67259A2BBC0
        Validity
            Not Before: Oct  5 15:05:07 2026 GMT
            Not After : Oct  5 15:05:07 2027 GMT
        Subject: CN=6ac3bcb1-009c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:56:c9:e0:7a:9c:83:8c:f0:2b:8e:18:55:fb:
                    af:6c:5d:9f:b5:a2:b3:b8:5d:2e:04:be:62:98:11:
                    df:df:78:b7:e0:41:a0:2d:a4:4b:d8:ac:5c:04:65:
                    bd:24:7c:a8:34:60:14:c1:ad:33:cb:a3:87:cd:8a:
                    f1:2f:32:3c:ef:d2:99:c4:01:7e:9e:b9:92:54:df:
                    3d:1e:93:f2:aa:65:65:59:ee:66:41:c1:03:c3:79:
                    22:52:41:a3:fe:04:fc:59:4c:cb:58:4a:38:de:ca:
                    ac:40:d5:5b:27:5f:7e:f7:f6:2c:9e:f4:5c:d7:fd:
                    17:3c:0f:19:89:27:34:01:bf:2e:36:4a:bb:40:95:
                    17:79:c5:0f:47:f0:1e:6c:32:c7:7e:73:2d:f5:7c:
                    ae:0c:3b:af:44:e0:0e:94:2c:c0:19:fe:40:ff:3f:
                    7d:12:f2:7a:0a:da:33:39:7c:40:bf:e3:91:97:bd:
                    f5:10:d9:11:a1:fa:de:9c:ab:ea:00:6a:24:d3:ea:
                    7a:6c:c7:de:0f:ac:57:aa:12:45:1d:2a:88:9a:5b:
                    e8:37:85:3d:04:84:2a:2e:81:7f:7c:75:df:ae:10:
                    e3:48:0e:0d:b7:35:ca:fe:84:ba:82:b2:45:2a:72:
                    cd:13:af:84:a8:ec:1a:f8:96:a8:09:1f:e4:10:f7:
                    2b:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:68:3B:B0:B2:35:F0:1C:C1:61:43:F2:51:B2:FB:1B:AA:90:9C:E9
            X509v3 Authority Key Identifier:
                keyid:80:80:16:25:8E:6A:CA:C3:2D:28:4F:3A:DB:3F:A6:72:59:A2:BB:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3642DBC/5FEDEDB6C0CD11F1A176DCD9CE1D38B0/gIAWJY5qysMtKE862z-mclmiu8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gIAWJY5qysMtKE862z-mclmiu8A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3642DBC/5FEDEDB6C0CD11F1A176DCD9CE1D38B0/2EBE53A6C0CE11F18DEB96DECE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:f110::/32

    Signature Algorithm: sha256WithRSAEncryption
         c2:70:62:11:b0:4a:d1:18:5a:81:e2:4d:a9:c7:af:7d:9e:7d:
         81:4d:13:72:89:00:c3:52:33:a4:f2:cd:be:ed:ac:4a:51:a4:
         2b:5c:67:83:79:16:9a:89:59:ed:85:ed:c3:73:c2:bc:3a:35:
         86:77:07:41:8e:da:1a:63:38:56:ec:a9:07:a2:5a:fd:73:50:
         33:0c:96:28:65:c1:54:d4:56:da:42:5e:95:ec:5b:f3:99:fd:
         e2:89:aa:27:d9:b0:b7:6d:33:75:dd:87:a4:21:13:c0:c1:eb:
         a9:bc:0b:8c:15:3f:a2:82:74:8d:1d:b7:15:d6:54:42:cc:28:
         34:ee:7e:e6:67:99:c2:d3:d6:66:6d:e6:e9:fb:e3:27:f4:7e:
         f3:10:ca:0d:aa:ea:2c:b5:06:c8:e9:4e:bb:2b:39:39:53:14:
         96:54:7f:aa:5d:7c:e7:27:15:7d:01:17:fe:d5:27:cf:1a:d5:
         cc:64:00:21:77:d9:63:9f:4b:9a:5b:5f:91:09:6b:21:56:45:
         73:f0:31:84:b8:5f:9c:83:84:e5:08:73:c9:90:50:a3:7b:2c:
         81:b9:5c:64:34:9f:a7:ba:e1:5c:64:e0:a5:d7:5c:db:48:89:
         35:7b:eb:53:90:5a:b6:8d:da:fb:b9:22:1b:ef:5d:ae:b6:b4:
         48:f8:54:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----