Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F366EAA1/A4D722A6931611F1A17A8FBFCE1D38B0/9E0200DE931811F1AED0AECBCE1D38B0.roa
File:                     9E0200DE931811F1AED0AECBCE1D38B0.roa (raw, json)
Hash identifier:          PHYixGjtnNsWMxr7k4ccARleRWY8Vl+qnwhzE6bVdn4=
Subject key identifier:   AB:61:1A:A4:22:11:2E:84:DA:98:3A:89:B4:68:E4:86:2E:8B:87:7D
Certificate issuer:       /CN=F366EAA1AF/serialNumber=771E84BB20F515DCC037B2C366F8C382B819BFE7
Certificate serial:       02
Authority key identifier: 77:1E:84:BB:20:F5:15:DC:C0:37:B2:C3:66:F8:C3:82:B8:19:BF:E7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/dx6EuyD1FdzAN7LDZvjDgrgZv-c.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366EAA1/A4D722A6931611F1A17A8FBFCE1D38B0/9E0200DE931811F1AED0AECBCE1D38B0.roa
Signing time:             Sat 08 Aug 2026 11:02:17 +0000
ROA not before:           Sat 08 Aug 2026 11:02:13 +0000
ROA not after:            Tue 08 Aug 2028 11:02:13 +0000
asID:                     329344
IP address blocks:        102.210.236.0/22 maxlen: 24
                          2c0f:1e40::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366EAA1/A4D722A6931611F1A17A8FBFCE1D38B0/dx6EuyD1FdzAN7LDZvjDgrgZv-c.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366EAA1/A4D722A6931611F1A17A8FBFCE1D38B0/dx6EuyD1FdzAN7LDZvjDgrgZv-c.mft
                          rsync://rpki.afrinic.net/repository/afrinic/dx6EuyD1FdzAN7LDZvjDgrgZv-c.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 20 Sep 2026 00:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366EAA1AF, serialNumber=771E84BB20F515DCC037B2C366F8C382B819BFE7
        Validity
            Not Before: Aug  8 11:02:13 2026 GMT
            Not After : Aug  8 11:02:13 2028 GMT
        Subject: CN=6a770cb9-7429
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:55:ed:38:a0:aa:40:f2:c2:98:6f:b6:df:86:
                    93:3f:98:6e:21:fe:05:4f:13:37:22:ec:09:7b:30:
                    01:48:3f:3e:41:21:8b:66:0e:59:f2:5b:3f:02:12:
                    98:db:e1:59:09:9c:1a:2b:7d:e7:3c:69:83:bc:0d:
                    2f:ed:ab:76:19:8c:cb:05:0d:42:42:7b:1b:93:62:
                    a0:f3:4a:4b:7a:93:d9:b3:ba:8b:05:ae:1a:09:12:
                    37:0f:a8:ee:cf:3b:2d:2c:ef:ab:bc:e7:5d:fd:d9:
                    48:e6:e5:7e:b7:47:dc:13:88:97:12:91:8d:1c:7f:
                    27:f8:5f:c2:81:b7:7c:d3:c6:a6:87:08:52:b0:dc:
                    3b:af:d2:f7:37:5a:73:05:bc:52:d2:94:36:c9:04:
                    d7:c5:bf:b3:46:1e:99:46:95:71:d9:8f:61:73:70:
                    cf:f4:fd:67:18:79:6a:5c:b5:78:a3:6d:1c:5d:39:
                    5f:a9:ef:dd:94:13:57:a5:ff:34:80:0f:34:65:1e:
                    9a:15:6b:66:5b:39:45:b8:e7:2e:8d:23:d7:88:54:
                    1a:47:1b:e4:02:14:93:ea:d4:fe:5e:0e:4f:10:0d:
                    dd:2b:2a:63:55:4c:5a:40:d8:ca:4d:8d:00:12:70:
                    bb:98:05:9e:f2:9f:95:b2:69:1c:0f:f9:62:8c:62:
                    67:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:61:1A:A4:22:11:2E:84:DA:98:3A:89:B4:68:E4:86:2E:8B:87:7D
            X509v3 Authority Key Identifier:
                keyid:77:1E:84:BB:20:F5:15:DC:C0:37:B2:C3:66:F8:C3:82:B8:19:BF:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366EAA1/A4D722A6931611F1A17A8FBFCE1D38B0/dx6EuyD1FdzAN7LDZvjDgrgZv-c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/dx6EuyD1FdzAN7LDZvjDgrgZv-c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366EAA1/A4D722A6931611F1A17A8FBFCE1D38B0/9E0200DE931811F1AED0AECBCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.210.236.0/22
                IPv6:
                  2c0f:1e40::/32

    Signature Algorithm: sha256WithRSAEncryption
         b0:04:59:b9:08:6f:e1:f7:07:1a:ef:66:5e:ac:5a:4a:e0:62:
         7a:22:d3:3f:ab:5f:49:01:26:dd:a8:db:37:e6:16:6a:ee:92:
         c3:7c:2d:5f:34:1b:84:d6:6d:37:9b:ae:da:cb:28:ff:e8:5b:
         fa:0c:69:82:a4:ac:f7:58:d7:96:f6:23:01:d6:6d:32:74:92:
         e2:8f:82:f1:e8:9f:de:69:f0:5c:1b:d5:58:b9:fd:3e:e3:ab:
         dd:5a:59:e6:22:13:64:07:a2:5d:83:b9:77:62:3a:0c:ab:53:
         36:fe:d5:aa:ad:92:31:63:c4:27:86:ff:85:4c:a8:4f:8b:b8:
         f4:07:fb:b2:b6:93:f4:4f:32:8d:3e:e8:9f:fc:8a:af:89:79:
         ed:8b:71:75:e6:eb:07:ff:e7:4f:05:f7:d4:c6:3b:b4:16:9f:
         3b:e4:4b:0b:78:80:a0:60:af:66:59:22:d1:9f:4c:07:c6:3e:
         4a:73:f9:1d:d0:a5:f0:4a:37:17:15:d3:c7:6b:a4:3f:4d:b1:
         4d:7d:cf:20:70:f3:2f:bf:fb:10:9f:f3:2f:03:3d:d2:48:7e:
         a8:a5:1a:d1:1b:d0:8b:37:f0:12:99:fe:8c:f8:b3:e7:b1:60:
         b4:33:1b:03:1b:e8:8d:bd:f3:aa:87:bf:35:53:06:cc:63:c5:
         12:69:99:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----