Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36724C2/A9AE6FF2AB8811F1A44B0014CF1D38B0/42F64AF6ACEF11F18C8CB818CF1D38B0.roa
File:                     42F64AF6ACEF11F18C8CB818CF1D38B0.roa (raw, json)
Hash identifier:          zzQJK5ajfcyXqzqBUyOWm3W0mJWdmrxeq5n6MrvB/Dc=
Subject key identifier:   1D:32:5F:AE:3C:1C:F8:50:3C:01:F5:E8:DC:F0:9E:55:0F:67:1D:4C
Certificate issuer:       /CN=F36724C2RI/serialNumber=796DEA3867CB93873E797F142A8EB9C5488C9780
Certificate serial:       08
Authority key identifier: 79:6D:EA:38:67:CB:93:87:3E:79:7F:14:2A:8E:B9:C5:48:8C:97:80
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/eW3qOGfLk4c-eX8UKo65xUiMl4A.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36724C2/A9AE6FF2AB8811F1A44B0014CF1D38B0/42F64AF6ACEF11F18C8CB818CF1D38B0.roa
Signing time:             Thu 10 Sep 2026 08:11:45 +0000
ROA not before:           Thu 10 Sep 2026 08:11:40 +0000
ROA not after:            Wed 08 Sep 2027 08:11:40 +0000
asID:                     37027
IP address blocks:        62.8.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36724C2/A9AE6FF2AB8811F1A44B0014CF1D38B0/eW3qOGfLk4c-eX8UKo65xUiMl4A.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36724C2/A9AE6FF2AB8811F1A44B0014CF1D38B0/eW3qOGfLk4c-eX8UKo65xUiMl4A.mft
                          rsync://rpki.afrinic.net/repository/ripe/eW3qOGfLk4c-eX8UKo65xUiMl4A.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 12 Sep 2026 00:45:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8 (0x8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36724C2RI, serialNumber=796DEA3867CB93873E797F142A8EB9C5488C9780
        Validity
            Not Before: Sep 10 08:11:40 2026 GMT
            Not After : Sep  8 08:11:40 2027 GMT
        Subject: CN=6aa26641-f877
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:b4:93:ef:b4:65:a2:29:ba:54:05:34:7a:e9:
                    ee:39:18:a4:65:c7:c2:a4:97:c5:c9:ba:b3:7f:f0:
                    45:03:00:38:98:44:b3:18:25:8f:15:da:05:dd:b0:
                    84:86:19:aa:42:dd:7c:c5:e8:a6:be:8c:74:ef:fd:
                    76:25:8f:7e:75:e4:0c:45:7c:cc:ea:22:d3:cd:78:
                    68:a6:8d:aa:da:18:af:21:ef:e3:94:b3:62:e4:d5:
                    a6:e4:83:a8:1f:53:29:59:1f:58:8a:fd:81:b1:d8:
                    ca:ea:9b:c1:c3:02:68:9d:7a:81:f2:09:21:59:2a:
                    f3:13:eb:0b:03:8c:0a:ca:f5:03:7c:29:c5:31:13:
                    22:c7:38:b6:2b:91:5e:e1:b6:cd:13:ef:e3:fb:e9:
                    25:5c:41:05:76:2d:08:ec:4f:c9:3d:14:5e:a1:8c:
                    fd:b6:8c:ab:e9:ca:67:54:a4:b8:05:c1:e7:06:81:
                    28:46:2a:78:e5:42:88:7e:eb:26:0d:4b:d4:c8:e6:
                    73:3f:46:c9:c0:7f:86:97:b9:58:b4:e9:7b:45:8c:
                    07:1d:b2:cf:35:dd:16:7a:ef:82:f5:cc:55:54:15:
                    77:4c:63:18:56:6f:73:ec:b0:84:0b:8d:12:bb:83:
                    3b:cf:71:a8:6a:08:c4:87:e3:04:75:db:08:df:a8:
                    6d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:32:5F:AE:3C:1C:F8:50:3C:01:F5:E8:DC:F0:9E:55:0F:67:1D:4C
            X509v3 Authority Key Identifier:
                keyid:79:6D:EA:38:67:CB:93:87:3E:79:7F:14:2A:8E:B9:C5:48:8C:97:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36724C2/A9AE6FF2AB8811F1A44B0014CF1D38B0/eW3qOGfLk4c-eX8UKo65xUiMl4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/eW3qOGfLk4c-eX8UKo65xUiMl4A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36724C2/A9AE6FF2AB8811F1A44B0014CF1D38B0/42F64AF6ACEF11F18C8CB818CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.8.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d1:71:7a:7b:d5:f9:31:7f:e6:f7:a8:e5:b7:25:8d:4c:6e:a9:
         9d:9f:5a:1e:6a:71:0f:c5:f9:3f:11:2a:28:14:ca:07:4f:99:
         e1:aa:fe:43:e0:e1:5c:87:a9:52:80:a9:aa:86:3b:9d:0d:69:
         2f:ed:be:16:03:25:c2:46:b9:8e:69:ad:e3:ea:a8:54:d2:a6:
         3b:72:f3:43:1a:12:dc:88:2a:79:c3:75:9d:22:97:33:c5:bf:
         04:2b:0e:69:4c:d6:c2:9c:17:38:d3:8e:ef:cd:fe:bf:7c:3e:
         54:10:7c:45:6f:73:b4:33:e7:85:a4:33:f3:76:b4:ae:34:3f:
         66:b2:c8:0e:5c:70:2e:54:29:45:ad:a5:d5:48:e3:87:92:41:
         a2:24:ce:ae:26:2c:5e:45:8d:47:e6:1d:ff:4e:67:db:05:6a:
         fa:f7:bc:07:3f:85:34:d4:8b:e4:29:4b:68:d8:59:e8:17:d9:
         ae:4d:64:8c:58:7e:cb:c2:02:98:e5:98:d1:44:49:fc:e2:bc:
         5a:1c:51:0c:ac:03:1c:f4:ef:25:77:91:40:fb:f6:ea:7d:8f:
         f7:0f:6e:2b:2c:c8:82:3d:42:87:d6:af:32:ba:04:d8:6f:7e:
         22:ee:6b:0a:e7:ab:da:51:74:db:37:cb:6c:cd:ad:13:40:dd:
         b2:04:3b:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----