Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36724C2/A9AE6FF2AB8811F1A44B0014CF1D38B0/6FCAEB4EAB8D11F187F041B2CE1D38B0.roa
File:                     6FCAEB4EAB8D11F187F041B2CE1D38B0.roa (raw, json)
Hash identifier:          TEjUWhtpTqtSUfGe0lxa155l20YdE5rAUao9hrYFvbQ=
Subject key identifier:   5B:1E:80:E7:02:15:91:A9:85:DB:71:B4:2D:97:24:4C:FF:19:89:C3
Certificate issuer:       /CN=F36724C2RI/serialNumber=796DEA3867CB93873E797F142A8EB9C5488C9780
Certificate serial:       04
Authority key identifier: 79:6D:EA:38:67:CB:93:87:3E:79:7F:14:2A:8E:B9:C5:48:8C:97:80
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/eW3qOGfLk4c-eX8UKo65xUiMl4A.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36724C2/A9AE6FF2AB8811F1A44B0014CF1D38B0/6FCAEB4EAB8D11F187F041B2CE1D38B0.roa
Signing time:             Tue 08 Sep 2026 13:58:58 +0000
ROA not before:           Tue 08 Sep 2026 13:58:54 +0000
ROA not after:            Wed 08 Sep 2027 13:58:54 +0000
asID:                     15399
IP address blocks:        62.8.64.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36724C2/A9AE6FF2AB8811F1A44B0014CF1D38B0/eW3qOGfLk4c-eX8UKo65xUiMl4A.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36724C2/A9AE6FF2AB8811F1A44B0014CF1D38B0/eW3qOGfLk4c-eX8UKo65xUiMl4A.mft
                          rsync://rpki.afrinic.net/repository/ripe/eW3qOGfLk4c-eX8UKo65xUiMl4A.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 12 Sep 2026 00:45:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36724C2RI, serialNumber=796DEA3867CB93873E797F142A8EB9C5488C9780
        Validity
            Not Before: Sep  8 13:58:54 2026 GMT
            Not After : Sep  8 13:58:54 2027 GMT
        Subject: CN=6aa014a2-a80f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:e8:a0:37:32:55:f7:f2:39:01:44:89:6d:44:
                    7a:4b:07:22:b8:55:2f:f8:d1:d0:6d:fc:bf:61:de:
                    3b:86:5a:f5:5e:6a:cf:f9:80:52:9c:fb:0d:31:00:
                    af:b0:1c:38:e3:f9:96:a3:90:c2:b6:29:a7:6b:f1:
                    93:57:a6:23:25:e1:d3:d8:59:ea:13:0a:c0:90:d6:
                    5a:f1:6e:40:e1:f9:13:3b:93:fe:8f:93:c3:77:f7:
                    0f:5c:f3:91:c7:d6:1f:2f:3d:f8:49:ff:7d:7f:40:
                    14:c3:ea:dd:e0:07:92:16:a0:5e:7f:f5:2e:fc:b7:
                    7e:f1:76:aa:51:e5:27:10:a8:cc:90:b5:5e:04:6a:
                    0b:7c:5b:47:57:b8:68:3d:f3:6d:01:96:b0:79:f6:
                    29:1c:cc:6d:96:e5:0d:c4:c6:a4:cc:44:6a:11:58:
                    ff:5f:8b:be:78:7e:c8:f8:53:07:8e:5e:c6:21:bf:
                    86:b4:32:db:ee:b9:02:dd:0a:ea:b8:62:f9:9e:0b:
                    ee:4c:ae:02:63:82:65:f5:c9:7f:af:79:a2:02:45:
                    1a:32:2a:b9:46:55:0d:c7:4d:76:19:05:5f:82:09:
                    f4:b1:67:e5:de:e0:0a:9c:6a:99:af:3d:e8:9d:5a:
                    71:cc:16:0e:fa:9c:23:13:d8:e5:23:44:33:c3:6b:
                    c7:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:1E:80:E7:02:15:91:A9:85:DB:71:B4:2D:97:24:4C:FF:19:89:C3
            X509v3 Authority Key Identifier:
                keyid:79:6D:EA:38:67:CB:93:87:3E:79:7F:14:2A:8E:B9:C5:48:8C:97:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36724C2/A9AE6FF2AB8811F1A44B0014CF1D38B0/eW3qOGfLk4c-eX8UKo65xUiMl4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/eW3qOGfLk4c-eX8UKo65xUiMl4A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36724C2/A9AE6FF2AB8811F1A44B0014CF1D38B0/6FCAEB4EAB8D11F187F041B2CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.8.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         c4:88:93:39:b3:9f:12:16:3e:9d:ad:ce:9e:22:dd:b4:1b:64:
         72:27:d8:bc:1e:49:35:07:f6:39:e9:06:68:08:42:e4:41:9f:
         4d:fd:47:f8:11:cf:7c:7e:38:5d:22:84:6c:33:c6:98:61:3a:
         e2:c7:9b:2d:19:3e:54:71:59:7d:d0:c7:74:b7:d7:e7:98:5d:
         c1:2c:eb:7a:6d:1d:d7:a8:1f:21:56:12:0d:8b:e9:7d:c5:bd:
         9e:f8:48:12:cc:f9:d5:68:2b:43:cd:8d:3c:d1:65:d7:95:c7:
         54:e4:6e:83:43:16:de:7d:0e:f3:9f:94:c4:24:bb:fa:65:d4:
         50:81:fd:a9:3c:8e:21:10:6c:cb:9c:8b:83:66:25:e7:2e:d6:
         72:3a:ab:b6:e0:36:5d:69:69:44:a9:b7:f9:f2:14:bd:cc:43:
         36:22:04:82:26:06:f4:4a:07:6c:53:0e:10:03:98:35:6d:36:
         75:5e:0f:20:87:68:99:77:dc:85:e6:1c:b3:16:23:02:90:a4:
         1e:af:5d:41:5b:48:d5:b9:15:08:84:92:3d:b5:48:44:65:5a:
         4c:73:64:c5:98:a6:19:9b:7e:e6:c7:f8:bf:81:e4:5a:18:e5:
         f7:6f:72:ac:6b:92:fa:3a:85:6c:1a:80:f7:6e:2e:f0:2c:22:
         d8:bc:26:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----