Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36724C2/BFDAB754AB8811F183655414CF1D38B0/E6B34480AC1011F19995DAD5CE1D38B0.roa
File:                     E6B34480AC1011F19995DAD5CE1D38B0.roa (raw, json)
Hash identifier:          llUZzNIWBE4VynEvGF/9Vn7at2bNc1NMrrPXH8KLCoc=
Subject key identifier:   DC:64:B1:46:B8:B9:5B:6F:49:26:A9:DB:31:28:52:F7:25:41:70:EB
Certificate issuer:       /CN=F36724C2AF/serialNumber=AC5DF5304809BB783EB962126958A00786E8F67C
Certificate serial:       0A
Authority key identifier: AC:5D:F5:30:48:09:BB:78:3E:B9:62:12:69:58:A0:07:86:E8:F6:7C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/rF31MEgJu3g-uWISaVigB4bo9nw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36724C2/BFDAB754AB8811F183655414CF1D38B0/E6B34480AC1011F19995DAD5CE1D38B0.roa
Signing time:             Wed 09 Sep 2026 05:40:02 +0000
ROA not before:           Wed 09 Sep 2026 05:39:58 +0000
ROA not after:            Thu 09 Sep 2027 05:39:58 +0000
asID:                     15399
IP address blocks:        102.215.188.0/22 maxlen: 22
                          102.215.188.0/22 maxlen: 23
                          102.215.188.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36724C2/BFDAB754AB8811F183655414CF1D38B0/rF31MEgJu3g-uWISaVigB4bo9nw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36724C2/BFDAB754AB8811F183655414CF1D38B0/rF31MEgJu3g-uWISaVigB4bo9nw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/rF31MEgJu3g-uWISaVigB4bo9nw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 20 Sep 2026 00:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10 (0xa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36724C2AF, serialNumber=AC5DF5304809BB783EB962126958A00786E8F67C
        Validity
            Not Before: Sep  9 05:39:58 2026 GMT
            Not After : Sep  9 05:39:58 2027 GMT
        Subject: CN=6aa0f132-6b9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:b5:84:d0:a6:bd:d4:f3:da:30:9b:f4:26:41:
                    04:71:4c:49:bf:24:b6:50:d7:95:09:46:79:64:ab:
                    bb:d7:de:b2:41:2b:23:7f:84:10:c0:60:69:82:fc:
                    f7:bf:03:e9:c2:4d:12:30:94:e6:73:4b:80:0a:1c:
                    24:31:cd:30:04:55:d8:4c:ed:75:c2:d0:09:c3:cb:
                    1e:b0:82:cc:05:4e:25:98:ab:ba:14:ff:2d:25:11:
                    f3:e8:e2:3b:d8:76:e2:be:16:85:47:c3:48:d5:5b:
                    c2:5f:6a:8a:3f:ff:cf:3d:b3:0b:84:d3:82:38:85:
                    8f:ed:e5:1e:90:59:e8:19:9b:46:45:c8:eb:2a:c8:
                    69:ad:5e:1a:fb:e3:89:b0:1d:d0:50:bb:09:7f:2c:
                    74:d4:48:6b:58:5f:66:c2:23:a1:d4:83:70:65:7f:
                    c0:4b:ad:0d:e5:cf:e2:cd:81:fd:7e:60:87:80:a6:
                    70:2a:98:c0:c2:2b:90:7b:4b:f2:41:31:00:4d:50:
                    84:44:c1:26:e9:ed:68:4b:d2:56:de:06:9d:ca:23:
                    52:2c:57:18:57:fc:14:26:cf:14:3a:9a:db:72:8f:
                    70:d1:a7:47:2c:9a:80:e3:f9:c2:0b:7a:cf:2f:41:
                    cb:de:76:22:55:27:9e:3e:08:55:56:3f:3e:60:1c:
                    16:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:64:B1:46:B8:B9:5B:6F:49:26:A9:DB:31:28:52:F7:25:41:70:EB
            X509v3 Authority Key Identifier:
                keyid:AC:5D:F5:30:48:09:BB:78:3E:B9:62:12:69:58:A0:07:86:E8:F6:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36724C2/BFDAB754AB8811F183655414CF1D38B0/rF31MEgJu3g-uWISaVigB4bo9nw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rF31MEgJu3g-uWISaVigB4bo9nw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36724C2/BFDAB754AB8811F183655414CF1D38B0/E6B34480AC1011F19995DAD5CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.215.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5f:36:cf:e5:05:f3:a6:37:b0:b0:98:b7:9c:d4:46:56:79:8f:
         b8:60:33:6b:53:a3:1b:cd:56:b4:59:e3:db:f4:3a:5e:ab:4f:
         ae:2c:8e:f7:a4:57:fd:2e:c0:e7:54:77:3d:22:80:cd:12:55:
         bc:c9:db:3b:63:ff:7d:cf:4c:2b:e5:e4:e9:d2:a4:2f:ef:3f:
         01:1c:bb:55:4e:65:71:2b:97:d4:ac:91:20:48:90:66:e6:cb:
         b5:08:0c:e0:00:28:2c:2e:da:66:e0:d3:68:56:92:29:83:c7:
         f2:0a:25:c6:b6:dd:33:e7:78:77:fd:09:2c:b0:8e:df:7c:11:
         4c:9b:cc:6a:2f:8a:80:4e:b7:f5:3c:45:d5:70:c4:2a:42:43:
         a5:f7:99:d7:30:59:e3:f5:da:a7:fc:c0:4d:ec:44:f5:0c:6a:
         ba:35:bb:4d:7c:48:bd:35:f1:8b:ba:a9:e5:af:f9:04:30:e5:
         33:9c:4f:bf:29:a4:25:9a:92:06:a4:79:15:13:a6:82:16:6d:
         46:11:9a:a8:42:3e:7d:7d:2c:91:9f:94:99:9e:65:86:bc:3a:
         45:ab:4d:68:b9:6c:77:2c:2d:53:d1:60:c6:44:84:0b:94:9a:
         b5:61:79:cb:37:54:ce:c8:37:86:e4:df:37:98:4e:13:6f:44:
         a1:89:75:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----