Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36927B4/24A6A76ECABC11F08798D681DAE4EC9C/E450B9E6CE1811F19CD167B3CE1D38B0.roa
File:                     E450B9E6CE1811F19CD167B3CE1D38B0.roa (raw, json)
Hash identifier:          D8DBTXR4KNZCux/MBYlZgVwTDQEVrzpJer6zbvSo5FU=
Subject key identifier:   2B:0D:44:A5:06:84:DC:D0:B8:3A:80:89:CF:78:BB:6C:F3:FD:14:5C
Certificate issuer:       /CN=F36927B4AF/serialNumber=E71B2F7B25720846D3D26E50128DCDDD2A165F9E
Certificate serial:       0152
Authority key identifier: E7:1B:2F:7B:25:72:08:46:D3:D2:6E:50:12:8D:CD:DD:2A:16:5F:9E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/5xsveyVyCEbT0m5QEo3N3SoWX54.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36927B4/24A6A76ECABC11F08798D681DAE4EC9C/E450B9E6CE1811F19CD167B3CE1D38B0.roa
Signing time:             Thu 22 Oct 2026 13:02:53 +0000
ROA not before:           Thu 22 Oct 2026 13:02:48 +0000
ROA not after:            Wed 22 Oct 2031 13:02:48 +0000
asID:                     329557
IP address blocks:        102.205.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36927B4/24A6A76ECABC11F08798D681DAE4EC9C/5xsveyVyCEbT0m5QEo3N3SoWX54.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36927B4/24A6A76ECABC11F08798D681DAE4EC9C/5xsveyVyCEbT0m5QEo3N3SoWX54.mft
                          rsync://rpki.afrinic.net/repository/afrinic/5xsveyVyCEbT0m5QEo3N3SoWX54.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 26 Oct 2026 05:17:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 338 (0x152)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36927B4AF, serialNumber=E71B2F7B25720846D3D26E50128DCDDD2A165F9E
        Validity
            Not Before: Oct 22 13:02:48 2026 GMT
            Not After : Oct 22 13:02:48 2031 GMT
        Subject: CN=6ada097d-bd2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:34:9c:21:a4:a3:7c:ff:42:76:61:41:e3:d6:
                    c6:17:00:c2:0d:8e:55:e1:ff:97:cd:dd:c2:40:57:
                    79:42:bd:29:21:d6:a1:7d:65:1b:27:86:e9:6f:f7:
                    6d:74:0b:3b:b3:80:a4:27:11:ad:4e:dd:fc:44:a1:
                    52:2d:5f:f8:e8:c1:49:88:1a:1e:1b:a7:89:cf:00:
                    72:3d:bc:30:a2:aa:31:2b:1a:77:d8:13:6d:1a:f9:
                    fa:8d:cc:6c:ca:56:37:85:75:a6:2e:00:1a:cb:55:
                    62:de:31:0d:54:35:45:71:cb:c6:98:8d:17:56:e5:
                    43:34:91:a5:71:1b:fd:cd:ae:72:a9:de:b6:89:b0:
                    fb:72:80:93:e9:de:95:25:88:af:7c:9a:14:d9:f7:
                    b7:55:90:80:54:91:e5:46:d2:b5:b2:94:ad:ee:e4:
                    34:85:b7:16:26:65:1a:42:53:ee:36:b0:fe:f2:30:
                    03:bc:fe:06:1c:42:f5:74:2a:89:92:dc:cd:d8:33:
                    d1:7f:cb:f0:bd:9f:7e:74:bc:b9:a5:d4:69:53:41:
                    5d:c3:f9:d7:6d:49:d6:3b:ae:fb:9d:4c:5c:84:c1:
                    ab:16:37:fc:a1:a3:8c:f7:29:7e:2a:e7:50:d3:a5:
                    a3:8f:67:a4:6a:63:21:c4:ea:0e:98:f8:03:50:d2:
                    f5:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:0D:44:A5:06:84:DC:D0:B8:3A:80:89:CF:78:BB:6C:F3:FD:14:5C
            X509v3 Authority Key Identifier:
                keyid:E7:1B:2F:7B:25:72:08:46:D3:D2:6E:50:12:8D:CD:DD:2A:16:5F:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36927B4/24A6A76ECABC11F08798D681DAE4EC9C/5xsveyVyCEbT0m5QEo3N3SoWX54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/5xsveyVyCEbT0m5QEo3N3SoWX54.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36927B4/24A6A76ECABC11F08798D681DAE4EC9C/E450B9E6CE1811F19CD167B3CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.205.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:c5:9d:c0:36:c4:2e:45:b7:70:57:ce:0d:45:ab:fc:c9:b7:
         39:a5:46:50:56:a6:27:db:b0:c3:81:85:49:0d:bb:e7:ce:aa:
         86:31:3b:9b:9f:7f:15:0d:70:5f:33:4b:a4:29:76:7e:4a:28:
         8f:25:f4:84:bb:c9:a6:fb:bd:03:16:8d:fb:2e:55:ad:71:2d:
         05:64:b2:65:35:a2:cc:a3:59:aa:0d:1e:b7:7c:8b:61:bc:2f:
         71:e8:eb:52:4e:8b:ac:7c:6a:7c:18:f9:e5:ca:02:7d:b1:2e:
         be:22:e8:cb:16:e5:9b:22:fa:48:9e:05:d9:3b:8f:f2:27:7d:
         43:f8:4e:ff:13:9b:f7:60:05:69:f2:37:6a:12:81:20:c5:00:
         7b:2e:5a:85:44:87:8a:95:fb:a3:2f:a7:08:4c:8c:1f:a3:d5:
         c7:ef:2b:a0:f4:b5:44:f5:f7:e1:ed:cf:44:6f:f7:92:c4:3f:
         20:0a:0f:76:34:8d:0c:4e:39:77:a6:78:34:9b:fd:c6:4b:d3:
         71:20:d9:63:d7:11:21:66:48:1f:51:79:fb:c4:66:d2:bc:37:
         48:e2:43:e3:41:0f:b0:81:c5:ad:5f:3f:fe:b4:c9:2f:d7:38:
         dd:24:f5:8b:35:b8:31:55:9a:e9:aa:d4:6e:84:66:e6:ba:8f:
         19:25:7e:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----