Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36927B4/24A6A76ECABC11F08798D681DAE4EC9C/EF81C7C0CEA811F19F5663A3CE1D38B0.roa
File:                     EF81C7C0CEA811F19F5663A3CE1D38B0.roa (raw, json)
Hash identifier:          cX8X3RQb9P8B9VX2mVI/0hZKlWJE1iyo9knQaYLJswk=
Subject key identifier:   B5:A9:D3:4A:85:72:4F:B0:7E:37:2D:6B:E9:6B:CB:F4:5C:EC:BF:39
Certificate issuer:       /CN=F36927B4AF/serialNumber=E71B2F7B25720846D3D26E50128DCDDD2A165F9E
Certificate serial:       0156
Authority key identifier: E7:1B:2F:7B:25:72:08:46:D3:D2:6E:50:12:8D:CD:DD:2A:16:5F:9E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/5xsveyVyCEbT0m5QEo3N3SoWX54.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36927B4/24A6A76ECABC11F08798D681DAE4EC9C/EF81C7C0CEA811F19F5663A3CE1D38B0.roa
Signing time:             Fri 23 Oct 2026 06:14:00 +0000
ROA not before:           Fri 23 Oct 2026 06:13:54 +0000
ROA not after:            Thu 23 Oct 2031 06:13:54 +0000
asID:                     329557
IP address blocks:        2c0f:1aa0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36927B4/24A6A76ECABC11F08798D681DAE4EC9C/5xsveyVyCEbT0m5QEo3N3SoWX54.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36927B4/24A6A76ECABC11F08798D681DAE4EC9C/5xsveyVyCEbT0m5QEo3N3SoWX54.mft
                          rsync://rpki.afrinic.net/repository/afrinic/5xsveyVyCEbT0m5QEo3N3SoWX54.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 26 Oct 2026 00:07:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 342 (0x156)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36927B4AF, serialNumber=E71B2F7B25720846D3D26E50128DCDDD2A165F9E
        Validity
            Not Before: Oct 23 06:13:54 2026 GMT
            Not After : Oct 23 06:13:54 2031 GMT
        Subject: CN=6adafb27-24ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:43:c1:1a:81:bb:45:1b:0a:9b:49:74:ce:d9:
                    52:6a:75:5c:92:cd:0c:3d:3a:c2:f0:57:24:34:b3:
                    10:23:e5:2a:6b:42:e5:0e:51:86:d5:de:e1:8c:08:
                    ea:e3:92:a2:6f:c1:8a:b3:46:1f:25:ef:d8:87:85:
                    77:dd:96:ae:6d:52:0b:85:58:8d:6b:52:d9:70:9e:
                    5e:5b:1c:19:99:e2:94:0b:a5:ea:ef:e0:b2:3a:ae:
                    54:05:3b:02:ca:dc:4e:d2:65:10:60:20:7a:58:1f:
                    a6:11:39:6c:56:21:65:62:bd:d4:a3:c1:9e:49:44:
                    c2:48:a9:67:e7:9e:5d:05:ef:70:2c:7b:7a:c5:50:
                    5c:5a:d7:62:c4:b6:31:5d:79:31:54:82:db:8e:3c:
                    83:87:6a:0f:fe:68:4a:f9:d8:d5:f1:a0:93:a2:c4:
                    b8:9a:67:41:5d:bc:a4:f4:8a:e7:e2:cf:0d:c7:7e:
                    18:26:c5:50:0d:f4:ce:0f:ca:20:4b:d8:33:93:d9:
                    65:ae:bc:ca:cf:a1:4b:63:93:2e:a4:7d:bb:f5:38:
                    86:34:58:4b:34:67:0d:80:4a:dc:82:7b:a6:25:00:
                    f9:66:6e:c0:a6:06:2b:41:f5:5f:0f:79:a0:71:09:
                    bd:5b:60:e3:df:f6:53:ea:60:7d:e9:10:81:c6:8a:
                    c3:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:A9:D3:4A:85:72:4F:B0:7E:37:2D:6B:E9:6B:CB:F4:5C:EC:BF:39
            X509v3 Authority Key Identifier:
                keyid:E7:1B:2F:7B:25:72:08:46:D3:D2:6E:50:12:8D:CD:DD:2A:16:5F:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36927B4/24A6A76ECABC11F08798D681DAE4EC9C/5xsveyVyCEbT0m5QEo3N3SoWX54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/5xsveyVyCEbT0m5QEo3N3SoWX54.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36927B4/24A6A76ECABC11F08798D681DAE4EC9C/EF81C7C0CEA811F19F5663A3CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:1aa0::/32

    Signature Algorithm: sha256WithRSAEncryption
         9a:24:1e:55:ec:a4:36:e8:9d:76:f9:52:c3:a1:fa:db:3d:d5:
         91:ef:24:86:77:52:b8:5f:ba:4d:64:25:9c:f2:6e:35:a5:99:
         f7:2e:67:7d:56:cc:29:4a:d1:4e:5d:85:2c:b2:bb:0a:04:7a:
         f9:7f:f0:71:f4:5f:33:42:2f:e3:7a:55:a0:98:c0:8b:ed:25:
         3f:9b:a1:8f:6e:06:59:de:ef:28:26:06:43:c1:78:54:cc:a7:
         ab:ac:1f:6a:fb:79:a2:ed:7c:9e:5f:1a:0c:57:7c:cc:16:f8:
         48:22:28:a8:87:e6:11:ab:38:3c:09:03:fb:a4:64:0d:90:9c:
         b4:31:19:75:21:c4:b5:c6:01:c8:bc:44:87:84:38:7f:da:1d:
         00:13:80:13:e8:c5:ea:9b:5c:50:fd:f8:9f:1c:80:23:38:e2:
         b9:8a:c3:0b:e0:92:44:d7:f7:6e:55:77:6f:b0:f3:dd:6e:e1:
         f9:4e:72:b9:94:dd:e6:d8:53:8a:7c:3e:ee:d3:63:e6:d2:25:
         10:4e:8f:f4:82:4e:11:53:2f:17:a0:39:0c:6b:2b:c2:1c:19:
         7c:24:96:93:a9:e0:ee:62:12:30:50:6a:ec:c7:38:af:47:1a:
         e6:ac:7d:66:3b:6a:fb:cb:36:b0:15:e4:87:53:38:52:6e:8b:
         70:1b:96:8d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAVYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OTI3QjRBRjExMC8GA1UEBRMoRTcxQjJGN0IyNTcyMDg0NkQzRDI2RTUwMTI4RENE
REQyQTE2NUY5RTAeFw0yNjEwMjMwNjEzNTRaFw0zMTEwMjMwNjEzNTRaMBgxFjAU
BgNVBAMTDTZhZGFmYjI3LTI0ZWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC6Q8EagbtFGwqbSXTO2VJqdVySzQw9OsLwVyQ0sxAj5SprQuUOUYbV3uGM
COrjkqJvwYqzRh8l79iHhXfdlq5tUguFWI1rUtlwnl5bHBmZ4pQLperv4LI6rlQF
OwLK3E7SZRBgIHpYH6YROWxWIWVivdSjwZ5JRMJIqWfnnl0F73Ase3rFUFxa12LE
tjFdeTFUgtuOPIOHag/+aEr52NXxoJOixLiaZ0FdvKT0iufizw3HfhgmxVAN9M4P
yiBL2DOT2WWuvMrPoUtjky6kfbv1OIY0WEs0Zw2AStyCe6YlAPlmbsCmBitB9V8P
eaBxCb1bYOPf9lPqYH3pEIHGisMjAgMBAAGjggKmMIICojAdBgNVHQ4EFgQUtanT
SoVyT7B+Ny1r6WvL9FzsvzkwHwYDVR0jBBgwFoAU5xsveyVyCEbT0m5QEo3N3SoW
X54wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjkyN0I0LzI0QTZBNzZFQ0FCQzExRjA4Nzk4RDY4MURBRTRFQzlDLzV4c3Zl
eVZ5Q0ViVDBtNVFFbzNOM1NvV1g1NC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzV4c3ZleVZ5Q0ViVDBtNVFFbzNOM1NvV1g1NC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjkyN0I0LzI0QTZBNzZFQ0FCQzExRjA4Nzk4RDY4MURB
RTRFQzlDL0VGODFDN0MwQ0VBODExRjE5RjU2NjNBM0NFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAsDxqgMA0GCSqGSIb3DQEB
CwUAA4IBAQCaJB5V7KQ26J12+VLDofrbPdWR7ySGd1K4X7pNZCWc8m41pZn3Lmd9
VswpStFOXYUssrsKBHr5f/Bx9F8zQi/jelWgmMCL7SU/m6GPbgZZ3u8oJgZDwXhU
zKerrB9q+3mi7XyeXxoMV3zMFvhIIiioh+YRqzg8CQP7pGQNkJy0MRl1IcS1xgHI
vESHhDh/2h0AE4AT6MXqm1xQ/fifHIAjOOK5isML4JJE1/duVXdvsPPdbuH5TnK5
lN3m2FOKfD7u02Pm0iUQTo/0gk4RUy8XoDkMayvCHBl8JJaTqeDuYhIwUGrsxziv
RxrmrH1mO2r7yzawFeSHUzhSbotwG5aN
-----END CERTIFICATE-----