Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A2F84/935BF350EEAF11EB91CC6D2AD8A014CE/1C94876C8F0B11F1BF0EA0BECE1D38B0.roa
File:                     1C94876C8F0B11F1BF0EA0BECE1D38B0.roa (raw, json)
Hash identifier:          D0B/7bfqc1ZXOrSBDvJmIszD9tbQcP8NENyFaX9/YZk=
Subject key identifier:   74:F3:96:C8:26:F7:E7:5C:14:7A:D7:40:FD:1B:AE:74:F5:C2:8F:B8
Certificate issuer:       /CN=F36A2F84AR/serialNumber=DCC3D6736DEF8E69B176C2E3808EA8406A5EB4A1
Certificate serial:       075E
Authority key identifier: DC:C3:D6:73:6D:EF:8E:69:B1:76:C2:E3:80:8E:A8:40:6A:5E:B4:A1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/3MPWc23vjmmxdsLjgI6oQGpetKE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A2F84/935BF350EEAF11EB91CC6D2AD8A014CE/1C94876C8F0B11F1BF0EA0BECE1D38B0.roa
Signing time:             Mon 03 Aug 2026 07:15:31 +0000
ROA not before:           Mon 03 Aug 2026 07:15:27 +0000
ROA not after:            Thu 27 Jul 2028 07:15:27 +0000
asID:                     328252
IP address blocks:        156.0.80.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A2F84/935BF350EEAF11EB91CC6D2AD8A014CE/3MPWc23vjmmxdsLjgI6oQGpetKE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A2F84/935BF350EEAF11EB91CC6D2AD8A014CE/3MPWc23vjmmxdsLjgI6oQGpetKE.mft
                          rsync://rpki.afrinic.net/repository/arin/3MPWc23vjmmxdsLjgI6oQGpetKE.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 19 Sep 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1886 (0x75e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A2F84AR, serialNumber=DCC3D6736DEF8E69B176C2E3808EA8406A5EB4A1
        Validity
            Not Before: Aug  3 07:15:27 2026 GMT
            Not After : Jul 27 07:15:27 2028 GMT
        Subject: CN=6a704013-9ec0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d0:af:b0:21:09:c4:37:06:40:3f:4d:4f:7c:
                    47:04:52:56:ea:09:9b:cc:95:87:3d:90:55:27:67:
                    bb:e6:61:91:8a:98:8f:1b:bb:85:24:0e:57:db:1c:
                    4c:50:9e:af:d5:71:d2:91:9a:5d:30:68:22:f1:76:
                    ae:c7:50:d0:62:76:67:fd:62:78:09:29:74:d5:e1:
                    0a:f6:9d:92:e8:d7:2c:cc:37:f8:2a:78:61:6c:9e:
                    8a:2e:b4:0d:1e:5f:54:9d:97:d1:65:a0:76:1f:b0:
                    74:34:2b:69:4e:a1:1f:ec:62:69:7e:eb:c9:75:72:
                    f3:77:a4:b6:9e:cf:e1:ca:97:9c:2e:56:2f:3e:47:
                    90:bb:67:03:5c:bb:a2:da:76:d0:b9:db:1d:82:5b:
                    fa:bb:71:eb:93:0f:a4:b7:43:66:94:d7:04:4c:8e:
                    ab:a1:58:60:f0:df:7c:f6:5d:fe:9d:01:dc:67:14:
                    8a:d8:4e:af:df:41:37:b9:60:d2:39:a8:47:45:16:
                    f1:13:eb:da:9e:8e:f1:08:e0:35:14:96:e3:02:a7:
                    50:a9:ea:4c:78:13:1a:90:f7:22:db:95:b3:f5:c3:
                    0d:95:4a:e1:13:e7:7b:d3:7b:02:73:eb:26:65:57:
                    16:e5:1f:85:61:61:7f:4c:50:d8:22:1b:6b:7b:31:
                    74:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:F3:96:C8:26:F7:E7:5C:14:7A:D7:40:FD:1B:AE:74:F5:C2:8F:B8
            X509v3 Authority Key Identifier:
                keyid:DC:C3:D6:73:6D:EF:8E:69:B1:76:C2:E3:80:8E:A8:40:6A:5E:B4:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A2F84/935BF350EEAF11EB91CC6D2AD8A014CE/3MPWc23vjmmxdsLjgI6oQGpetKE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/3MPWc23vjmmxdsLjgI6oQGpetKE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A2F84/935BF350EEAF11EB91CC6D2AD8A014CE/1C94876C8F0B11F1BF0EA0BECE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.0.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         17:82:56:09:d2:0d:da:ef:d5:c0:dc:53:6e:10:44:65:84:0d:
         83:bf:97:e6:62:ac:ba:87:7e:a6:a1:47:6e:4a:3b:f7:83:3f:
         0b:7c:72:18:56:3d:94:d9:a2:61:a6:f2:78:15:f7:cb:44:7d:
         bb:ee:b9:0b:d6:6d:9d:ce:09:1c:92:e6:a3:ed:4f:d6:4c:ea:
         84:71:75:8c:db:a3:1a:e7:9d:1e:f0:1d:26:1c:ac:a9:16:34:
         b5:7a:8f:ed:6a:3f:a5:da:f5:d2:9b:5c:c9:4b:8d:c5:9e:9e:
         6e:dd:8f:b9:37:0c:f0:e3:1a:89:10:45:d7:ac:b0:01:7d:f4:
         11:82:c9:aa:d0:63:ea:4f:66:81:bd:91:56:12:93:45:88:59:
         bb:2d:b5:d1:8c:94:29:1c:47:8f:41:d2:a9:61:23:c2:b4:f7:
         96:b0:20:98:b6:e3:3a:4a:c9:36:90:db:2a:24:d8:32:78:77:
         e7:58:0b:84:c5:b8:e0:41:92:cf:7a:3e:01:f2:30:7a:6a:82:
         3f:6d:5d:27:3b:96:e3:db:e2:07:f8:18:73:a3:f7:da:6e:27:
         84:be:17:b3:21:00:a8:9a:97:56:8f:d6:48:3c:28:04:1b:54:
         19:ff:7b:5a:d0:19:e9:d9:96:4b:d0:3a:8d:58:14:0f:61:8f:
         b3:aa:e0:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----