Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/3140543AB2AF11F190FEBBE0CE1D38B0.roa
File:                     3140543AB2AF11F190FEBBE0CE1D38B0.roa (raw, json)
Hash identifier:          Pp3TxKOIJ1aAShuQQDLK4FJPwrW1wjcrvWxJ9C8UWsg=
Subject key identifier:   FF:34:67:26:75:28:82:28:13:30:22:A6:C9:00:1B:B6:0B:5E:12:E3
Certificate issuer:       /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial:       0DD5
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access:    rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/3140543AB2AF11F190FEBBE0CE1D38B0.roa
Signing time:             Thu 17 Sep 2026 15:48:14 +0000
ROA not before:           Thu 17 Sep 2026 15:48:10 +0000
ROA not after:            Wed 31 Dec 2036 15:48:10 +0000
asID:                     834
IP address blocks:        165.49.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
                          rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 20 Sep 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3541 (0xdd5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
        Validity
            Not Before: Sep 17 15:48:10 2026 GMT
            Not After : Dec 31 15:48:10 2036 GMT
        Subject: CN=6aac0bbe-7d55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:06:3b:7a:ef:ca:c9:a7:dc:5e:01:9b:67:8e:
                    98:93:64:62:6e:d6:bf:f3:3e:9e:1d:88:7d:49:da:
                    d5:87:36:ca:73:08:72:55:ae:45:b0:c7:f2:96:de:
                    0a:5c:c6:18:b3:e9:28:c9:d1:13:56:62:cd:62:ca:
                    56:09:90:3a:57:a1:ad:58:38:af:9c:3c:01:5f:eb:
                    11:92:87:c4:db:cb:45:5e:ff:dd:21:8a:07:ed:97:
                    bf:87:22:6c:fc:e8:c5:e9:ef:e3:f3:51:e0:ca:21:
                    8d:bd:63:d7:7e:b7:62:22:92:01:c6:b5:aa:93:73:
                    63:40:07:c4:bf:6b:28:ec:9b:9b:7f:2a:09:3e:83:
                    f3:34:3f:68:1b:7e:8f:a0:0e:a2:33:9f:a8:dc:df:
                    19:7f:0b:af:30:8e:3c:46:2a:a8:92:e2:59:2c:df:
                    cb:8b:97:0f:8b:e1:cc:37:cc:12:6d:a3:59:10:e5:
                    d8:a4:21:4a:ad:e6:f1:15:a5:78:7f:0a:f3:9d:27:
                    34:cc:99:72:b7:e0:c2:fb:f2:a7:0b:3b:e5:60:ae:
                    7b:d1:4e:50:a5:16:5a:7e:ab:87:45:3e:67:36:3d:
                    07:91:73:06:4e:5a:55:9b:f7:fc:b1:ec:a3:50:c8:
                    82:9d:90:6f:9d:30:10:3f:0f:85:70:9e:9a:48:ef:
                    3e:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:34:67:26:75:28:82:28:13:30:22:A6:C9:00:1B:B6:0B:5E:12:E3
            X509v3 Authority Key Identifier:
                keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/3140543AB2AF11F190FEBBE0CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.49.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:b6:4d:ab:ec:50:9d:fb:f0:10:db:9d:d7:2b:cc:5f:4a:72:
         17:8e:fe:2f:e5:4c:72:47:8e:c5:c2:6d:be:27:7a:b8:20:36:
         79:73:f9:7b:c8:e1:38:7c:4c:35:3a:3c:f5:88:2c:05:03:e9:
         d0:35:4d:70:a1:cd:a7:ec:b5:1d:e6:bf:26:02:57:0b:35:93:
         36:06:d0:3d:9d:48:05:f9:73:e6:3c:b2:66:06:41:e1:34:40:
         d1:72:48:7d:a6:e5:1e:9e:e1:98:51:fc:f3:3f:bc:f4:72:50:
         aa:3a:94:d3:37:20:fb:7b:fc:dd:be:94:24:24:63:4d:cc:7c:
         ea:d4:57:4f:fa:b8:62:3b:da:63:83:89:fd:be:18:aa:62:ad:
         8b:f4:dd:a2:82:a6:46:e2:98:c1:41:6d:cc:02:fc:1a:a9:56:
         e2:c4:9a:b0:be:1d:ef:29:a0:56:09:e8:a4:3b:f5:b3:11:69:
         42:fe:9e:57:61:a3:e0:5e:31:d6:cb:bc:39:a6:8c:6a:8d:84:
         95:a1:21:08:8e:6d:ce:ec:47:0b:75:0f:47:47:3a:75:31:ee:
         8d:42:1a:2c:d1:39:dd:cd:4b:6a:e7:cd:88:36:09:32:9c:cb:
         fd:eb:9c:d8:e9:71:d0:68:30:89:0c:9b:7c:ee:de:70:d4:30:
         90:a8:d2:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----