Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/65F51F869A2111F1BC17DEF3CE1D38B0.roa
File:                     65F51F869A2111F1BC17DEF3CE1D38B0.roa (raw, json)
Hash identifier:          UtV5d1RrgrUz2VCLGBQtgYdcIkjWpYG0L3lDK99wlmA=
Subject key identifier:   4B:84:E5:EC:F7:65:DA:63:CC:51:7B:50:B4:F1:09:77:EF:2F:D4:36
Certificate issuer:       /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial:       0D3E
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access:    rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/65F51F869A2111F1BC17DEF3CE1D38B0.roa
Signing time:             Mon 17 Aug 2026 09:52:46 +0000
ROA not before:           Mon 17 Aug 2026 09:52:42 +0000
ROA not after:            Wed 31 Dec 2036 09:52:42 +0000
asID:                     214483
IP address blocks:        165.49.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
                          rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 12 Sep 2026 01:27:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3390 (0xd3e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
        Validity
            Not Before: Aug 17 09:52:42 2026 GMT
            Not After : Dec 31 09:52:42 2036 GMT
        Subject: CN=6a82d9ee-63ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c0:e0:88:ac:2b:6e:fd:d6:b6:92:f5:06:6b:
                    2a:f6:48:0c:e8:1e:ca:f4:b4:a1:e0:1a:fc:54:e7:
                    92:29:ee:27:0f:90:ab:5b:ad:53:a6:63:b4:0c:0d:
                    99:42:af:10:db:d9:96:a0:96:65:6d:3d:df:33:ca:
                    ec:c5:df:5b:b8:fe:84:97:7d:ab:e2:b1:ac:2a:75:
                    8c:04:bf:8d:05:df:89:ac:d2:3b:88:73:63:a4:22:
                    d1:57:65:f8:07:04:29:eb:01:f7:88:ab:33:17:11:
                    71:4d:11:1b:2b:4c:2e:fc:3b:6b:6f:ac:64:a3:ae:
                    11:5c:c4:12:9f:bf:e0:b3:9a:2b:4d:2e:00:9d:11:
                    97:47:4c:cb:4f:63:22:4c:6a:06:f2:81:fc:92:e3:
                    c3:85:1e:a3:6e:53:d9:f2:d3:00:77:61:5b:8c:28:
                    66:b1:94:8a:b9:19:1d:f0:89:24:17:14:1c:fc:90:
                    bf:c9:c7:2e:be:1c:83:f8:ae:de:13:89:41:de:2b:
                    d6:56:a9:30:38:ac:6a:ca:f6:05:83:87:5c:20:52:
                    ac:78:6d:84:af:14:56:88:98:37:b4:63:78:d9:86:
                    6e:a5:ef:f7:30:78:e4:5b:ef:27:df:29:89:8e:f0:
                    85:5b:4f:d2:7e:f2:b0:fe:a9:1a:73:e1:f5:a5:76:
                    39:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:84:E5:EC:F7:65:DA:63:CC:51:7B:50:B4:F1:09:77:EF:2F:D4:36
            X509v3 Authority Key Identifier:
                keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/65F51F869A2111F1BC17DEF3CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.49.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:2a:9d:af:59:27:01:4b:2d:cd:9f:12:e4:34:67:0b:a9:3b:
         02:10:da:aa:42:ff:e6:32:70:24:54:fe:69:2b:f1:ed:d5:6a:
         cf:1e:63:b3:1f:81:d1:ab:50:58:13:ac:25:90:30:d8:5d:66:
         33:62:c7:ba:3c:4b:89:58:6d:0b:bd:84:e3:9d:2c:ad:be:fe:
         c8:49:0b:67:13:86:81:c4:21:dd:57:79:ed:a1:5b:eb:d6:ab:
         2b:96:91:b9:9f:ae:25:13:a4:02:ac:9d:2f:81:62:b4:54:65:
         40:31:42:c1:32:ec:77:11:ad:c4:81:3c:38:cb:5a:51:d5:94:
         f0:6f:2a:fd:ce:28:be:e9:15:9c:bb:06:06:89:16:a6:d3:09:
         1c:e4:41:6e:b1:a0:55:f5:a4:20:2f:2e:2d:88:c2:65:8f:59:
         68:2b:2c:4f:eb:54:ab:50:78:8b:dc:92:b3:4f:38:83:09:18:
         49:ef:45:bc:12:5a:a7:bc:2e:65:33:33:96:4d:0e:6f:ba:a1:
         d7:07:91:8b:41:0f:7d:51:d6:b5:af:ea:92:7f:10:2b:56:f9:
         12:12:4f:20:eb:aa:42:80:7f:a9:e1:94:ff:ef:22:36:9f:9a:
         8b:b6:27:d7:3c:d6:87:c8:84:fa:bd:2d:8b:a9:0e:af:4b:18:
         c7:5b:a7:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----