Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/E6F38C32A08211F1803000D9CE1D38B0.roa
File:                     E6F38C32A08211F1803000D9CE1D38B0.roa (raw, json)
Hash identifier:          RKNmXfXPqGhXIwr8/pm4Va0u1pKVFtRycdywgC93y7k=
Subject key identifier:   78:AC:FD:92:97:9C:A1:DF:1D:08:E1:E3:C1:2E:AA:DF:03:D4:18:F0
Certificate issuer:       /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial:       0D51
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access:    rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/E6F38C32A08211F1803000D9CE1D38B0.roa
Signing time:             Tue 25 Aug 2026 12:45:51 +0000
ROA not before:           Tue 25 Aug 2026 12:45:47 +0000
ROA not after:            Wed 31 Dec 2036 12:45:47 +0000
asID:                     152179
IP address blocks:        165.49.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
                          rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 05 Sep 2026 00:26:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3409 (0xd51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
        Validity
            Not Before: Aug 25 12:45:47 2026 GMT
            Not After : Dec 31 12:45:47 2036 GMT
        Subject: CN=6a8d8e7f-1918
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:3b:8a:78:b8:0a:a7:a5:cd:5b:f3:a2:f8:7c:
                    d1:22:f6:40:0a:19:73:89:73:4b:80:64:45:f6:e5:
                    4e:3e:8c:90:79:0e:8a:88:4e:12:8f:70:d4:f8:43:
                    f6:34:19:e2:fe:ba:f1:6d:b7:95:43:31:b7:65:c2:
                    0e:5f:1a:3c:37:d1:7f:8f:7a:da:d5:d3:9c:f0:94:
                    77:4f:04:f7:56:db:02:54:c4:6c:95:ad:8e:66:5f:
                    36:c9:b1:e2:cd:a4:85:12:b2:7e:52:5a:24:81:24:
                    b9:50:e4:1a:f7:ee:0c:74:22:1b:e3:e9:9d:9e:44:
                    07:d1:35:10:df:77:78:8b:35:a2:3c:92:b4:e9:70:
                    1b:39:03:18:5b:11:19:b0:90:e8:d4:4e:00:d6:4d:
                    3a:85:60:92:5c:f6:a5:a3:30:13:40:df:01:bb:fb:
                    1b:27:f5:b2:82:a6:1c:cc:92:f2:13:d2:7f:ac:67:
                    e8:fb:77:ce:a7:3d:0f:35:d9:60:48:f6:c9:bb:c7:
                    97:89:a4:8a:c5:95:6f:41:8f:61:64:06:e7:fe:81:
                    12:73:36:b1:01:1d:eb:18:12:63:26:13:44:72:2b:
                    bc:bb:28:34:dc:85:16:f9:9f:e1:14:f6:80:f7:28:
                    92:ac:0f:b3:f9:25:44:a7:9b:d2:18:ae:da:0d:7f:
                    71:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:AC:FD:92:97:9C:A1:DF:1D:08:E1:E3:C1:2E:AA:DF:03:D4:18:F0
            X509v3 Authority Key Identifier:
                keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/E6F38C32A08211F1803000D9CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.49.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:83:ed:5c:35:60:f4:9d:96:77:49:00:a5:71:68:f7:a1:b0:
         91:95:fd:dd:76:de:4e:d3:96:62:3f:da:50:64:77:75:2a:d9:
         71:9e:bb:b5:68:c3:b8:31:45:2d:c3:0c:df:18:b0:87:43:f4:
         f9:81:d6:c7:6f:b1:0f:6b:9c:ec:84:75:80:98:38:a3:a9:1f:
         13:b7:54:f5:8a:f3:dc:aa:21:47:4a:db:f1:52:b9:3a:86:f2:
         4c:ed:d2:a9:fa:87:e4:19:eb:22:80:50:77:4f:60:58:f9:48:
         45:44:50:3c:0b:ed:bb:65:5d:68:6f:41:a8:16:e8:16:bf:de:
         75:cc:e7:f1:77:31:70:2c:f7:75:02:7f:ce:2b:0f:89:9c:77:
         9d:07:4e:ad:24:22:3b:92:ba:88:a1:47:30:82:2e:02:b2:6f:
         f7:38:15:40:88:3e:0e:4b:ee:52:58:26:e6:59:4b:68:a8:00:
         94:55:36:d9:1d:af:8b:4b:32:b7:3a:85:b3:2a:8a:30:c4:8b:
         11:1d:40:9d:13:6b:1e:db:48:0a:60:8f:12:74:7a:f1:29:ef:
         02:a5:a6:25:bc:9c:43:55:5b:9c:47:fa:88:35:a1:34:98:b6:
         c0:1d:66:dd:d2:25:5b:64:a0:f7:c6:e4:06:fd:76:87:81:ea:
         68:f6:b4:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----