Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36B5EE7/15CB94DC6B9111F086EA8D85DAE4EC9C/689BCBC49FA611F18785A4A3CE1D38B0.roa
File:                     689BCBC49FA611F18785A4A3CE1D38B0.roa (raw, json)
Hash identifier:          GrTFvD5ck1p6X3BR7eFe20Kng1p0TJg/D37vlWK0ZH8=
Subject key identifier:   D3:2C:55:55:8D:4E:F4:46:38:22:FC:9B:E6:6F:2B:AE:73:0E:5A:C0
Certificate issuer:       /CN=F36B5EE7AF/serialNumber=EB4A89C924BA17F0E9BB995834F5235A8619B471
Certificate serial:       0199
Authority key identifier: EB:4A:89:C9:24:BA:17:F0:E9:BB:99:58:34:F5:23:5A:86:19:B4:71
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/60qJySS6F_Dpu5lYNPUjWoYZtHE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B5EE7/15CB94DC6B9111F086EA8D85DAE4EC9C/689BCBC49FA611F18785A4A3CE1D38B0.roa
Signing time:             Mon 24 Aug 2026 10:27:30 +0000
ROA not before:           Mon 24 Aug 2026 10:27:26 +0000
ROA not after:            Sun 24 Aug 2036 10:27:26 +0000
asID:                     327794
IP address blocks:        102.36.80.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B5EE7/15CB94DC6B9111F086EA8D85DAE4EC9C/60qJySS6F_Dpu5lYNPUjWoYZtHE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B5EE7/15CB94DC6B9111F086EA8D85DAE4EC9C/60qJySS6F_Dpu5lYNPUjWoYZtHE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/60qJySS6F_Dpu5lYNPUjWoYZtHE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 12 Sep 2026 05:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 409 (0x199)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B5EE7AF, serialNumber=EB4A89C924BA17F0E9BB995834F5235A8619B471
        Validity
            Not Before: Aug 24 10:27:26 2026 GMT
            Not After : Aug 24 10:27:26 2036 GMT
        Subject: CN=6a8c1c92-c80f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:7d:de:25:ca:57:39:ed:9a:b1:d0:87:1e:0d:
                    01:58:9f:a0:33:ad:55:6d:5b:a8:da:f7:1f:87:6f:
                    6b:23:95:69:4a:8b:2c:e8:cb:07:23:1d:8f:ff:e3:
                    63:21:ba:b5:e0:85:db:a2:a1:23:e7:3f:d4:1b:d1:
                    cb:60:99:67:0a:79:2e:82:bb:a4:47:e0:45:7f:05:
                    0a:0d:ed:2d:fa:11:43:af:90:be:7d:2c:c0:66:d5:
                    91:33:dd:c4:57:ee:bd:2f:e4:4d:12:d8:1f:27:e2:
                    b4:d8:09:42:7c:cc:b6:70:8f:ca:b6:43:16:6a:30:
                    54:8b:07:5c:1c:04:dd:6d:81:2c:73:51:5c:13:7e:
                    3e:ad:f0:24:14:b7:03:49:73:0c:fc:2d:1c:45:60:
                    7c:c7:2a:88:c1:cf:5a:06:58:56:4c:63:92:56:f2:
                    ad:4c:61:06:97:36:87:1e:09:07:4b:9f:a3:42:4e:
                    a9:82:49:71:aa:1a:e0:fd:73:7e:4f:45:c7:d7:bc:
                    70:e8:17:9e:41:4f:f3:8e:86:f0:67:dc:7d:08:e5:
                    02:2c:30:43:f0:e5:e0:5b:ce:7c:3b:4c:c4:37:d6:
                    e3:51:55:c4:ff:6d:30:00:79:71:67:83:0b:93:31:
                    68:6c:5e:d8:22:7b:b9:dc:b3:5f:ee:cd:84:14:f7:
                    49:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:2C:55:55:8D:4E:F4:46:38:22:FC:9B:E6:6F:2B:AE:73:0E:5A:C0
            X509v3 Authority Key Identifier:
                keyid:EB:4A:89:C9:24:BA:17:F0:E9:BB:99:58:34:F5:23:5A:86:19:B4:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B5EE7/15CB94DC6B9111F086EA8D85DAE4EC9C/60qJySS6F_Dpu5lYNPUjWoYZtHE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/60qJySS6F_Dpu5lYNPUjWoYZtHE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B5EE7/15CB94DC6B9111F086EA8D85DAE4EC9C/689BCBC49FA611F18785A4A3CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.36.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         10:70:68:e2:87:ad:2f:50:26:07:9d:1a:09:1b:ab:16:bd:b9:
         8b:41:93:55:86:31:7a:bd:7f:2f:c5:ce:2d:81:f2:83:c5:7d:
         16:f0:43:be:31:f2:77:40:45:e7:a5:2d:cd:fd:26:2b:06:84:
         95:44:a2:c9:2f:b9:71:86:92:0c:38:46:43:ec:e9:89:02:5c:
         d7:a6:79:fc:58:fe:60:0d:93:1f:37:ed:08:ea:60:31:ec:4f:
         95:1a:cd:55:96:4d:8d:55:b9:9d:81:a8:5f:6e:a0:bd:80:2f:
         d5:31:40:9a:20:fa:7b:07:1b:37:ef:0d:04:65:1d:11:55:62:
         7e:de:02:40:59:8d:c5:d4:fa:bb:93:b3:38:08:21:39:46:ca:
         53:af:53:95:9c:1c:f5:2e:e6:ef:51:b0:15:55:82:99:7b:76:
         b5:9a:e9:82:e2:ae:1d:24:b1:11:0a:40:b2:9f:db:e1:22:e8:
         85:c4:60:fb:56:e6:59:05:cf:87:62:b7:de:df:b0:c6:ea:93:
         c9:24:fa:ee:7a:1f:82:cb:00:7b:93:5a:96:bf:58:c8:bd:d2:
         39:1e:62:e3:ac:bb:00:21:a0:fd:5a:39:6f:b2:8d:f7:56:7f:
         92:39:79:6c:c3:26:ba:b4:89:a4:42:2d:43:52:0c:3c:c5:8a:
         e6:01:02:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----