Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36B5EE7/15CB94DC6B9111F086EA8D85DAE4EC9C/950608329FA611F184EBCDA3CE1D38B0.roa
File:                     950608329FA611F184EBCDA3CE1D38B0.roa (raw, json)
Hash identifier:          NkFXi8XY+M6T1pOp4ZAFkXHDZUC7x0u7xtiWPDbN7wI=
Subject key identifier:   61:74:4A:C1:E8:8E:6E:1E:33:1B:95:D0:1F:37:9E:6A:53:BE:86:AF
Certificate issuer:       /CN=F36B5EE7AF/serialNumber=EB4A89C924BA17F0E9BB995834F5235A8619B471
Certificate serial:       019B
Authority key identifier: EB:4A:89:C9:24:BA:17:F0:E9:BB:99:58:34:F5:23:5A:86:19:B4:71
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/60qJySS6F_Dpu5lYNPUjWoYZtHE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B5EE7/15CB94DC6B9111F086EA8D85DAE4EC9C/950608329FA611F184EBCDA3CE1D38B0.roa
Signing time:             Mon 24 Aug 2026 10:28:44 +0000
ROA not before:           Mon 24 Aug 2026 10:28:40 +0000
ROA not after:            Sun 24 Aug 2036 10:28:40 +0000
asID:                     327794
IP address blocks:        102.36.96.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B5EE7/15CB94DC6B9111F086EA8D85DAE4EC9C/60qJySS6F_Dpu5lYNPUjWoYZtHE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B5EE7/15CB94DC6B9111F086EA8D85DAE4EC9C/60qJySS6F_Dpu5lYNPUjWoYZtHE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/60qJySS6F_Dpu5lYNPUjWoYZtHE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 12 Sep 2026 05:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 411 (0x19b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B5EE7AF, serialNumber=EB4A89C924BA17F0E9BB995834F5235A8619B471
        Validity
            Not Before: Aug 24 10:28:40 2026 GMT
            Not After : Aug 24 10:28:40 2036 GMT
        Subject: CN=6a8c1cdc-85d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:fa:af:02:c5:2d:b4:06:53:a6:61:ad:e4:a7:
                    c8:99:6d:75:96:2b:97:e3:fa:0d:09:6b:0d:7f:72:
                    65:84:a7:0b:3d:b9:1a:3b:e4:b9:a0:2f:ea:95:df:
                    a4:78:64:57:82:41:2b:2b:b4:e7:1d:91:be:a9:e9:
                    3d:1b:b2:2c:40:19:c7:df:15:8a:ec:02:9e:3a:f5:
                    a3:64:48:54:6a:46:4d:75:6c:88:ec:a8:9c:90:97:
                    82:78:20:a8:a8:1e:c3:c2:22:76:5d:fa:e8:87:48:
                    72:be:17:41:6d:b3:90:82:5c:97:6b:9c:17:2d:7b:
                    a4:ba:1b:94:43:04:17:a2:a1:f2:26:21:0c:8f:a9:
                    49:48:cc:0d:35:04:15:5d:2a:e0:aa:dd:1f:dd:0b:
                    96:0c:13:8b:1b:64:a5:65:69:33:94:22:a6:a7:8b:
                    e2:9d:ff:2f:0f:2f:72:74:99:28:bf:06:0c:52:29:
                    f7:94:43:99:68:98:99:99:f7:ea:95:82:c3:32:8f:
                    b3:73:e7:ca:73:b7:03:d8:4c:07:dd:3a:bd:f5:37:
                    f7:f6:15:e7:71:70:67:78:25:2f:32:eb:1a:34:96:
                    61:ad:6a:6b:53:af:83:bd:0f:3c:42:5c:67:3f:5d:
                    1f:98:45:8f:17:32:34:96:d7:6f:bf:d1:6d:05:03:
                    2c:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:74:4A:C1:E8:8E:6E:1E:33:1B:95:D0:1F:37:9E:6A:53:BE:86:AF
            X509v3 Authority Key Identifier:
                keyid:EB:4A:89:C9:24:BA:17:F0:E9:BB:99:58:34:F5:23:5A:86:19:B4:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B5EE7/15CB94DC6B9111F086EA8D85DAE4EC9C/60qJySS6F_Dpu5lYNPUjWoYZtHE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/60qJySS6F_Dpu5lYNPUjWoYZtHE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B5EE7/15CB94DC6B9111F086EA8D85DAE4EC9C/950608329FA611F184EBCDA3CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.36.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         23:1a:c0:69:d2:3b:86:a4:7f:89:eb:f8:d2:d2:35:5e:e0:25:
         a2:c6:43:ef:9d:35:13:39:96:8f:e1:97:78:55:f3:19:02:37:
         55:26:27:71:13:c6:31:8c:90:57:cf:3f:63:92:21:e7:b9:19:
         26:6b:5f:00:83:95:d4:a5:67:9c:22:c8:8f:e5:40:8a:4d:89:
         5c:f7:ec:71:0d:54:ec:d3:68:cf:64:f8:88:fc:23:4f:44:50:
         c8:db:a9:2d:14:b8:7d:bb:ff:b7:83:23:10:f5:35:88:70:59:
         9e:91:7f:7c:bc:3e:cc:2b:71:19:d6:07:1b:3e:b4:90:13:c6:
         94:db:12:9b:3a:bf:e1:f3:4c:d3:2d:4a:cc:37:93:18:d2:3a:
         24:d5:fb:e6:8c:1a:36:fa:77:4f:8c:d6:06:d8:e7:81:c8:5b:
         9c:37:89:68:8d:62:c3:f4:e9:46:ef:1c:25:ca:5b:f9:85:0c:
         ef:4e:0c:49:60:dc:cf:5b:c9:98:c6:34:3f:c2:30:98:70:b1:
         30:6d:7d:5f:52:d3:34:6e:36:f6:69:65:10:d4:a3:cd:a0:5f:
         56:1c:cb:08:3d:eb:5c:78:bf:60:71:d0:63:ab:87:3d:13:36:
         1a:a1:7c:9b:ba:b9:56:a9:a9:51:84:7e:9a:ce:c1:1c:75:b5:
         1e:96:6a:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----