Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36B5EE7/15CB94DC6B9111F086EA8D85DAE4EC9C/B4B36A2E9FA811F1BE286CB0CE1D38B0.roa
File:                     B4B36A2E9FA811F1BE286CB0CE1D38B0.roa (raw, json)
Hash identifier:          oVG5G1kBtbTPNRukpM1qGRpYEENTAwqDx3U3BjtEKHo=
Subject key identifier:   9B:6E:82:60:01:5F:17:1B:22:09:A4:2A:77:C9:BC:73:21:C8:0D:C6
Certificate issuer:       /CN=F36B5EE7AF/serialNumber=EB4A89C924BA17F0E9BB995834F5235A8619B471
Certificate serial:       01A7
Authority key identifier: EB:4A:89:C9:24:BA:17:F0:E9:BB:99:58:34:F5:23:5A:86:19:B4:71
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/60qJySS6F_Dpu5lYNPUjWoYZtHE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B5EE7/15CB94DC6B9111F086EA8D85DAE4EC9C/B4B36A2E9FA811F1BE286CB0CE1D38B0.roa
Signing time:             Mon 24 Aug 2026 10:43:56 +0000
ROA not before:           Mon 24 Aug 2026 10:43:52 +0000
ROA not after:            Sun 24 Aug 2036 10:43:52 +0000
asID:                     37680
IP address blocks:        102.36.64.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B5EE7/15CB94DC6B9111F086EA8D85DAE4EC9C/60qJySS6F_Dpu5lYNPUjWoYZtHE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B5EE7/15CB94DC6B9111F086EA8D85DAE4EC9C/60qJySS6F_Dpu5lYNPUjWoYZtHE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/60qJySS6F_Dpu5lYNPUjWoYZtHE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 12 Sep 2026 05:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 423 (0x1a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B5EE7AF, serialNumber=EB4A89C924BA17F0E9BB995834F5235A8619B471
        Validity
            Not Before: Aug 24 10:43:52 2026 GMT
            Not After : Aug 24 10:43:52 2036 GMT
        Subject: CN=6a8c206c-e8e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:d5:41:1e:b3:c4:88:12:26:92:9d:d6:ad:87:
                    84:30:50:52:f4:1d:0e:6c:f0:58:49:ce:00:57:bd:
                    34:3f:cc:fb:9f:18:14:5b:84:f0:82:94:80:fb:6c:
                    7e:87:42:38:6a:ad:7c:93:c4:d1:5e:0c:4c:9b:56:
                    96:a4:16:bf:4d:be:a2:cc:33:45:ae:4b:36:31:75:
                    3d:d5:5f:a6:e6:10:4e:b3:85:23:77:3a:f2:f8:93:
                    54:bd:e2:bb:00:cd:30:1e:4a:ca:6c:a6:8d:ee:3d:
                    ed:2f:8f:2e:7a:25:d4:15:0b:9f:c6:83:80:49:52:
                    7e:dd:be:01:44:19:60:6e:3a:25:24:0f:14:f9:b6:
                    07:73:6f:1f:7f:b6:11:38:6b:ac:ad:26:bd:ca:74:
                    54:94:36:84:4f:e6:e1:d0:67:a3:41:c5:94:1b:d8:
                    24:fc:18:76:bb:da:0e:74:22:0d:4a:76:62:6e:8d:
                    91:70:a0:d2:e5:34:d4:56:7f:89:ef:47:b4:63:25:
                    01:64:33:8b:58:b0:3e:be:3f:59:fd:a3:41:2b:97:
                    f6:68:d7:2e:1d:9e:69:93:9a:f8:fe:5c:08:b4:57:
                    b0:4e:bb:ed:65:e4:e3:a5:64:bc:a9:25:b4:9d:65:
                    67:ae:2b:19:58:9f:ff:f1:cd:2b:52:90:02:cf:a2:
                    c5:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:6E:82:60:01:5F:17:1B:22:09:A4:2A:77:C9:BC:73:21:C8:0D:C6
            X509v3 Authority Key Identifier:
                keyid:EB:4A:89:C9:24:BA:17:F0:E9:BB:99:58:34:F5:23:5A:86:19:B4:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B5EE7/15CB94DC6B9111F086EA8D85DAE4EC9C/60qJySS6F_Dpu5lYNPUjWoYZtHE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/60qJySS6F_Dpu5lYNPUjWoYZtHE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B5EE7/15CB94DC6B9111F086EA8D85DAE4EC9C/B4B36A2E9FA811F1BE286CB0CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.36.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         ad:f4:d3:e8:3b:78:83:d5:e2:32:13:57:9d:00:2f:20:7f:16:
         43:64:fb:98:17:e4:2f:01:b4:eb:b5:63:19:a1:2a:25:40:c6:
         50:e7:cd:ff:ec:e1:f8:4c:8b:63:3b:a9:63:15:26:c6:ae:d8:
         9e:52:d2:90:79:83:f2:1d:06:55:a7:7f:2c:49:92:03:bf:f6:
         c6:12:22:ea:aa:8d:53:b9:e7:22:73:c7:32:67:a4:61:0c:e8:
         cb:14:f5:90:ab:a1:f7:61:9a:68:c2:5c:16:66:be:cf:2f:35:
         80:83:a5:8b:65:79:5a:da:2a:1d:8f:b4:5d:17:62:a3:32:75:
         1c:c5:2a:2f:11:42:63:99:ef:e6:fd:14:25:04:86:54:bf:10:
         25:fc:eb:8d:e2:95:fa:7e:54:45:7b:a6:a7:78:ff:ff:07:7b:
         31:2e:4b:5f:8a:64:2c:cc:91:66:2f:71:44:68:4e:c8:ad:8e:
         5e:8c:60:55:bc:1e:1c:99:13:a4:24:0c:a8:4c:57:e7:a3:91:
         28:e7:d5:98:cd:ec:b6:8b:1c:73:11:8d:72:58:94:3c:83:ae:
         fe:52:26:fa:a8:b7:dd:09:d0:2c:91:62:97:5b:c9:1d:c7:f2:
         e2:f4:b9:29:bc:56:31:f1:3a:04:c0:8c:33:15:5f:ca:89:c7:
         9d:a6:26:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----