Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36BCC19/F6336432550111ECB65B497AD8A014CE/21F9DAFE926711F19BE7BD13CF1D38B0.roa
File:                     21F9DAFE926711F19BE7BD13CF1D38B0.roa (raw, json)
Hash identifier:          hlqxVblCqEYiX3zs6q6tVa68Gx9o5Mqky5bydrTjViI=
Subject key identifier:   71:0F:19:6D:39:49:8B:06:D8:33:D8:C2:23:3D:FC:FF:E6:6D:86:BE
Certificate issuer:       /CN=F36BCC19AF/serialNumber=87C277EA5445529DD06B2FE5EE9F33CDC7CE84E0
Certificate serial:       06E9
Authority key identifier: 87:C2:77:EA:54:45:52:9D:D0:6B:2F:E5:EE:9F:33:CD:C7:CE:84:E0
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/h8J36lRFUp3Qay_l7p8zzcfOhOA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BCC19/F6336432550111ECB65B497AD8A014CE/21F9DAFE926711F19BE7BD13CF1D38B0.roa
Signing time:             Fri 07 Aug 2026 13:51:48 +0000
ROA not before:           Fri 07 Aug 2026 13:51:44 +0000
ROA not after:            Mon 04 Aug 2036 13:51:44 +0000
asID:                     328250
IP address blocks:        102.220.40.0/22 maxlen: 24
                          2c0f:f8f8::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36BCC19/F6336432550111ECB65B497AD8A014CE/h8J36lRFUp3Qay_l7p8zzcfOhOA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36BCC19/F6336432550111ECB65B497AD8A014CE/h8J36lRFUp3Qay_l7p8zzcfOhOA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/h8J36lRFUp3Qay_l7p8zzcfOhOA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 16 Sep 2026 02:32:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1769 (0x6e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BCC19AF, serialNumber=87C277EA5445529DD06B2FE5EE9F33CDC7CE84E0
        Validity
            Not Before: Aug  7 13:51:44 2026 GMT
            Not After : Aug  4 13:51:44 2036 GMT
        Subject: CN=6a75e2f4-5556
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d2:e2:cf:d6:9d:9b:48:2e:b4:0d:e3:91:9d:
                    96:3e:b9:17:98:ca:29:ee:fb:89:c3:07:e5:d8:81:
                    8e:95:3f:9e:ad:8c:fe:05:55:f0:07:79:46:28:6f:
                    37:e1:b5:78:d4:36:f7:35:4d:8c:9b:38:de:46:a4:
                    e1:de:1d:eb:07:b8:ab:e4:72:74:08:74:74:4d:f4:
                    05:6b:d6:d3:fc:c4:d2:80:d9:95:a7:fe:a1:41:e4:
                    cc:94:04:82:07:46:c4:1c:27:1a:b9:c4:9a:c2:fc:
                    e1:cf:46:2d:03:81:cb:77:28:3c:fa:19:f7:f9:cc:
                    42:63:1c:70:fb:de:2b:09:c8:1b:46:a4:c5:54:a9:
                    be:85:65:da:bf:fa:f5:62:37:bc:e9:99:b0:ad:81:
                    9f:4c:52:7c:29:5c:5d:41:60:a8:73:ff:b7:b9:9d:
                    db:d2:13:a8:05:b0:fb:c5:e9:bc:c6:07:ea:3f:98:
                    7e:2e:32:07:7d:4d:b6:37:81:58:d5:37:6b:e8:26:
                    17:98:bc:58:57:95:9e:7e:1e:2d:07:c5:ae:fc:02:
                    95:f2:31:15:5f:a2:d6:57:c0:b4:24:dc:ba:74:18:
                    20:07:67:69:32:11:23:f3:58:15:0e:a3:6b:5a:b5:
                    01:c0:e1:03:06:81:00:71:b5:1f:fa:90:8d:da:78:
                    9e:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:0F:19:6D:39:49:8B:06:D8:33:D8:C2:23:3D:FC:FF:E6:6D:86:BE
            X509v3 Authority Key Identifier:
                keyid:87:C2:77:EA:54:45:52:9D:D0:6B:2F:E5:EE:9F:33:CD:C7:CE:84:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BCC19/F6336432550111ECB65B497AD8A014CE/h8J36lRFUp3Qay_l7p8zzcfOhOA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/h8J36lRFUp3Qay_l7p8zzcfOhOA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BCC19/F6336432550111ECB65B497AD8A014CE/21F9DAFE926711F19BE7BD13CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.220.40.0/22
                IPv6:
                  2c0f:f8f8::/32

    Signature Algorithm: sha256WithRSAEncryption
         9d:4e:39:48:25:d8:63:0e:95:8e:c5:24:cf:f2:a1:cd:5d:0e:
         7e:d1:c0:6d:c9:3f:45:d7:a2:58:75:14:d7:34:be:c4:df:d8:
         bf:cb:79:7b:64:f3:ad:34:12:73:fb:06:3b:39:60:5a:db:e1:
         eb:06:3c:0b:47:68:95:e7:12:da:43:b3:f9:5f:06:8b:4c:79:
         4a:12:ec:cb:09:a6:24:4b:fc:f0:1f:57:2d:60:5f:38:95:f0:
         51:42:3f:ab:d0:36:21:6e:0c:4d:ec:26:8b:35:56:9f:64:9c:
         20:ec:2f:35:f9:ee:02:0a:f1:0e:30:e7:8d:a0:44:d3:c3:2c:
         72:9c:93:72:04:02:b5:81:08:dd:c8:ef:9a:9d:eb:98:04:88:
         bf:c3:7d:67:0a:fe:20:2f:72:eb:34:62:95:a4:ad:20:45:2e:
         9a:c4:53:6f:83:d9:00:ef:7f:c1:17:11:8a:c9:48:ce:6c:ae:
         6f:41:c2:e0:a7:e2:b1:a0:fa:5f:72:a0:76:17:26:2e:c5:ef:
         c5:75:aa:35:1d:af:7d:e6:8d:38:37:1d:a2:72:f9:40:5b:83:
         f1:eb:ae:25:65:ad:b5:e5:74:30:93:c0:0f:0e:d3:0c:37:9b:
         d2:f0:cc:fb:f0:e2:7a:05:4b:db:11:4a:a0:3c:f0:68:bc:17:
         66:ef:66:26
-----BEGIN CERTIFICATE-----
MIIFkjCCBHqgAwIBAgICBukwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QkNDMTlBRjExMC8GA1UEBRMoODdDMjc3RUE1NDQ1NTI5REQwNkIyRkU1RUU5RjMz
Q0RDN0NFODRFMDAeFw0yNjA4MDcxMzUxNDRaFw0zNjA4MDQxMzUxNDRaMBgxFjAU
BgNVBAMTDTZhNzVlMmY0LTU1NTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC70uLP1p2bSC60DeORnZY+uReYyinu+4nDB+XYgY6VP56tjP4FVfAHeUYo
bzfhtXjUNvc1TYybON5GpOHeHesHuKvkcnQIdHRN9AVr1tP8xNKA2ZWn/qFB5MyU
BIIHRsQcJxq5xJrC/OHPRi0Dgct3KDz6Gff5zEJjHHD73isJyBtGpMVUqb6FZdq/
+vViN7zpmbCtgZ9MUnwpXF1BYKhz/7e5ndvSE6gFsPvF6bzGB+o/mH4uMgd9TbY3
gVjVN2voJheYvFhXlZ5+Hi0Hxa78ApXyMRVfotZXwLQk3Lp0GCAHZ2kyESPzWBUO
o2tatQHA4QMGgQBxtR/6kI3aeJ7tAgMBAAGjggK0MIICsDAdBgNVHQ4EFgQUcQ8Z
bTlJiwbYM9jCIz38/+Zthr4wHwYDVR0jBBgwFoAUh8J36lRFUp3Qay/l7p8zzcfO
hOAwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkJDQzE5L0Y2MzM2NDMyNTUwMTExRUNCNjVCNDk3QUQ4QTAxNENFL2g4SjM2
bFJGVXAzUWF5X2w3cDh6emNmT2hPQS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2g4SjM2bFJGVXAzUWF5X2w3cDh6emNmT2hPQS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkJDQzE5L0Y2MzM2NDMyNTUwMTExRUNCNjVCNDk3QUQ4
QTAxNENFLzIxRjlEQUZFOTI2NzExRjE5QkU3QkQxM0NGMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAJm3CgwDQQCAAIwBwMFACwP
+PgwDQYJKoZIhvcNAQELBQADggEBAJ1OOUgl2GMOlY7FJM/yoc1dDn7RwG3JP0XX
olh1FNc0vsTf2L/LeXtk8600EnP7Bjs5YFrb4esGPAtHaJXnEtpDs/lfBotMeUoS
7MsJpiRL/PAfVy1gXziV8FFCP6vQNiFuDE3sJos1Vp9knCDsLzX57gIK8Q4w542g
RNPDLHKck3IEArWBCN3I75qd65gEiL/DfWcK/iAvcus0YpWkrSBFLprEU2+D2QDv
f8EXEYrJSM5srm9BwuCn4rGg+l9yoHYXJi7F78V1qjUdr33mjTg3HaJy+UBbg/Hr
riVlrbXldDCTwA8O0ww3m9LwzPvw4noFS9sRSqA88Gi8F2bvZiY=
-----END CERTIFICATE-----