Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36BD167/B4412F3CDEEC11EFBFCCA28B762E951A/DE8C3A22A6C611F197D4B9CCCE1D38B0.roa
File:                     DE8C3A22A6C611F197D4B9CCCE1D38B0.roa (raw, json)
Hash identifier:          yz5i1kXKEaThHHdhQDo/NfqBUERlQhBxmE8hcIIhdIg=
Subject key identifier:   2C:FA:EB:FE:E0:5A:B4:53:0F:8E:92:B0:84:3C:EF:AD:00:D5:6F:5C
Certificate issuer:       /CN=F36BD167AF/serialNumber=A39B37E60D5C20E96EB5A20F45D22CEEF87FE5BC
Certificate serial:       0261
Authority key identifier: A3:9B:37:E6:0D:5C:20:E9:6E:B5:A2:0F:45:D2:2C:EE:F8:7F:E5:BC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/o5s35g1cIOlutaIPRdIs7vh_5bw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BD167/B4412F3CDEEC11EFBFCCA28B762E951A/DE8C3A22A6C611F197D4B9CCCE1D38B0.roa
Signing time:             Wed 02 Sep 2026 12:07:30 +0000
ROA not before:           Wed 02 Sep 2026 12:07:25 +0000
ROA not after:            Fri 31 Dec 2049 12:07:25 +0000
asID:                     329385
IP address blocks:        102.210.60.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36BD167/B4412F3CDEEC11EFBFCCA28B762E951A/o5s35g1cIOlutaIPRdIs7vh_5bw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36BD167/B4412F3CDEEC11EFBFCCA28B762E951A/o5s35g1cIOlutaIPRdIs7vh_5bw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/o5s35g1cIOlutaIPRdIs7vh_5bw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 20 Sep 2026 00:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 609 (0x261)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BD167AF, serialNumber=A39B37E60D5C20E96EB5A20F45D22CEEF87FE5BC
        Validity
            Not Before: Sep  2 12:07:25 2026 GMT
            Not After : Dec 31 12:07:25 2049 GMT
        Subject: CN=6a981181-25ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:cc:4e:af:6f:95:54:84:3d:e2:31:a3:66:aa:
                    af:57:18:6a:0b:fe:8b:13:52:58:bf:0f:13:28:12:
                    65:2d:56:ce:3f:34:f5:a7:85:04:1d:9d:11:94:88:
                    36:ce:e8:9a:f8:dc:ec:b8:42:d9:76:fa:f1:49:65:
                    2b:60:6b:f5:d1:d6:60:7d:fa:28:bc:88:60:7a:c2:
                    2e:2b:dc:08:7d:6e:3f:cb:36:0f:23:0c:cb:82:bb:
                    76:13:9c:ab:92:6e:2a:ca:11:01:4b:5a:e2:16:6b:
                    e5:8c:a3:4b:0f:7c:4c:de:82:ef:9c:62:0d:04:91:
                    4e:65:fe:93:f5:c7:f5:c9:80:8e:00:fd:c3:8f:e4:
                    06:db:84:db:ed:9e:1e:d5:c4:06:6f:c1:be:60:2c:
                    63:b7:c5:b2:8b:be:b4:58:a4:f4:35:65:ee:00:00:
                    f7:d8:ba:46:b4:18:91:99:a9:ec:61:c5:38:b3:1c:
                    e3:8c:f5:ea:c3:6a:18:80:a9:1a:31:52:29:e9:5d:
                    32:26:a2:87:90:14:69:fa:c4:bf:5e:17:ac:e4:ca:
                    5a:6b:77:1b:6d:de:e1:98:4a:7f:f9:67:83:a5:8f:
                    14:e4:de:b9:7f:b8:cd:03:f5:1e:ac:6d:25:a0:5b:
                    4b:9e:97:7e:79:60:06:62:8b:9c:93:5a:b2:69:59:
                    0b:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:FA:EB:FE:E0:5A:B4:53:0F:8E:92:B0:84:3C:EF:AD:00:D5:6F:5C
            X509v3 Authority Key Identifier:
                keyid:A3:9B:37:E6:0D:5C:20:E9:6E:B5:A2:0F:45:D2:2C:EE:F8:7F:E5:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BD167/B4412F3CDEEC11EFBFCCA28B762E951A/o5s35g1cIOlutaIPRdIs7vh_5bw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/o5s35g1cIOlutaIPRdIs7vh_5bw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BD167/B4412F3CDEEC11EFBFCCA28B762E951A/DE8C3A22A6C611F197D4B9CCCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.210.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2b:e4:36:b5:e6:81:fd:ee:0b:43:37:e2:c8:24:2a:0f:1f:ac:
         2e:6b:ee:7b:4b:bf:f9:c0:30:3d:3d:aa:db:67:71:47:bc:f9:
         5e:51:a5:91:9a:5d:86:aa:35:f8:1f:9f:b8:47:34:c9:f2:ce:
         d4:cc:38:55:c6:96:0a:a2:53:b3:c3:2b:d4:c0:d2:b0:24:00:
         62:43:56:a9:5b:42:02:f9:db:9c:3d:04:b1:2e:59:1b:67:b7:
         d0:b5:52:66:12:6d:ec:45:1d:cf:5f:7f:81:c6:73:c2:56:03:
         7b:b3:1b:33:5b:83:e0:65:36:55:2f:1b:36:87:e3:96:01:2f:
         4c:3c:80:22:42:49:20:c0:ca:07:31:6d:23:73:e6:15:c8:e2:
         05:e1:55:5c:07:76:d0:a7:d2:a4:20:2a:ab:a0:da:da:57:65:
         cd:53:47:38:b4:e1:03:ce:fa:71:1f:21:d4:ea:a5:5a:5e:75:
         ed:0b:a5:54:e3:cf:9a:7c:bc:aa:d4:d7:e0:f7:ec:5e:4d:ac:
         21:f2:36:8b:4e:46:3b:14:75:76:a4:4f:6d:7c:c4:01:08:90:
         13:95:42:86:28:d0:fb:65:ef:c8:c2:e9:9e:da:92:ae:58:5c:
         bc:81:6c:a1:46:23:83:18:4d:8f:a4:7b:10:69:fc:b4:8c:51:
         06:ed:37:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----