Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C10D8/8720E3EAA61211ED8D3EBED2F1222468/77AF8F281BCC11F1B29BDED1DAE4EC9C.roa
File:                     77AF8F281BCC11F1B29BDED1DAE4EC9C.roa (raw, json)
Hash identifier:          tCnoOENkXH3e8Mdks03czB54TYmILM8hcs1Ov5Tph/M=
Subject key identifier:   9F:2D:16:8A:A9:95:36:C6:05:55:DB:9E:1E:B7:96:D1:74:E5:DA:6C
Certificate issuer:       /CN=F36C10D8AF/serialNumber=C0D3AAFB63D33F0F6735DC99FF4D901A8E2250EB
Certificate serial:       0491
Authority key identifier: C0:D3:AA:FB:63:D3:3F:0F:67:35:DC:99:FF:4D:90:1A:8E:22:50:EB
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/wNOq-2PTPw9nNdyZ_02QGo4iUOs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C10D8/8720E3EAA61211ED8D3EBED2F1222468/77AF8F281BCC11F1B29BDED1DAE4EC9C.roa
Signing time:             Mon 09 Mar 2026 15:27:22 +0000
ROA not before:           Mon 09 Mar 2026 15:27:17 +0000
ROA not after:            Mon 31 Mar 2036 15:27:17 +0000
asID:                     29286
IP address blocks:        197.157.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C10D8/8720E3EAA61211ED8D3EBED2F1222468/wNOq-2PTPw9nNdyZ_02QGo4iUOs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C10D8/8720E3EAA61211ED8D3EBED2F1222468/wNOq-2PTPw9nNdyZ_02QGo4iUOs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/wNOq-2PTPw9nNdyZ_02QGo4iUOs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 14 Mar 2026 02:48:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1169 (0x491)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C10D8AF, serialNumber=C0D3AAFB63D33F0F6735DC99FF4D901A8E2250EB
        Validity
            Not Before: Mar  9 15:27:17 2026 GMT
            Not After : Mar 31 15:27:17 2036 GMT
        Subject: CN=69aee6da-2903
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:69:91:a5:21:a4:4c:71:a3:93:1b:24:2f:bb:
                    64:d1:16:87:20:a7:89:1d:71:bc:a4:9d:18:7c:bc:
                    2f:50:57:40:ba:83:ae:e5:e2:1a:30:d0:94:53:2a:
                    08:b3:77:09:47:1a:00:42:c8:db:c4:94:ae:bb:43:
                    7d:91:c2:cb:ba:5b:70:d0:19:a3:cd:27:17:df:e9:
                    52:f0:0d:1b:a4:c2:92:35:cc:5e:66:fa:c4:c1:10:
                    ef:7b:e2:38:76:41:a9:66:39:69:71:73:d5:16:ff:
                    31:b7:9b:b6:04:9e:97:4f:05:df:34:97:f9:40:07:
                    fd:53:1b:66:21:23:0e:1f:c9:86:8f:a6:5b:6a:c4:
                    99:54:b0:57:79:5a:5e:63:65:8c:fc:1c:ea:5a:0e:
                    55:60:14:f6:53:a3:70:7c:02:e6:e6:dc:82:92:fe:
                    68:fc:3e:70:cd:d3:75:ad:28:b5:86:f6:f4:a3:4c:
                    c7:25:99:7d:a9:79:ef:d5:d8:30:6b:8c:7b:df:a1:
                    77:63:d2:0d:52:9c:56:90:11:1d:ba:e7:ec:04:1b:
                    6a:78:20:ae:d5:ba:b5:80:94:a7:04:17:fb:f0:f3:
                    94:a1:4e:40:e3:d0:9a:8a:fc:a0:71:e4:04:48:40:
                    01:a1:4a:02:0a:08:4b:fa:80:79:82:8f:fe:24:3f:
                    44:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:2D:16:8A:A9:95:36:C6:05:55:DB:9E:1E:B7:96:D1:74:E5:DA:6C
            X509v3 Authority Key Identifier:
                keyid:C0:D3:AA:FB:63:D3:3F:0F:67:35:DC:99:FF:4D:90:1A:8E:22:50:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C10D8/8720E3EAA61211ED8D3EBED2F1222468/wNOq-2PTPw9nNdyZ_02QGo4iUOs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/wNOq-2PTPw9nNdyZ_02QGo4iUOs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C10D8/8720E3EAA61211ED8D3EBED2F1222468/77AF8F281BCC11F1B29BDED1DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  197.157.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:7b:21:53:0d:0d:7f:83:16:46:d2:5e:53:ab:bc:ec:dd:42:
         27:e4:a7:2f:a8:41:14:a0:42:3f:d5:1c:3c:90:bb:35:6a:13:
         0f:8f:d8:86:4a:04:9e:39:51:23:88:92:f3:99:f7:01:59:82:
         f1:d0:73:e6:bd:9e:c8:e3:4b:18:0d:99:02:1f:11:d7:b6:77:
         3d:a9:1b:82:b3:bc:06:a7:c1:49:c9:4e:22:93:0d:41:0a:0d:
         3e:68:80:5e:e9:61:c8:aa:9f:e3:11:b8:13:a5:91:ed:a5:2c:
         ed:ab:40:97:df:35:31:5f:5b:3c:17:b8:23:a5:e8:2f:62:8d:
         7c:07:eb:6e:ef:f4:6d:66:84:c4:61:b3:61:97:96:41:57:05:
         65:6c:9c:a0:62:c0:15:dd:98:b0:b7:3d:cf:1a:36:ee:86:58:
         fa:53:33:f9:74:6e:20:5a:32:30:ac:46:78:1b:a7:88:72:28:
         b8:f4:71:91:b3:3a:78:50:b7:0f:81:c8:02:24:df:3b:91:88:
         f1:60:52:70:f3:6e:6f:a2:71:25:26:3f:51:5e:5d:14:db:21:
         c7:db:88:14:2f:78:f4:38:db:32:59:3e:02:53:ab:a4:a6:46:
         f4:e1:8d:64:8d:bb:ed:4a:01:5e:ce:27:3c:e9:0f:37:5b:5a:
         c0:57:48:48
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBJEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzEwRDhBRjExMC8GA1UEBRMoQzBEM0FBRkI2M0QzM0YwRjY3MzVEQzk5RkY0RDkw
MUE4RTIyNTBFQjAeFw0yNjAzMDkxNTI3MTdaFw0zNjAzMzExNTI3MTdaMBgxFjAU
BgNVBAMTDTY5YWVlNmRhLTI5MDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDMaZGlIaRMcaOTGyQvu2TRFocgp4kdcbyknRh8vC9QV0C6g67l4how0JRT
KgizdwlHGgBCyNvElK67Q32Rwsu6W3DQGaPNJxff6VLwDRukwpI1zF5m+sTBEO97
4jh2QalmOWlxc9UW/zG3m7YEnpdPBd80l/lAB/1TG2YhIw4fyYaPpltqxJlUsFd5
Wl5jZYz8HOpaDlVgFPZTo3B8Aubm3IKS/mj8PnDN03WtKLWG9vSjTMclmX2pee/V
2DBrjHvfoXdj0g1SnFaQER265+wEG2p4IK7VurWAlKcEF/vw85ShTkDj0JqK/KBx
5ARIQAGhSgIKCEv6gHmCj/4kP0QDAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUny0W
iqmVNsYFVdueHreW0XTl2mwwHwYDVR0jBBgwFoAUwNOq+2PTPw9nNdyZ/02QGo4i
UOswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkMxMEQ4Lzg3MjBFM0VBQTYxMjExRUQ4RDNFQkVEMkYxMjIyNDY4L3dOT3Et
MlBUUHc5bk5keVpfMDJRR280aVVPcy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3dOT3EtMlBUUHc5bk5keVpfMDJRR280aVVPcy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkMxMEQ4Lzg3MjBFM0VBQTYxMjExRUQ4RDNFQkVEMkYx
MjIyNDY4Lzc3QUY4RjI4MUJDQzExRjFCMjlCREVEMURBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADFncQwDQYJKoZIhvcNAQEL
BQADggEBAAh7IVMNDX+DFkbSXlOrvOzdQifkpy+oQRSgQj/VHDyQuzVqEw+P2IZK
BJ45USOIkvOZ9wFZgvHQc+a9nsjjSxgNmQIfEde2dz2pG4KzvAanwUnJTiKTDUEK
DT5ogF7pYciqn+MRuBOlke2lLO2rQJffNTFfWzwXuCOl6C9ijXwH627v9G1mhMRh
s2GXlkFXBWVsnKBiwBXdmLC3Pc8aNu6GWPpTM/l0biBaMjCsRngbp4hyKLj0cZGz
OnhQtw+ByAIk3zuRiPFgUnDzbm+icSUmP1FeXRTbIcfbiBQvePQ42zJZPgJTq6Sm
RvThjWSNu+1KAV7OJzzpDzdbWsBXSEg=
-----END CERTIFICATE-----
Generated at Fri Mar 13 02:43:14 2026 by rpki-client