Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/04A761B2BD9411F199985ED1CE1D38B0.roa
File:                     04A761B2BD9411F199985ED1CE1D38B0.roa (raw, json)
Hash identifier:          FIa690Sty58kbXwLMFK7IHvcULKG4JiemmswQfsAFYE=
Subject key identifier:   50:2F:20:C2:5A:21:56:0E:BF:49:99:8A:E0:3A:92:66:42:8D:EA:F5
Certificate issuer:       /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial:       1A3D
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/04A761B2BD9411F199985ED1CE1D38B0.roa
Signing time:             Thu 01 Oct 2026 12:31:26 +0000
ROA not before:           Thu 01 Oct 2026 12:31:22 +0000
ROA not after:            Sun 01 Oct 2028 12:31:22 +0000
asID:                     212238
IP address blocks:        102.165.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 04 Oct 2026 15:54:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6717 (0x1a3d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
        Validity
            Not Before: Oct  1 12:31:22 2026 GMT
            Not After : Oct  1 12:31:22 2028 GMT
        Subject: CN=6abe529e-9a3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:e2:c1:0a:32:94:0e:e1:8e:b9:ac:20:3b:b6:
                    9c:5c:94:bc:84:83:ef:b1:7d:31:94:e9:c3:6a:4c:
                    b2:b5:e5:ed:77:02:2a:e6:e9:3b:26:ca:9a:5e:82:
                    a4:ad:15:2a:d2:0b:19:50:6a:30:4b:d0:2f:aa:7c:
                    65:9d:95:6c:b3:05:8d:62:1d:fb:d6:86:57:ed:8a:
                    2f:8c:bd:aa:82:5e:ab:bf:66:2d:ea:38:aa:2a:10:
                    55:3d:0d:78:9f:28:fb:4d:12:94:d3:d0:6f:12:a2:
                    b5:0b:35:ea:b5:db:fc:4e:95:bb:9a:63:9e:9a:e3:
                    a3:cb:91:68:85:1e:3a:2b:6d:a0:04:99:a3:8b:e5:
                    43:48:be:24:7c:5d:1b:ed:80:07:73:05:2c:1c:fa:
                    35:72:c9:aa:d5:2c:08:f9:ab:51:96:78:d3:b3:1c:
                    0f:24:f5:c0:e4:82:07:02:7c:ed:12:e2:68:ed:6f:
                    ea:67:a5:d5:b8:57:c1:f3:b4:a2:e8:72:1c:d9:7d:
                    3a:e8:a0:f0:49:fe:26:58:09:66:66:e2:46:98:89:
                    bf:f4:6b:ac:06:bc:f4:41:a5:4c:e4:d9:ad:46:4b:
                    1e:8b:ca:fb:70:f0:6c:92:20:9b:51:ed:45:7d:be:
                    9c:d1:c2:7b:75:6f:9f:ec:8d:c9:88:f4:0c:50:d6:
                    15:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:2F:20:C2:5A:21:56:0E:BF:49:99:8A:E0:3A:92:66:42:8D:EA:F5
            X509v3 Authority Key Identifier:
                keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/04A761B2BD9411F199985ED1CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.165.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:f4:46:38:c7:86:8e:26:d0:78:b8:c2:55:df:07:c6:f5:6d:
         94:ad:50:4f:25:1c:84:2d:c4:f3:fb:60:7f:61:d5:09:47:0b:
         2c:bb:75:09:8d:f2:93:7f:02:e7:39:f5:01:2a:ae:5c:ae:a5:
         8f:d4:96:5d:f5:4a:39:8f:02:f5:4b:40:f4:8a:4e:f8:56:eb:
         08:7b:92:07:24:94:45:c0:2c:ff:bc:83:6c:55:ad:81:e6:ed:
         ec:5a:85:a3:3e:8e:fc:4c:c6:2c:15:de:bc:d5:64:58:18:40:
         73:a9:7a:f4:d0:c3:58:66:55:ee:0f:1b:56:da:2c:de:5c:ef:
         e7:7f:74:4e:cc:22:68:2d:15:75:93:19:8e:0c:c0:92:05:fc:
         b6:81:a8:11:74:3b:cb:af:26:ed:99:33:c7:b5:50:6f:94:f6:
         00:48:63:c5:95:93:a7:9b:e3:8d:01:3c:8c:33:89:ea:e7:08:
         43:ec:a1:41:f4:ba:d2:a1:09:49:12:5d:15:44:7b:9c:8d:f3:
         82:d6:70:12:30:53:ea:72:d6:46:23:d8:cd:93:b8:d7:f2:19:
         ac:94:99:ce:3d:c1:1d:8e:bc:ea:97:cb:56:7c:da:81:7e:de:
         99:eb:b0:75:4b:ad:73:a5:a4:72:7f:db:6c:b5:32:70:f0:32:
         3d:dc:c5:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----