Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/39151E60C70F11F1A63DCFC3CE1D38B0.roa
File:                     39151E60C70F11F1A63DCFC3CE1D38B0.roa (raw, json)
Hash identifier:          2v/JdaDw2XGIPUS0nzfLMD4fQi5N1QEPLTjHFI9oIJA=
Subject key identifier:   2D:C6:23:D3:72:25:7D:0C:91:C4:70:1D:0F:92:C1:85:8C:C2:82:CC
Certificate issuer:       /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial:       1A7F
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/39151E60C70F11F1A63DCFC3CE1D38B0.roa
Signing time:             Tue 13 Oct 2026 14:06:02 +0000
ROA not before:           Tue 13 Oct 2026 14:05:58 +0000
ROA not after:            Fri 13 Oct 2028 14:05:58 +0000
asID:                     210531
IP address blocks:        102.129.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 17 Oct 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6783 (0x1a7f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
        Validity
            Not Before: Oct 13 14:05:58 2026 GMT
            Not After : Oct 13 14:05:58 2028 GMT
        Subject: CN=6ace3aca-8c4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:64:cb:fd:f4:54:05:28:4c:f2:d1:5a:46:69:
                    8e:36:6f:11:38:2a:6d:0c:96:6d:4c:4b:db:a2:6b:
                    ed:ea:bb:08:a8:e4:85:6f:d4:3b:5f:b6:9b:69:f4:
                    c4:0b:8b:11:de:c1:d1:c9:e1:14:73:2c:92:e5:6e:
                    a2:10:03:8d:a6:f0:fa:00:0a:21:fd:14:1e:08:a1:
                    06:82:90:c5:97:8b:93:79:aa:35:52:c8:d8:c1:bc:
                    5f:63:d7:0d:74:a1:ea:e4:c8:30:6d:1b:52:60:de:
                    bd:0f:79:26:44:10:68:7e:95:87:48:90:62:25:65:
                    24:e5:04:22:7f:f8:3b:08:fc:e7:22:2c:a7:94:af:
                    74:2b:1d:75:18:e6:da:4e:af:3c:5f:64:4d:d4:70:
                    66:ca:fa:59:b7:70:2b:98:81:bf:00:b6:f8:a1:f8:
                    84:88:51:e7:75:e5:d4:04:d7:38:56:92:8e:43:55:
                    60:90:f9:61:80:56:d2:31:7b:cb:cf:3c:0e:f5:eb:
                    54:c6:89:27:cf:9e:c7:72:b4:ae:c3:7d:31:2b:27:
                    ad:7b:f5:79:73:51:12:96:a3:a1:9f:19:c8:aa:79:
                    76:2c:f4:f9:11:4f:03:f7:68:d2:10:6f:32:de:76:
                    ba:66:d0:97:a1:95:5a:8a:e5:f0:bc:c7:8e:fd:50:
                    a6:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:C6:23:D3:72:25:7D:0C:91:C4:70:1D:0F:92:C1:85:8C:C2:82:CC
            X509v3 Authority Key Identifier:
                keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/39151E60C70F11F1A63DCFC3CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.129.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:ae:80:29:32:4d:66:57:d5:d2:9c:14:14:e1:df:79:09:fa:
         2c:2e:30:8b:ea:57:dc:ed:32:be:4c:79:39:c6:13:d3:ce:bc:
         64:ce:c0:0e:04:0a:09:e5:e6:8e:1a:00:ad:67:83:1b:c7:a8:
         1c:f2:81:5f:35:74:53:84:24:c3:6a:60:e2:b9:78:9a:09:67:
         ea:e7:3b:44:bf:46:bb:01:99:e9:7d:68:2f:e0:9e:bc:eb:cf:
         96:9f:80:06:41:4c:7e:76:5c:2f:8c:70:f0:96:ad:55:b9:c4:
         f9:27:61:f7:67:50:ce:86:8c:5c:45:6f:2c:de:e6:10:76:be:
         fc:45:07:d6:d4:79:5a:e9:6c:ab:23:72:6c:b0:bd:f0:55:86:
         fa:68:c1:d0:9a:9a:7c:d6:f5:76:2f:f8:3a:8f:83:4b:62:13:
         5e:fd:32:17:fe:8f:71:4b:56:77:f4:61:3c:ba:81:00:eb:18:
         82:f4:f4:45:1e:05:55:66:93:4e:bd:b0:cd:4f:ca:20:9d:b4:
         16:a0:46:76:f0:42:34:87:f6:9c:d8:b4:d6:5b:2f:c3:04:f0:
         e2:74:cc:6e:57:15:d7:5c:eb:a4:93:14:4e:fc:2a:01:b3:6a:
         1d:c0:bc:3c:b7:04:cd:e3:ea:4a:16:4c:4e:ee:15:95:d9:00:
         38:84:50:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----