Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/3CCD7F9EA5DA11F1AF1C3BBACE1D38B0.roa
File:                     3CCD7F9EA5DA11F1AF1C3BBACE1D38B0.roa (raw, json)
Hash identifier:          0LdEfS5nIGaLhnjFRs23/XmyKxaR0FlZGmCZ2fRFXGQ=
Subject key identifier:   42:85:3D:03:1F:AF:BE:09:65:BD:6A:09:93:EE:80:ED:3F:1E:17:7F
Certificate issuer:       /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial:       19D4
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/3CCD7F9EA5DA11F1AF1C3BBACE1D38B0.roa
Signing time:             Tue 01 Sep 2026 07:53:37 +0000
ROA not before:           Tue 01 Sep 2026 07:53:33 +0000
ROA not after:            Fri 01 Sep 2028 07:53:33 +0000
asID:                     54339
IP address blocks:        102.129.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 03 Sep 2026 00:07:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6612 (0x19d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
        Validity
            Not Before: Sep  1 07:53:33 2026 GMT
            Not After : Sep  1 07:53:33 2028 GMT
        Subject: CN=6a968481-967a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:09:de:e9:16:b2:b8:72:40:9e:86:ca:21:d5:
                    21:99:5f:8f:33:50:a8:84:ab:20:9e:a0:7a:32:92:
                    49:5b:b0:67:7e:bd:36:2a:f2:cf:3a:e7:a3:cc:3f:
                    69:62:de:ff:35:1a:c0:c9:fa:fc:cb:37:3d:8f:56:
                    38:db:91:4f:5a:2f:37:f5:1b:07:85:fe:5c:dd:87:
                    83:3e:67:62:47:70:79:74:7d:01:4c:b8:b8:c8:d4:
                    76:2f:07:ff:f2:36:35:d0:5e:5b:c3:de:66:ac:d9:
                    45:6c:b4:04:90:18:17:0a:20:d2:b2:c5:a4:1b:7d:
                    d2:a3:c4:5b:72:8a:14:2c:47:a4:12:3b:48:b0:3c:
                    f3:7a:24:b0:ed:10:85:ef:2a:e6:07:09:21:d1:20:
                    72:2f:b0:fe:c1:0c:50:89:ee:51:cd:b7:e7:0f:42:
                    1a:80:60:82:21:95:64:b1:aa:b7:68:dd:48:ee:88:
                    26:34:89:01:70:b1:b5:a4:5d:95:dc:49:25:42:82:
                    a3:22:9c:be:6e:a5:91:fc:5d:47:70:be:ee:c9:40:
                    1c:0c:2e:3a:e8:e0:9e:29:d6:6f:dc:9e:96:5f:f7:
                    36:84:fd:84:f6:91:67:bb:ae:b9:d8:88:5a:24:29:
                    05:49:79:c8:42:96:c3:30:e2:bb:5a:f9:de:84:f0:
                    a2:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:85:3D:03:1F:AF:BE:09:65:BD:6A:09:93:EE:80:ED:3F:1E:17:7F
            X509v3 Authority Key Identifier:
                keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/3CCD7F9EA5DA11F1AF1C3BBACE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.129.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:fd:e8:c7:09:38:68:7e:bb:3f:f9:83:ae:ad:4f:c1:6c:5d:
         cc:a9:90:4a:10:96:01:c9:88:5a:4e:f1:e9:5a:81:e2:17:04:
         14:d9:77:3b:7d:6e:b0:00:4e:5a:6c:5c:b2:58:d9:9b:6b:59:
         4a:f6:d7:61:89:3b:69:e8:45:11:77:37:67:77:94:42:b4:f0:
         ed:3b:ed:2c:6e:80:6e:79:e2:3e:6c:d0:df:49:28:78:37:c6:
         2f:f1:71:e1:5b:83:e3:b4:da:37:65:52:e2:57:95:47:46:cb:
         ef:d1:40:0c:ed:6a:88:d2:a1:38:40:0d:44:55:2b:96:77:90:
         6a:aa:72:8e:62:62:6d:28:25:b3:e3:d0:d4:5b:18:f8:fa:fd:
         e7:3d:72:7f:fd:c3:47:9c:4d:39:cd:1e:05:58:7c:4f:0b:55:
         c9:13:82:f3:ea:17:ed:72:91:0d:5a:87:05:a7:f6:cf:7d:98:
         69:ee:14:c4:a1:23:4c:1a:ff:02:14:73:50:50:be:ba:9c:84:
         38:9e:f9:88:7e:7d:27:5e:31:0b:79:ac:bd:b6:a8:45:2c:5b:
         7a:10:ad:bf:67:7d:e1:ec:fc:59:5d:3b:d0:9f:5f:cf:a4:a0:
         5d:cf:65:18:20:5d:43:aa:40:d8:7c:80:b4:fc:4a:a2:65:c1:
         ed:4a:30:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----