Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/58FB52F0B0C411F18DE2B4CCCE1D38B0.roa
File:                     58FB52F0B0C411F18DE2B4CCCE1D38B0.roa (raw, json)
Hash identifier:          9NBZEptVZy/XSvwNRBJX1nsoI/voccs5Hcq6TG6Eb14=
Subject key identifier:   FF:9F:B5:7B:0E:38:96:14:A0:F9:7A:9C:3C:44:7B:B2:FF:60:68:94
Certificate issuer:       /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial:       1A05
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/58FB52F0B0C411F18DE2B4CCCE1D38B0.roa
Signing time:             Tue 15 Sep 2026 05:14:38 +0000
ROA not before:           Tue 15 Sep 2026 05:14:34 +0000
ROA not after:            Fri 15 Sep 2028 05:14:34 +0000
asID:                     402215
IP address blocks:        102.129.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 17 Sep 2026 00:08:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6661 (0x1a05)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
        Validity
            Not Before: Sep 15 05:14:34 2026 GMT
            Not After : Sep 15 05:14:34 2028 GMT
        Subject: CN=6aa8d43e-4f26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:78:4b:54:cd:c5:a0:45:1d:7f:51:a4:3c:0a:
                    6b:fd:bd:7d:2a:d4:a9:d9:5c:02:a5:3c:b6:0e:7f:
                    be:38:55:89:88:61:91:56:ef:4c:d0:fb:98:ad:a7:
                    6a:db:68:56:9a:81:1a:0d:ab:19:6d:44:aa:b8:e0:
                    87:e8:48:76:b6:cd:b2:83:68:13:cd:d8:1f:85:fd:
                    5d:a5:20:40:23:75:a5:c4:98:38:7e:9d:5e:9c:5b:
                    87:aa:4e:d6:17:85:a8:f1:50:84:fb:18:f3:67:7a:
                    64:36:b6:34:03:49:55:06:af:94:37:9f:f6:37:9c:
                    02:bb:80:e0:a2:f1:fe:7c:fc:1c:00:f5:fc:48:92:
                    09:c0:4b:c2:08:64:02:d0:66:f6:84:82:fb:1c:66:
                    c1:0f:93:25:d8:6d:22:bf:27:86:1d:8c:ec:ce:ee:
                    d8:76:68:70:2d:18:71:2d:cb:b7:3b:c5:fb:2d:47:
                    d6:17:48:72:84:2a:5c:2a:c8:87:ff:e8:47:d1:6a:
                    45:45:e9:8c:3f:4e:3c:a1:28:53:eb:42:a7:d2:55:
                    65:6c:31:57:2f:81:e0:76:60:a9:e6:da:60:4a:11:
                    63:7e:1a:cb:6f:6f:74:06:1a:60:34:6a:c5:40:4b:
                    5d:6c:9e:56:04:dd:31:22:90:f1:99:06:2a:a4:62:
                    cc:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:9F:B5:7B:0E:38:96:14:A0:F9:7A:9C:3C:44:7B:B2:FF:60:68:94
            X509v3 Authority Key Identifier:
                keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/58FB52F0B0C411F18DE2B4CCCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.129.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:28:c0:1f:57:72:05:48:f2:e3:f2:4d:3e:35:81:b7:b1:c2:
         87:34:cc:de:af:84:ad:28:b1:68:20:b6:79:97:91:77:af:42:
         89:42:e4:a1:e7:0c:d1:49:79:6b:43:27:6f:2f:ce:f4:1c:f5:
         63:3e:fb:58:83:44:2a:22:13:2f:61:45:d1:42:cc:c7:7f:fa:
         81:b3:9c:d2:5e:1c:94:96:9c:70:d5:be:1a:2e:2f:2f:1e:38:
         e4:bd:d7:14:d4:a3:2f:03:4a:b1:8f:bd:cf:d1:5b:b1:7d:fd:
         d2:8b:35:8d:90:bf:8f:0d:23:cb:1c:86:86:06:60:9a:ff:47:
         1f:75:d4:b8:f5:c2:f6:a1:8d:13:9d:4f:7b:6a:d4:51:2d:99:
         ed:2e:c0:ea:b2:1b:cf:57:3b:3a:89:51:c3:8a:2e:bd:ff:df:
         18:f5:df:05:42:89:3d:38:49:35:f8:9f:33:11:7b:8d:3a:1e:
         ac:2a:1d:14:4e:d2:c9:fe:ba:07:df:b8:8d:56:54:12:82:4b:
         60:93:4f:db:38:db:77:62:8c:f7:2a:9e:ab:91:e9:70:97:5f:
         8d:0c:97:4d:62:13:c9:8c:6b:7b:8f:0c:81:d1:47:e7:9c:56:
         37:e1:f2:c2:e1:bc:98:7d:c3:83:a1:6d:74:fb:be:c3:c4:23:
         f3:fc:6e:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----