Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/8178EFFE9D8611F191BBB400CF1D38B0.roa
File:                     8178EFFE9D8611F191BBB400CF1D38B0.roa (raw, json)
Hash identifier:          rzm/Jd0t1WZv0Ae0PdZZyaUxafL8G3YtAdFY44VPejw=
Subject key identifier:   2A:F9:FA:89:F3:50:51:1E:D8:F7:4D:A1:43:F7:F5:C8:4D:14:13:8F
Certificate issuer:       /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial:       19BA
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/8178EFFE9D8611F191BBB400CF1D38B0.roa
Signing time:             Fri 21 Aug 2026 17:34:05 +0000
ROA not before:           Fri 21 Aug 2026 17:34:01 +0000
ROA not after:            Mon 21 Aug 2028 17:34:01 +0000
asID:                     152179
IP address blocks:        102.129.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 23 Aug 2026 00:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6586 (0x19ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
        Validity
            Not Before: Aug 21 17:34:01 2026 GMT
            Not After : Aug 21 17:34:01 2028 GMT
        Subject: CN=6a888c0d-d5c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:44:95:73:1b:8e:c6:34:56:ab:b6:f1:eb:e8:
                    d5:6d:79:1c:70:f9:af:e9:3b:c7:81:79:05:45:58:
                    4f:ff:c3:47:8c:11:80:ca:65:9d:ef:e8:6b:f8:fd:
                    22:47:e4:86:6a:97:29:93:48:bf:bb:97:03:2b:12:
                    d4:ac:22:81:45:4e:26:f9:12:4b:97:b4:89:6d:3b:
                    4d:26:88:00:db:21:ce:7f:28:61:a2:7d:96:ad:0c:
                    b7:85:5f:33:f2:c7:19:78:9a:4e:7e:bd:5c:0b:ec:
                    44:4d:d7:fe:32:c1:2a:5f:ab:46:99:3a:8b:08:9c:
                    63:0b:3a:99:e2:7d:13:81:95:86:47:ce:10:d1:c0:
                    4f:69:f4:cc:24:05:c6:da:f6:fb:da:eb:25:c4:89:
                    41:ae:d7:63:8d:38:7c:79:a2:71:3f:1d:80:f3:69:
                    fe:8d:a4:2b:d4:1e:55:c2:e9:f7:0c:7f:a1:f6:d3:
                    92:e3:e8:2d:f2:d7:62:ca:8c:e9:65:01:66:cf:d6:
                    4a:c9:ad:23:b6:40:a4:a0:18:28:7a:c4:64:28:09:
                    c5:8d:40:bd:78:53:16:49:14:68:8a:74:33:d7:6d:
                    a2:6a:72:5b:6b:21:f1:f8:55:3c:c8:2e:c8:f2:c2:
                    33:9d:a7:fe:50:5f:b7:13:aa:fb:88:9e:72:80:68:
                    a9:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:F9:FA:89:F3:50:51:1E:D8:F7:4D:A1:43:F7:F5:C8:4D:14:13:8F
            X509v3 Authority Key Identifier:
                keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/8178EFFE9D8611F191BBB400CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.129.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:a6:e4:ff:70:5c:f7:a6:75:01:fd:ab:74:fd:15:05:ca:79:
         2f:28:19:7c:1e:da:bf:fe:22:3f:d9:5d:c3:d6:68:17:d4:87:
         3c:af:7b:bd:24:f3:a6:50:0d:23:46:57:17:4a:d3:b3:bd:a0:
         8d:aa:c4:c3:cc:85:8d:a6:2c:cc:9c:8d:0e:31:b2:9c:a1:3c:
         db:dd:44:ac:d6:2b:48:03:ec:dc:0e:f0:98:9b:95:84:84:bb:
         f0:25:15:aa:7b:78:3d:21:4e:f1:be:a4:f5:9c:87:3e:9e:2f:
         d8:f1:32:f9:23:ba:8d:e5:a2:00:d3:d1:7a:74:e5:cc:d9:db:
         9a:8d:e5:76:0b:5f:84:01:ed:2e:c8:22:a1:37:36:be:84:65:
         09:e2:93:2e:66:c1:8b:54:8b:36:6e:cc:a5:0a:20:e6:04:8a:
         86:7c:1b:12:8b:08:41:4d:5a:9c:8a:10:c8:ee:36:f6:83:29:
         b3:82:c5:e0:f6:96:d8:d3:a5:b6:a6:a3:2c:22:1e:c4:bc:eb:
         9b:12:d3:8e:f7:32:4a:3b:d0:d8:37:66:dc:64:b4:72:d6:7c:
         51:4e:e4:0c:76:9e:94:e5:d3:24:60:3d:f5:65:79:a9:f6:1b:
         04:c4:71:d1:8a:2c:37:a3:00:61:72:0b:3b:2d:fd:be:e0:2d:
         4e:80:be:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----