Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/8315C130A16311F1927038ABCE1D38B0.roa
File:                     8315C130A16311F1927038ABCE1D38B0.roa (raw, json)
Hash identifier:          yC5sRGxiawpuE7BkpL9vjMqZJiB2v1LnNX/f1GLsOCI=
Subject key identifier:   5D:CB:90:F6:4C:0A:93:1A:31:CD:23:53:3F:14:3F:42:B1:CA:1C:8D
Certificate issuer:       /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial:       19C6
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/8315C130A16311F1927038ABCE1D38B0.roa
Signing time:             Wed 26 Aug 2026 15:33:40 +0000
ROA not before:           Wed 26 Aug 2026 15:33:34 +0000
ROA not after:            Sat 26 Aug 2028 15:33:34 +0000
asID:                     219394
IP address blocks:        102.129.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 29 Aug 2026 00:07:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6598 (0x19c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
        Validity
            Not Before: Aug 26 15:33:34 2026 GMT
            Not After : Aug 26 15:33:34 2028 GMT
        Subject: CN=6a8f0754-0a85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ea:bf:e1:e1:df:87:c6:f1:b3:ea:b0:50:53:
                    b9:35:41:06:38:02:09:0b:ff:3e:c0:19:59:57:d3:
                    40:17:4c:30:24:5a:72:da:bb:b5:7d:ae:87:7e:b2:
                    ab:78:46:4c:7f:c4:41:31:a0:f2:d0:e9:4a:d3:8b:
                    ae:70:2f:8c:78:54:c2:dd:65:3b:f4:5b:56:ff:ca:
                    5f:94:68:2f:2e:65:12:0a:22:98:88:5d:3a:0e:ca:
                    ee:a2:37:42:67:04:fd:26:1b:16:41:f6:23:b0:af:
                    e0:48:90:0e:00:42:f2:a5:d9:43:93:cf:0a:17:32:
                    87:77:d7:95:ea:8b:8a:6a:3f:ad:9f:ec:00:04:0c:
                    73:6e:05:b8:02:67:24:74:cd:97:7e:45:19:87:90:
                    bd:8d:7b:b1:d5:da:dc:fb:19:0a:66:c4:7a:55:47:
                    de:ab:41:7d:a6:9c:c7:28:cc:55:32:40:2f:b2:fb:
                    75:3e:2f:81:e4:07:a6:c7:57:f4:28:e5:56:33:e8:
                    ba:18:88:ac:83:88:48:04:ac:4b:1a:67:52:3a:6d:
                    f2:a6:7e:48:bf:fa:af:ec:ed:e7:21:44:db:45:94:
                    b0:12:ff:f9:47:5c:c2:59:a4:a5:8b:57:f2:ba:1c:
                    8b:8d:82:c8:e6:33:41:46:43:32:4e:0e:ea:43:eb:
                    22:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:CB:90:F6:4C:0A:93:1A:31:CD:23:53:3F:14:3F:42:B1:CA:1C:8D
            X509v3 Authority Key Identifier:
                keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/8315C130A16311F1927038ABCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.129.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:16:81:3d:e8:47:b1:d6:0c:f0:82:7f:22:10:32:45:59:8a:
         85:40:bc:b5:77:7b:46:1f:4c:f3:a0:f8:8e:1b:5b:09:af:1e:
         25:a6:6e:64:4c:7f:54:5b:89:cb:c9:9e:fb:f3:12:d0:10:83:
         4d:dc:63:d1:29:5c:b5:ac:3c:0d:fc:88:11:34:95:f0:ca:37:
         02:e9:2b:cb:29:3e:ae:3d:ef:90:dc:f2:fd:cf:d8:dd:36:30:
         b3:f0:fb:e6:3b:b6:b9:06:d2:6f:5b:fd:b7:11:e4:92:1b:82:
         90:56:c5:5e:50:fe:6f:53:07:f9:fb:02:e0:db:a7:98:60:a9:
         07:de:cb:b1:35:3a:82:ab:cd:b7:b6:ef:9b:63:03:9e:f2:d2:
         fe:f3:4c:d9:5c:cf:f7:f6:e6:fe:16:3f:ef:9a:9c:b0:7b:48:
         80:82:2a:b8:52:98:a1:d9:7a:84:92:62:59:02:14:b5:87:78:
         4e:90:37:0a:50:37:41:cb:5e:db:08:7c:f9:f1:27:ab:fa:09:
         dc:2b:91:d6:8c:97:af:57:93:fb:aa:0a:8d:07:7d:c6:73:c1:
         ec:0b:3f:0b:a5:72:2d:5e:4f:b7:d9:c8:7b:cd:88:57:21:90:
         e3:28:23:07:9f:87:0f:c5:f7:51:3f:6f:ff:33:02:48:20:3a:
         68:88:7e:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----