Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/886982DEBFEA11F1AC52EA11CF1D38B0.roa
File:                     886982DEBFEA11F1AC52EA11CF1D38B0.roa (raw, json)
Hash identifier:          QKCroNGbBXNyawof0WJZeZ3iRczqoxFmoJDQ7hNzeXc=
Subject key identifier:   46:F6:E7:6F:77:9F:C0:2E:22:36:EE:A2:8E:F0:D0:BD:38:48:53:94
Certificate issuer:       /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial:       1A61
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/886982DEBFEA11F1AC52EA11CF1D38B0.roa
Signing time:             Sun 04 Oct 2026 11:55:46 +0000
ROA not before:           Sun 04 Oct 2026 11:55:42 +0000
ROA not after:            Wed 04 Oct 2028 11:55:42 +0000
asID:                     834
IP address blocks:        102.129.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 12 Oct 2026 00:08:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6753 (0x1a61)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
        Validity
            Not Before: Oct  4 11:55:42 2026 GMT
            Not After : Oct  4 11:55:42 2028 GMT
        Subject: CN=6ac23ec2-8112
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:89:cf:95:7f:0f:10:c4:54:27:6d:70:17:df:
                    e5:b0:0b:aa:72:56:e3:ba:68:7d:24:b4:70:07:2d:
                    3b:57:f6:6d:2a:e7:d9:01:93:66:f4:78:28:87:67:
                    64:9a:cd:c4:67:f0:2c:44:50:df:8a:35:16:8d:12:
                    e8:bd:d6:b5:10:da:d9:e4:f0:98:10:e6:ca:35:e1:
                    bc:cd:ea:69:33:46:51:75:c4:98:74:e5:52:ed:52:
                    ee:53:62:b1:7e:cc:aa:40:83:64:19:dc:7f:09:97:
                    58:07:de:65:ab:28:03:3c:19:bd:4f:42:39:6e:27:
                    b5:9c:3f:ce:6f:f9:48:39:8f:74:91:c1:c5:5a:a8:
                    2c:3d:27:87:10:85:a5:ad:4f:11:6d:ea:64:2c:c0:
                    d9:27:9a:63:63:26:7b:07:1b:40:3a:70:33:a7:bd:
                    c9:50:27:d6:d4:8a:0b:0a:32:cb:f2:fa:42:d2:a4:
                    8d:18:cc:71:0a:53:4c:53:45:88:d6:27:1d:cc:9a:
                    68:11:35:f4:ca:fd:0a:5c:d3:3e:2a:5f:7f:63:5b:
                    99:ac:83:d9:74:7d:8b:ce:b2:8e:9c:52:f8:49:1c:
                    07:45:4f:07:e5:67:4a:34:8b:09:4a:2c:35:57:b4:
                    88:fa:91:67:cf:ba:b4:23:b0:32:cf:cc:dc:c9:2b:
                    48:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:F6:E7:6F:77:9F:C0:2E:22:36:EE:A2:8E:F0:D0:BD:38:48:53:94
            X509v3 Authority Key Identifier:
                keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/886982DEBFEA11F1AC52EA11CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.129.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:a6:b3:48:32:02:b5:c0:2d:dd:01:2d:52:30:da:30:79:13:
         89:3d:35:16:26:80:b9:2e:a8:d2:21:63:bb:e9:1b:fe:c7:c3:
         6c:ff:e2:11:e8:34:a1:c7:8e:09:2a:60:d0:a8:f5:26:e1:ba:
         e9:d4:c2:99:e2:24:42:a9:48:41:2f:d5:a0:55:8e:8f:b7:17:
         bd:3c:63:96:06:74:7e:10:55:14:d1:26:e5:ff:df:f4:7f:d8:
         5a:23:11:2c:75:64:64:2f:46:45:07:3d:fd:57:7d:aa:69:01:
         4c:d7:13:44:64:da:eb:68:26:b1:23:45:6c:5f:78:d3:90:7c:
         35:a2:c0:bf:ea:97:f2:d7:38:b6:f4:0f:d0:c3:88:d8:92:df:
         40:f2:06:84:71:5b:e0:11:08:9b:32:0c:f3:18:19:fc:a8:fb:
         48:57:52:57:76:42:6f:20:ad:4a:fc:af:f4:5a:71:83:ce:e3:
         9c:94:d5:3f:30:8c:e1:d3:78:b0:28:43:13:0a:82:2f:4d:42:
         16:f1:da:1a:63:79:d7:13:a0:25:31:90:42:0f:5a:15:0c:38:
         28:f7:ea:d8:89:9a:27:54:53:c1:11:2a:54:0a:c1:da:7e:96:
         2a:6b:08:47:6f:72:48:4c:9a:2a:3f:9b:f8:28:a9:8d:9a:a8:
         65:dd:f6:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----