Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/DA0F60FAC70F11F19B3350C8CE1D38B0.roa
File:                     DA0F60FAC70F11F19B3350C8CE1D38B0.roa (raw, json)
Hash identifier:          A09P7F6qWnMx6WxwwSzAg6C9gMrZ7EdZmSjbm60wzro=
Subject key identifier:   32:03:20:02:E8:73:24:C0:B4:13:8E:5A:C1:3B:B1:01:DA:51:54:8B
Certificate issuer:       /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial:       1A8D
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/DA0F60FAC70F11F19B3350C8CE1D38B0.roa
Signing time:             Tue 13 Oct 2026 14:10:32 +0000
ROA not before:           Tue 13 Oct 2026 14:10:28 +0000
ROA not after:            Fri 13 Oct 2028 14:10:28 +0000
asID:                     210531
IP address blocks:        102.165.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 17 Oct 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6797 (0x1a8d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
        Validity
            Not Before: Oct 13 14:10:28 2026 GMT
            Not After : Oct 13 14:10:28 2028 GMT
        Subject: CN=6ace3bd8-ae7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:c3:30:df:27:57:9e:d5:d1:f1:bb:0f:c0:54:
                    b3:22:bd:88:6a:60:ec:fc:24:7e:6f:90:aa:2f:f2:
                    b2:94:9d:c6:24:a4:f5:9d:54:2c:7b:be:7d:d1:9b:
                    8a:c7:0d:7d:73:7e:52:c7:2b:a7:a6:1e:93:58:f2:
                    a8:1a:2e:ae:d8:1a:b4:ed:56:b8:c1:1c:01:1d:80:
                    9e:3e:e7:8b:ba:fd:e7:ca:f5:a6:a6:56:03:15:40:
                    f1:cd:50:87:08:2c:00:6e:b4:58:f6:82:d8:e7:d2:
                    58:74:2d:98:14:31:b4:eb:5a:36:83:20:b3:ba:09:
                    15:e6:e0:e5:48:7f:96:d6:8e:a5:48:03:71:b7:85:
                    28:6d:fa:78:1f:a1:dd:21:c4:ab:ae:81:51:b4:0c:
                    f1:17:64:5e:01:ca:9a:99:8f:8a:17:3d:27:1a:70:
                    48:0c:5c:b3:3b:f1:68:6b:db:ec:ea:0b:12:f0:18:
                    40:ac:b0:69:0d:c5:8b:83:6d:71:c1:8f:47:0f:8b:
                    23:85:ba:17:a3:42:54:4e:67:cf:6e:5f:ee:e6:c6:
                    79:ab:90:d3:32:e0:b6:58:cf:5e:58:3c:15:23:a5:
                    93:d7:ca:4f:35:68:1e:ef:78:3c:d3:44:b1:31:dd:
                    14:55:2e:82:71:40:e6:2d:36:9c:44:bf:18:5f:53:
                    8b:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:03:20:02:E8:73:24:C0:B4:13:8E:5A:C1:3B:B1:01:DA:51:54:8B
            X509v3 Authority Key Identifier:
                keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/DA0F60FAC70F11F19B3350C8CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.165.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:3f:31:ee:2a:69:8d:97:93:78:51:da:b4:f3:ea:4b:4a:22:
         c2:a5:ee:3c:83:42:d1:6e:09:3e:12:11:0e:d4:2b:ac:25:fc:
         f0:87:c4:07:39:12:ef:8f:fd:cc:3d:41:56:ec:50:3e:da:59:
         48:8e:d8:a1:30:5e:a3:44:dd:72:07:c3:f6:11:f9:a1:3c:26:
         df:c3:b2:e0:17:12:37:8f:b9:71:5a:09:41:ab:a8:d1:14:95:
         56:00:80:e3:8c:0f:77:50:08:c4:17:9f:c9:50:92:ae:72:51:
         ca:b4:17:23:81:d0:68:54:38:e9:b7:1e:4e:52:70:71:b3:0c:
         4d:0b:b6:bb:e4:61:38:6d:ad:0e:6a:02:60:27:d0:ac:9f:a5:
         aa:f7:2c:78:e4:06:b3:07:5d:da:18:ee:ad:76:8d:75:5a:f4:
         33:fd:c6:ac:66:11:64:47:9f:68:6a:3d:4f:de:d4:53:46:4c:
         c3:e0:e5:09:f7:63:7a:3e:92:bf:93:21:76:db:83:81:09:64:
         b1:5d:f8:b5:22:4f:17:fb:3b:49:b6:f9:e2:45:75:b4:7e:b6:
         8c:31:b2:89:7d:9b:26:f3:8e:4c:5d:5b:44:e7:90:3b:ce:10:
         9d:11:ae:ba:7c:73:f7:8e:42:d7:51:89:81:59:bd:f3:27:67:
         63:41:9a:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----