Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36C6E36/649470B09BA211F1BB3A7E0FCF1D38B0/2BAE2E76B2D611F1AAFB07C7CE1D38B0.roa
File:                     2BAE2E76B2D611F1AAFB07C7CE1D38B0.roa (raw, json)
Hash identifier:          xVwAUnrViwTntUveNDo6qYXWSRccSSgDlFmKIFO0HSM=
Subject key identifier:   18:05:49:2D:30:0A:07:20:E1:18:F7:C8:F1:65:3E:C1:E2:7F:CA:C3
Certificate issuer:       /CN=F36C6E36AF/serialNumber=6E2422C2A7E3DF07CCE0D1FD01D146DB5678D1DB
Certificate serial:       25
Authority key identifier: 6E:24:22:C2:A7:E3:DF:07:CC:E0:D1:FD:01:D1:46:DB:56:78:D1:DB
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/biQiwqfj3wfM4NH9AdFG21Z40ds.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C6E36/649470B09BA211F1BB3A7E0FCF1D38B0/2BAE2E76B2D611F1AAFB07C7CE1D38B0.roa
Signing time:             Thu 17 Sep 2026 20:27:15 +0000
ROA not before:           Thu 17 Sep 2026 20:27:11 +0000
ROA not after:            Wed 31 Dec 2036 20:27:11 +0000
asID:                     329792
IP address blocks:        2c0f:1320:1100::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C6E36/649470B09BA211F1BB3A7E0FCF1D38B0/biQiwqfj3wfM4NH9AdFG21Z40ds.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C6E36/649470B09BA211F1BB3A7E0FCF1D38B0/biQiwqfj3wfM4NH9AdFG21Z40ds.mft
                          rsync://rpki.afrinic.net/repository/afrinic/biQiwqfj3wfM4NH9AdFG21Z40ds.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 20 Sep 2026 00:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 37 (0x25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C6E36AF, serialNumber=6E2422C2A7E3DF07CCE0D1FD01D146DB5678D1DB
        Validity
            Not Before: Sep 17 20:27:11 2026 GMT
            Not After : Dec 31 20:27:11 2036 GMT
        Subject: CN=6aac4d23-9c98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:48:d0:ca:fa:6b:02:97:cb:64:ea:b1:25:29:
                    c7:4c:1a:f0:8b:02:aa:36:e0:72:f8:d5:82:02:09:
                    df:ce:da:3e:c4:74:85:70:37:81:db:44:b0:7a:4b:
                    5d:60:79:4c:66:7b:1a:ba:02:78:df:10:eb:49:63:
                    96:7d:12:cb:05:a6:88:92:a4:39:1e:53:4f:5b:3d:
                    2c:9c:35:26:c8:82:20:0e:eb:14:6a:99:ce:b4:be:
                    29:bd:8f:a8:fd:5a:98:b1:fa:ab:29:a4:fe:ec:18:
                    80:da:2f:13:0a:ed:d9:0e:95:08:69:05:b0:37:24:
                    04:93:49:37:ff:75:2e:f8:6c:9b:d1:2e:4f:cb:78:
                    2e:e3:1e:a0:45:08:e9:dc:1d:9f:67:34:94:9a:94:
                    2e:fb:fe:9d:ce:ef:2f:10:b0:cd:50:cf:63:60:cc:
                    55:8a:a4:3f:9f:30:61:56:56:43:85:1f:c2:c2:f1:
                    47:7f:a6:b1:f3:86:a2:24:d3:50:56:cc:c5:9c:99:
                    a2:ab:ad:50:5f:f3:29:46:32:c8:82:93:d9:68:68:
                    21:b8:86:9a:82:04:eb:35:e9:b3:a8:68:fb:2d:cb:
                    43:75:67:8a:79:fd:b1:a5:90:c2:52:0f:aa:f3:ce:
                    44:f0:a4:72:61:a5:6f:76:8d:01:fe:9e:86:87:d7:
                    7b:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:05:49:2D:30:0A:07:20:E1:18:F7:C8:F1:65:3E:C1:E2:7F:CA:C3
            X509v3 Authority Key Identifier:
                keyid:6E:24:22:C2:A7:E3:DF:07:CC:E0:D1:FD:01:D1:46:DB:56:78:D1:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C6E36/649470B09BA211F1BB3A7E0FCF1D38B0/biQiwqfj3wfM4NH9AdFG21Z40ds.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/biQiwqfj3wfM4NH9AdFG21Z40ds.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C6E36/649470B09BA211F1BB3A7E0FCF1D38B0/2BAE2E76B2D611F1AAFB07C7CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:1320:1100::/40

    Signature Algorithm: sha256WithRSAEncryption
         e4:39:2f:e6:b3:65:a6:4e:79:07:b0:46:13:2f:02:31:44:39:
         b3:d8:e2:ee:60:6e:12:13:10:bd:67:a2:b4:0d:04:05:22:fe:
         7b:4c:09:6d:70:3c:d5:d6:ac:13:a9:61:25:65:04:b4:95:e4:
         83:3d:77:2b:5e:eb:3c:12:c1:f6:ca:e2:21:e0:4d:27:31:81:
         c1:29:1c:3f:b3:90:8c:4e:87:b2:62:8b:a9:5b:58:cc:91:33:
         a8:30:0b:5a:b8:15:27:23:e8:da:c1:d5:69:72:12:5a:4f:dd:
         77:bd:98:94:c6:f9:42:b5:e1:0a:8b:bf:ad:89:1e:45:97:0a:
         aa:39:c2:22:8a:1c:4f:61:bc:9c:dc:15:bd:b9:84:de:64:e4:
         5a:58:50:15:37:84:3b:51:7c:84:5d:b2:38:0f:09:8b:9d:51:
         1b:c0:e9:ac:79:0d:52:16:b7:5f:3d:05:f1:de:dd:d1:b3:e0:
         f5:69:43:81:65:18:25:aa:b1:2a:01:6a:a8:a5:aa:99:7c:02:
         29:ba:6e:ba:ef:ab:88:f1:ca:39:87:8d:29:03:8f:74:09:11:
         91:72:aa:78:68:18:e8:47:b8:37:ae:e8:f2:5e:fd:92:fc:b8:
         26:44:05:5f:a0:b6:5d:80:01:26:5e:37:d9:52:9b:d9:8d:d7:
         44:ac:ae:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----