Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36C780E/2056FC3A9C5E11F1ACB13503CF1D38B0/9CB7FB109CE211F188DCBF13CF1D38B0.roa
File:                     9CB7FB109CE211F188DCBF13CF1D38B0.roa (raw, json)
Hash identifier:          oPw0LpF0YGVLPjCnH6C7HBRTR4u/g1s0kePOXy7B2kI=
Subject key identifier:   8B:FF:9F:4D:15:5E:A3:8E:F6:B6:66:20:E6:6A:4C:90:BC:B6:87:92
Certificate issuer:       /CN=F36C780EAF/serialNumber=5F867C01D4F0C31F26EA1AEEE1A16ECEABD75A94
Certificate serial:       05
Authority key identifier: 5F:86:7C:01:D4:F0:C3:1F:26:EA:1A:EE:E1:A1:6E:CE:AB:D7:5A:94
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/X4Z8AdTwwx8m6hru4aFuzqvXWpQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C780E/2056FC3A9C5E11F1ACB13503CF1D38B0/9CB7FB109CE211F188DCBF13CF1D38B0.roa
Signing time:             Thu 20 Aug 2026 22:00:53 +0000
ROA not before:           Thu 20 Aug 2026 22:00:49 +0000
ROA not after:            Wed 20 Aug 2031 22:00:49 +0000
asID:                     327760
IP address blocks:        41.79.32.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C780E/2056FC3A9C5E11F1ACB13503CF1D38B0/X4Z8AdTwwx8m6hru4aFuzqvXWpQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C780E/2056FC3A9C5E11F1ACB13503CF1D38B0/X4Z8AdTwwx8m6hru4aFuzqvXWpQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/X4Z8AdTwwx8m6hru4aFuzqvXWpQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 20 Sep 2026 00:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C780EAF, serialNumber=5F867C01D4F0C31F26EA1AEEE1A16ECEABD75A94
        Validity
            Not Before: Aug 20 22:00:49 2026 GMT
            Not After : Aug 20 22:00:49 2031 GMT
        Subject: CN=6a877915-472f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c8:c1:30:f2:4a:2b:20:46:fd:19:2f:fd:da:
                    fb:b6:51:c6:bc:69:35:96:e0:d1:b9:71:b4:89:e6:
                    1b:ca:78:3e:85:45:25:6d:28:5a:a3:e4:c4:db:e8:
                    49:02:71:fe:ca:fe:d4:4f:63:ec:37:49:3a:64:1e:
                    f7:19:0d:6e:f6:70:bb:ff:0b:a7:0f:20:69:18:99:
                    c3:fa:40:e2:3f:da:ec:c6:79:69:4d:a5:ff:4a:6f:
                    5c:87:f7:84:61:60:85:03:6a:cc:46:9c:c2:02:6c:
                    78:d6:df:e2:bf:fa:96:0c:bc:be:0c:c5:50:fe:93:
                    88:4f:f9:75:cd:8f:6c:11:5f:34:a3:df:3e:08:c0:
                    a1:5c:8a:16:63:35:6f:01:f1:81:e1:fb:f3:95:51:
                    83:00:91:0c:44:1f:4a:2d:70:ac:10:c8:d2:ce:a7:
                    f1:5c:63:f0:2d:99:e0:16:14:ac:57:8d:23:d3:5e:
                    98:5d:df:bb:21:14:75:f8:05:44:bb:9a:06:c1:2b:
                    5e:d8:94:f9:b0:58:f3:6a:eb:b6:b1:09:b5:ef:c9:
                    98:76:39:41:58:c7:e4:ff:28:32:58:e4:a7:7e:e5:
                    4e:f6:2f:67:cf:28:bc:c2:86:09:fc:76:1c:ce:ee:
                    4e:96:eb:cc:24:39:8e:42:c7:63:02:67:f6:30:de:
                    32:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:FF:9F:4D:15:5E:A3:8E:F6:B6:66:20:E6:6A:4C:90:BC:B6:87:92
            X509v3 Authority Key Identifier:
                keyid:5F:86:7C:01:D4:F0:C3:1F:26:EA:1A:EE:E1:A1:6E:CE:AB:D7:5A:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C780E/2056FC3A9C5E11F1ACB13503CF1D38B0/X4Z8AdTwwx8m6hru4aFuzqvXWpQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/X4Z8AdTwwx8m6hru4aFuzqvXWpQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C780E/2056FC3A9C5E11F1ACB13503CF1D38B0/9CB7FB109CE211F188DCBF13CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.79.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         17:c7:f1:9a:fb:9e:9a:5e:64:83:82:17:4a:d1:7b:6c:c8:68:
         31:58:78:b5:ed:9e:1d:32:53:96:39:e2:d0:fd:12:e3:aa:d5:
         21:e2:10:ce:81:72:48:9c:7a:79:bd:06:44:c2:1d:82:10:6f:
         3f:dd:61:cd:46:59:af:89:0d:9c:3c:bb:07:9a:93:d5:b4:23:
         5a:b4:d3:a8:8f:e9:ff:fa:20:ee:a1:5f:7d:e0:af:59:9c:4a:
         fc:ef:46:e2:e3:72:a2:9e:01:57:55:4d:b7:01:3d:2f:f3:ce:
         ca:2d:47:2a:6b:f2:db:7a:80:a3:19:c5:3c:a5:c8:28:87:94:
         b6:80:7e:55:5e:8f:69:3a:05:ab:da:ed:a6:99:df:27:76:2b:
         92:8b:49:e6:a0:26:d5:85:25:23:d1:c1:a3:bc:8c:c9:2f:56:
         d2:8a:01:51:87:bf:c7:5e:74:6b:f0:7c:6d:40:86:01:ef:23:
         c6:5d:4a:92:d3:97:e0:b0:6f:7e:51:a7:e5:4f:1b:97:65:05:
         5d:03:28:5c:dd:6d:81:5e:4d:42:10:77:2b:72:24:37:3d:67:
         73:d3:8f:d6:b6:c0:5c:45:e2:80:ae:07:56:2c:f0:10:1c:ab:
         8f:ee:4e:0e:64:bf:db:41:6f:31:48:e2:7a:a1:cc:14:59:8d:
         e3:18:5c:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----