Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36D104B/6977A4BA9BD511ED9F8809CCF1222468/18CE3D288CB111F1A69A35EFCE1D38B0.roa
File:                     18CE3D288CB111F1A69A35EFCE1D38B0.roa (raw, json)
Hash identifier:          yuw9SqaSji82whOI34XNHPNvtvPwM5dKKS7KbN+aLMk=
Subject key identifier:   F0:F1:0D:90:CF:8C:66:D3:F6:09:6E:5F:3E:80:BB:65:A1:93:4E:6D
Certificate issuer:       /CN=F36D104BAF/serialNumber=F0DFFBFBE22B4E43986AF86080E8DBD26E67357B
Certificate serial:       052A
Authority key identifier: F0:DF:FB:FB:E2:2B:4E:43:98:6A:F8:60:80:E8:DB:D2:6E:67:35:7B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/8N_7--IrTkOYavhggOjb0m5nNXs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D104B/6977A4BA9BD511ED9F8809CCF1222468/18CE3D288CB111F1A69A35EFCE1D38B0.roa
Signing time:             Fri 31 Jul 2026 07:26:08 +0000
ROA not before:           Fri 31 Jul 2026 07:26:04 +0000
ROA not after:            Thu 31 Jul 2036 07:26:04 +0000
asID:                     328724
IP address blocks:        102.222.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D104B/6977A4BA9BD511ED9F8809CCF1222468/8N_7--IrTkOYavhggOjb0m5nNXs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D104B/6977A4BA9BD511ED9F8809CCF1222468/8N_7--IrTkOYavhggOjb0m5nNXs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/8N_7--IrTkOYavhggOjb0m5nNXs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 20 Sep 2026 00:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1322 (0x52a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D104BAF, serialNumber=F0DFFBFBE22B4E43986AF86080E8DBD26E67357B
        Validity
            Not Before: Jul 31 07:26:04 2026 GMT
            Not After : Jul 31 07:26:04 2036 GMT
        Subject: CN=6a6c4e10-3a7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a9:ca:e9:b0:96:59:ca:36:88:c5:95:44:a6:
                    35:00:fc:c7:83:31:98:77:84:0e:32:f1:0f:4d:48:
                    10:34:a8:3a:7d:37:16:49:fc:2a:60:fc:70:35:5b:
                    64:62:a8:0e:53:88:ef:6b:f5:3b:9c:fe:2a:7c:5c:
                    ee:23:c0:eb:a8:7b:82:ca:73:9f:47:23:3d:ff:a3:
                    ed:e3:83:aa:1a:8c:f4:10:36:f0:55:c0:24:76:74:
                    96:c9:08:ee:af:92:c2:89:2d:8e:39:87:b9:18:a0:
                    cc:6e:be:03:75:3b:b8:95:4f:cd:4a:a1:1e:dc:50:
                    c7:25:32:39:aa:59:9c:39:75:40:4a:b3:42:d5:f0:
                    9f:00:be:9e:f3:16:e0:2f:9d:90:2b:2e:b0:1f:f3:
                    68:23:43:e3:4c:28:f5:b6:3c:11:bd:c4:27:8e:33:
                    ee:72:8f:0b:fd:c7:78:74:78:70:fe:6c:de:e2:61:
                    9d:3a:eb:e3:7c:ab:d3:b1:b3:1e:10:b0:af:f7:4c:
                    a8:8f:a0:e2:8a:03:8e:fe:5b:41:bc:4b:e0:8b:d1:
                    38:2b:f6:02:d9:02:1a:7b:71:c1:cc:59:1b:94:4f:
                    38:f4:f5:62:ab:1e:0b:c7:96:c2:82:aa:3e:a0:4d:
                    f7:a5:51:b8:03:82:d5:99:d2:26:e5:c3:69:c2:52:
                    92:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:F1:0D:90:CF:8C:66:D3:F6:09:6E:5F:3E:80:BB:65:A1:93:4E:6D
            X509v3 Authority Key Identifier:
                keyid:F0:DF:FB:FB:E2:2B:4E:43:98:6A:F8:60:80:E8:DB:D2:6E:67:35:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D104B/6977A4BA9BD511ED9F8809CCF1222468/8N_7--IrTkOYavhggOjb0m5nNXs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/8N_7--IrTkOYavhggOjb0m5nNXs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D104B/6977A4BA9BD511ED9F8809CCF1222468/18CE3D288CB111F1A69A35EFCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.222.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:2c:52:27:48:b0:e5:1a:6d:64:97:37:35:88:92:c3:fc:16:
         52:75:0a:90:3e:b0:7f:f1:56:5c:65:05:be:f3:1f:aa:0f:d1:
         6d:33:65:79:23:f2:72:97:c9:a0:24:ef:c5:64:e0:8f:f8:83:
         f8:3a:3e:ca:62:1e:41:32:d0:33:b0:35:38:b5:76:97:06:0f:
         3d:c8:80:3b:4b:51:2a:6a:0c:48:b6:4d:65:1f:1e:20:79:ec:
         c9:db:e3:ae:98:2d:e2:1c:3e:3b:93:93:92:e6:cb:e3:21:6f:
         de:a6:23:cf:a3:ae:7f:27:9d:7a:43:c2:90:53:c4:51:55:6b:
         3b:13:4b:65:06:a4:c1:30:c9:76:37:c6:0b:4f:1e:0a:fc:2b:
         7a:03:c2:0b:57:03:79:7a:a0:11:63:86:ec:17:4b:28:9d:96:
         e2:48:18:e1:93:9d:02:e3:49:1b:a6:c6:76:c4:0d:eb:c3:af:
         c8:98:27:24:a3:df:0c:96:f1:2c:37:f0:89:71:dc:74:f9:8f:
         32:29:38:15:b9:7c:30:d4:16:83:09:0d:f2:20:69:b7:fe:6c:
         ab:56:f5:c5:d8:c1:b8:0a:58:f0:21:68:f8:c2:e4:ec:78:44:
         82:37:35:c4:1e:b8:e6:5b:cf:f8:33:56:63:a6:76:e4:6d:df:
         6e:b9:b0:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----