Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36DE22A/7FF6F8B8568411EC867AFA72D8A014CE/73DF9690925F11F1AF26CFE6CE1D38B0.roa
File:                     73DF9690925F11F1AF26CFE6CE1D38B0.roa (raw, json)
Hash identifier:          0dqcctoKzpelXf6freJXUPDNWau1fXlRGQN/gu8zkbM=
Subject key identifier:   CE:7A:AA:E1:15:57:02:0D:39:7B:9A:BE:AA:AD:36:75:9F:06:6A:F6
Certificate issuer:       /CN=F36DE22AAF/serialNumber=58F5445C8A3A3511BCECDD1889542893F488C77A
Certificate serial:       06E0
Authority key identifier: 58:F5:44:5C:8A:3A:35:11:BC:EC:DD:18:89:54:28:93:F4:88:C7:7A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/WPVEXIo6NRG87N0YiVQok_SIx3o.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36DE22A/7FF6F8B8568411EC867AFA72D8A014CE/73DF9690925F11F1AF26CFE6CE1D38B0.roa
Signing time:             Fri 07 Aug 2026 12:56:49 +0000
ROA not before:           Fri 07 Aug 2026 12:56:45 +0000
ROA not after:            Wed 11 Dec 2030 12:56:45 +0000
asID:                     36924
IP address blocks:        102.220.56.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36DE22A/7FF6F8B8568411EC867AFA72D8A014CE/WPVEXIo6NRG87N0YiVQok_SIx3o.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36DE22A/7FF6F8B8568411EC867AFA72D8A014CE/WPVEXIo6NRG87N0YiVQok_SIx3o.mft
                          rsync://rpki.afrinic.net/repository/afrinic/WPVEXIo6NRG87N0YiVQok_SIx3o.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 20 Sep 2026 00:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1760 (0x6e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36DE22AAF, serialNumber=58F5445C8A3A3511BCECDD1889542893F488C77A
        Validity
            Not Before: Aug  7 12:56:45 2026 GMT
            Not After : Dec 11 12:56:45 2030 GMT
        Subject: CN=6a75d611-7af7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:81:0f:8d:81:b8:5d:e0:a3:18:97:f2:72:76:
                    09:00:f4:13:74:28:6b:71:c0:8e:4c:3c:8a:b2:2b:
                    85:13:61:76:18:ad:cb:85:14:d2:d4:b0:ad:c2:2a:
                    c9:28:cf:5c:20:bd:d4:ee:a2:28:32:8a:85:48:3c:
                    48:a9:f2:32:25:48:74:c5:67:7e:ca:9f:8c:f0:13:
                    59:38:ea:ef:36:9b:a3:99:31:15:60:0c:d0:d9:e5:
                    1e:e9:0e:0a:c8:4b:06:a3:c0:aa:21:30:a3:9a:2b:
                    cc:3b:f3:df:17:a7:c7:92:46:97:46:d7:ff:5d:8d:
                    d1:90:ed:bf:f1:2d:2e:1b:3e:5a:05:b0:2e:4c:56:
                    ab:df:6a:e4:2a:07:df:ea:c5:e8:bf:07:9e:fb:cd:
                    e9:a3:bb:15:fb:c9:e2:fc:b7:93:9b:99:ff:0d:31:
                    b2:fc:f7:55:8b:4c:25:0b:0d:22:1f:b4:d9:77:14:
                    15:f8:60:4c:dc:04:ae:86:bb:6d:b5:13:3c:4a:05:
                    80:83:67:37:69:9e:9a:f5:27:36:d3:51:82:6b:44:
                    87:d4:6a:d5:e5:f2:8e:50:48:15:da:c5:2a:85:32:
                    3c:eb:17:8a:f1:a4:b4:51:e9:2c:98:6f:b8:fb:da:
                    c8:e1:6d:05:d9:de:64:44:4e:2b:48:fe:53:85:4a:
                    ec:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:7A:AA:E1:15:57:02:0D:39:7B:9A:BE:AA:AD:36:75:9F:06:6A:F6
            X509v3 Authority Key Identifier:
                keyid:58:F5:44:5C:8A:3A:35:11:BC:EC:DD:18:89:54:28:93:F4:88:C7:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36DE22A/7FF6F8B8568411EC867AFA72D8A014CE/WPVEXIo6NRG87N0YiVQok_SIx3o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/WPVEXIo6NRG87N0YiVQok_SIx3o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DE22A/7FF6F8B8568411EC867AFA72D8A014CE/73DF9690925F11F1AF26CFE6CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.220.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3a:4b:ed:71:12:0a:c6:c8:55:95:bd:b4:a2:06:a1:3a:82:7c:
         d6:c6:a0:fe:78:a9:6e:83:ab:88:83:fb:66:3f:51:82:c5:7d:
         55:7b:e1:dc:d5:ad:05:1b:54:bc:5f:61:8c:fb:b5:38:21:17:
         bb:09:7d:86:87:49:12:2b:9d:4d:36:ab:5f:ff:6b:17:a5:3d:
         d3:47:4e:20:98:e7:e9:2d:45:80:18:db:f0:c4:c2:3a:95:54:
         f4:9d:c6:94:95:55:42:49:e5:49:78:3a:d4:30:3e:42:2e:3f:
         1e:1d:52:42:01:01:d6:4e:8c:5d:c5:51:91:1c:25:b0:df:1d:
         2a:79:fb:20:de:0e:e4:3e:65:40:bd:3f:e2:2d:ff:9d:b2:ee:
         fa:cb:19:4f:e1:bf:85:75:ab:b9:5c:4d:00:99:5f:cd:bc:5c:
         43:40:08:79:25:81:0d:52:b9:13:f7:19:bb:15:b7:a5:45:87:
         26:bd:b2:5e:df:3a:d6:d7:89:82:cc:91:a3:9a:fe:e4:c6:da:
         c0:66:26:df:1b:06:6e:b1:9f:ee:ea:a7:8b:77:13:d0:21:5c:
         84:63:d8:68:61:74:19:37:2f:b9:12:cb:34:f3:5d:75:67:3f:
         42:5c:9d:1d:a3:f0:68:67:28:f5:9a:17:ed:69:54:4d:e9:fc:
         78:b4:82:40
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBuAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
REUyMkFBRjExMC8GA1UEBRMoNThGNTQ0NUM4QTNBMzUxMUJDRUNERDE4ODk1NDI4
OTNGNDg4Qzc3QTAeFw0yNjA4MDcxMjU2NDVaFw0zMDEyMTExMjU2NDVaMBgxFjAU
BgNVBAMTDTZhNzVkNjExLTdhZjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDhgQ+Ngbhd4KMYl/JydgkA9BN0KGtxwI5MPIqyK4UTYXYYrcuFFNLUsK3C
Kskoz1wgvdTuoigyioVIPEip8jIlSHTFZ37Kn4zwE1k46u82m6OZMRVgDNDZ5R7p
DgrISwajwKohMKOaK8w7898Xp8eSRpdG1/9djdGQ7b/xLS4bPloFsC5MVqvfauQq
B9/qxei/B577zemjuxX7yeL8t5Obmf8NMbL891WLTCULDSIftNl3FBX4YEzcBK6G
u221EzxKBYCDZzdpnpr1JzbTUYJrRIfUatXl8o5QSBXaxSqFMjzrF4rxpLRR6SyY
b7j72sjhbQXZ3mRETitI/lOFSuxRAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUznqq
4RVXAg05e5q+qq02dZ8GavYwHwYDVR0jBBgwFoAUWPVEXIo6NRG87N0YiVQok/SI
x3owDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkRFMjJBLzdGRjZGOEI4NTY4NDExRUM4NjdBRkE3MkQ4QTAxNENFL1dQVkVY
SW82TlJHODdOMFlpVlFva19TSXgzby5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1dQVkVYSW82TlJHODdOMFlpVlFva19TSXgzby5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkRFMjJBLzdGRjZGOEI4NTY4NDExRUM4NjdBRkE3MkQ4
QTAxNENFLzczREY5NjkwOTI1RjExRjFBRjI2Q0ZFNkNFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJm3DgwDQYJKoZIhvcNAQEL
BQADggEBADpL7XESCsbIVZW9tKIGoTqCfNbGoP54qW6Dq4iD+2Y/UYLFfVV74dzV
rQUbVLxfYYz7tTghF7sJfYaHSRIrnU02q1//axelPdNHTiCY5+ktRYAY2/DEwjqV
VPSdxpSVVUJJ5Ul4OtQwPkIuPx4dUkIBAdZOjF3FUZEcJbDfHSp5+yDeDuQ+ZUC9
P+It/52y7vrLGU/hv4V1q7lcTQCZX828XENACHklgQ1SuRP3GbsVt6VFhya9sl7f
OtbXiYLMkaOa/uTG2sBmJt8bBm6xn+7qp4t3E9AhXIRj2GhhdBk3L7kSyzTzXXVn
P0JcnR2j8GhnKPWaF+1pVE3p/Hi0gkA=
-----END CERTIFICATE-----