Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36E5BE1/B3C4B4C6ADFC11F1B2BC13F1CE1D38B0/58EBB7C4ADFD11F18CEAFDF4CE1D38B0.roa
File:                     58EBB7C4ADFD11F18CEAFDF4CE1D38B0.roa (raw, json)
Hash identifier:          OZKOlwRZ2oUpIBOzPLN1rbG60TNAmTSPpk5qoo1YOs0=
Subject key identifier:   38:B3:4F:15:AA:7D:28:6A:72:26:A7:D9:C9:69:44:BA:44:AE:A8:98
Certificate issuer:       /CN=F36E5BE1AF/serialNumber=4120C31B6E71C80BF799226C6D59A10B70213921
Certificate serial:       02
Authority key identifier: 41:20:C3:1B:6E:71:C8:0B:F7:99:22:6C:6D:59:A1:0B:70:21:39:21
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/QSDDG25xyAv3mSJsbVmhC3AhOSE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E5BE1/B3C4B4C6ADFC11F1B2BC13F1CE1D38B0/58EBB7C4ADFD11F18CEAFDF4CE1D38B0.roa
Signing time:             Fri 11 Sep 2026 16:25:06 +0000
ROA not before:           Fri 11 Sep 2026 16:25:02 +0000
ROA not after:            Thu 11 Sep 2036 16:25:02 +0000
asID:                     329804
IP address blocks:        102.201.110.0/24 maxlen: 24
                          2c0f:1520::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E5BE1/B3C4B4C6ADFC11F1B2BC13F1CE1D38B0/QSDDG25xyAv3mSJsbVmhC3AhOSE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E5BE1/B3C4B4C6ADFC11F1B2BC13F1CE1D38B0/QSDDG25xyAv3mSJsbVmhC3AhOSE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/QSDDG25xyAv3mSJsbVmhC3AhOSE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 20 Sep 2026 00:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E5BE1AF, serialNumber=4120C31B6E71C80BF799226C6D59A10B70213921
        Validity
            Not Before: Sep 11 16:25:02 2026 GMT
            Not After : Sep 11 16:25:02 2036 GMT
        Subject: CN=6aa42b62-0cd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:eb:2e:dc:e7:35:4e:75:cf:69:ed:cf:42:33:
                    bc:e2:f4:6c:5e:50:1b:1e:35:70:a6:62:50:1c:87:
                    d3:05:8c:de:26:6f:7c:1e:56:63:81:70:39:58:c3:
                    f5:3b:cd:89:5a:05:70:b2:fc:f0:78:dc:e8:d4:c4:
                    b6:98:d8:66:81:f7:1f:07:5c:c6:27:88:09:39:ab:
                    ce:e9:62:d7:86:a7:a3:5e:3f:03:94:17:1e:37:5c:
                    d9:84:07:68:d4:18:9c:78:91:ab:b8:1d:ac:a8:0e:
                    d3:51:f3:99:b1:c2:f1:ef:75:ac:0b:95:eb:8c:b9:
                    f0:8d:31:fa:e2:9a:cb:07:f0:ea:ab:98:f2:69:44:
                    dd:ec:f6:a4:9f:9f:5d:af:72:14:75:20:d1:f5:4d:
                    ec:93:00:fb:a7:11:d4:0e:94:5f:3e:2b:ff:95:e7:
                    47:e3:c4:07:3b:b4:88:0a:d7:9d:b2:95:99:b2:c7:
                    80:4a:f8:58:7c:0b:33:43:71:8a:b4:93:d2:e6:f9:
                    35:ad:53:67:9a:d0:3c:d5:6f:9d:68:ea:34:07:85:
                    26:c8:27:db:6d:66:5f:9e:9d:9a:8d:15:3f:c2:b3:
                    d8:57:86:29:3a:ea:54:ef:0a:45:98:44:4d:db:3b:
                    62:55:70:5c:00:5f:62:b1:89:37:dc:16:26:09:74:
                    a2:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:B3:4F:15:AA:7D:28:6A:72:26:A7:D9:C9:69:44:BA:44:AE:A8:98
            X509v3 Authority Key Identifier:
                keyid:41:20:C3:1B:6E:71:C8:0B:F7:99:22:6C:6D:59:A1:0B:70:21:39:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E5BE1/B3C4B4C6ADFC11F1B2BC13F1CE1D38B0/QSDDG25xyAv3mSJsbVmhC3AhOSE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QSDDG25xyAv3mSJsbVmhC3AhOSE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E5BE1/B3C4B4C6ADFC11F1B2BC13F1CE1D38B0/58EBB7C4ADFD11F18CEAFDF4CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.201.110.0/24
                IPv6:
                  2c0f:1520::/32

    Signature Algorithm: sha256WithRSAEncryption
         9e:6e:aa:8f:62:ca:b4:8f:2a:b2:d0:47:42:bf:27:90:8c:cc:
         14:7b:d9:f7:c7:9c:ba:06:4f:56:d0:1d:b2:a0:28:16:16:7d:
         89:f4:92:91:bc:64:26:94:63:cb:1b:b9:23:4f:55:56:b7:c6:
         ab:85:bf:88:e5:39:1a:57:58:42:7c:80:03:87:42:b5:8c:91:
         53:c5:b8:ab:56:2a:2f:3a:44:54:6f:6f:72:a8:bd:61:bb:da:
         3f:e7:28:2a:c8:38:3c:57:03:6f:df:57:77:8d:e0:19:ba:b6:
         21:9d:36:64:66:34:80:7e:c5:57:14:a2:c7:16:d2:a6:fd:e3:
         74:2f:56:e4:0e:4c:94:2d:2c:38:43:32:50:d2:6f:35:7c:cf:
         a7:61:d8:c7:04:78:22:e2:1b:95:0d:a2:e0:7a:16:c1:95:58:
         f3:90:0b:ec:ff:c0:d0:ad:f8:c4:65:26:f2:3c:fd:fb:f8:0f:
         97:c8:18:af:9a:d8:ca:48:41:02:23:0b:9f:b7:0e:99:60:3d:
         91:00:40:65:42:a7:93:2e:c1:a2:5f:29:b6:79:c1:bf:7b:05:
         37:f6:a1:57:bf:b7:34:57:93:f4:49:de:8e:49:fd:4d:80:f9:
         79:8b:6f:a7:f3:3b:75:64:75:d9:76:00:03:7e:6a:7f:30:b0:
         40:f7:7a:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----