Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36EADB9/884266F29C9711F1A3B445D7CE1D38B0/7A3F78BE9C9D11F18683E8FACE1D38B0.roa
File:                     7A3F78BE9C9D11F18683E8FACE1D38B0.roa (raw, json)
Hash identifier:          A3e8zbZAElAeLly1ySrC7Jgdi/mDLTG30Wvzb/zQ158=
Subject key identifier:   0E:4F:76:42:B1:79:CB:A2:4E:97:7B:A2:B9:75:C2:4B:3E:B4:F1:48
Certificate issuer:       /CN=F36EADB9AF/serialNumber=0B91BCBA469AF53BCF9E2E56275E9654B4B2D46E
Certificate serial:       02
Authority key identifier: 0B:91:BC:BA:46:9A:F5:3B:CF:9E:2E:56:27:5E:96:54:B4:B2:D4:6E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/C5G8ukaa9TvPni5WJ16WVLSy1G4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36EADB9/884266F29C9711F1A3B445D7CE1D38B0/7A3F78BE9C9D11F18683E8FACE1D38B0.roa
Signing time:             Thu 20 Aug 2026 13:46:00 +0000
ROA not before:           Thu 20 Aug 2026 13:45:56 +0000
ROA not after:            Tue 20 Aug 2030 13:45:56 +0000
asID:                     329704
IP address blocks:        102.203.86.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36EADB9/884266F29C9711F1A3B445D7CE1D38B0/C5G8ukaa9TvPni5WJ16WVLSy1G4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36EADB9/884266F29C9711F1A3B445D7CE1D38B0/C5G8ukaa9TvPni5WJ16WVLSy1G4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/C5G8ukaa9TvPni5WJ16WVLSy1G4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 20 Sep 2026 00:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36EADB9AF, serialNumber=0B91BCBA469AF53BCF9E2E56275E9654B4B2D46E
        Validity
            Not Before: Aug 20 13:45:56 2026 GMT
            Not After : Aug 20 13:45:56 2030 GMT
        Subject: CN=6a870518-69d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ff:59:06:45:74:7f:12:31:a0:77:9e:5d:5c:
                    67:e9:34:10:ae:2e:8d:88:08:cc:0d:75:a0:36:04:
                    b3:d0:8d:92:dd:6b:af:5e:b1:0a:f5:e8:54:6c:d0:
                    c6:97:1c:77:6d:9e:ab:3e:8e:e5:c1:74:9b:b2:fa:
                    e0:af:43:db:0e:dc:ee:26:28:50:21:bd:e0:55:7c:
                    a7:d7:7c:5b:89:87:7f:72:b6:b1:e9:8a:53:8b:18:
                    1c:17:fd:f8:6e:85:c6:8c:3f:0e:79:40:d3:af:54:
                    7a:5c:06:e7:78:60:84:d6:9b:34:d8:73:1a:8c:14:
                    e6:1e:32:76:8d:4b:4d:d8:f0:2e:5e:29:7a:3a:2c:
                    3e:de:87:cb:69:46:b3:b2:09:89:15:5c:f9:04:a3:
                    8e:96:c3:ee:32:d8:b8:59:d8:12:6c:ad:58:2e:8e:
                    26:70:e6:60:e9:88:93:6e:d3:4a:35:e9:22:ab:b3:
                    44:d1:61:56:fb:ba:84:69:ca:94:eb:fe:b3:f1:91:
                    4c:ff:4f:93:17:2a:c9:cb:d6:49:37:06:26:84:bb:
                    f2:53:ff:ab:7c:7b:0e:58:4e:39:43:5a:a3:87:b7:
                    ef:80:6c:2d:6f:f6:08:75:d1:13:2b:03:74:96:0d:
                    17:12:56:db:70:0f:cd:17:dc:41:e2:bb:76:1a:be:
                    e8:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:4F:76:42:B1:79:CB:A2:4E:97:7B:A2:B9:75:C2:4B:3E:B4:F1:48
            X509v3 Authority Key Identifier:
                keyid:0B:91:BC:BA:46:9A:F5:3B:CF:9E:2E:56:27:5E:96:54:B4:B2:D4:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36EADB9/884266F29C9711F1A3B445D7CE1D38B0/C5G8ukaa9TvPni5WJ16WVLSy1G4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/C5G8ukaa9TvPni5WJ16WVLSy1G4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EADB9/884266F29C9711F1A3B445D7CE1D38B0/7A3F78BE9C9D11F18683E8FACE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.203.86.0/23

    Signature Algorithm: sha256WithRSAEncryption
         21:47:70:27:1b:a7:ff:ef:b7:4e:a5:90:fd:81:69:cc:cf:1f:
         b4:59:15:84:5e:52:a5:a1:c5:19:30:ab:8f:2d:98:73:be:0f:
         44:cd:5f:d7:e9:5f:39:ff:13:3b:0b:38:5e:c7:84:5a:77:c5:
         40:a4:e1:49:2e:2a:63:94:59:91:a8:28:2f:85:01:59:ec:f4:
         97:f1:66:b1:52:57:18:5c:45:72:7a:81:49:d2:53:05:9f:98:
         c9:19:d7:6a:c0:e7:d9:db:1d:7a:47:e6:aa:97:7f:d0:1b:33:
         b8:bc:7e:7f:3a:62:1f:1b:b7:db:e3:bf:67:c8:5a:2c:99:aa:
         02:d6:4a:8d:9a:1b:e0:ad:0b:9a:2c:38:54:da:08:5a:a7:8c:
         36:61:26:e4:63:3c:c3:e8:57:64:f6:b6:a2:a4:59:55:5d:7c:
         2e:15:59:8e:73:20:ff:58:df:33:33:d7:73:bc:14:a3:fe:cb:
         22:c5:fa:f1:cd:2a:8d:92:6d:dc:ac:50:71:c4:53:da:f0:a2:
         de:95:89:94:c7:e1:22:ec:de:6c:6c:06:c7:d6:ba:e5:f0:7d:
         90:e3:56:b3:22:d6:c5:5c:70:43:c5:d4:9c:74:b4:75:d0:2b:
         a4:42:2c:2e:f4:43:12:a6:59:5e:23:a1:4d:45:1e:2a:6d:4a:
         fc:84:f9:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----