Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36EBDD7/59907460BE1D11EB9A348B42F8AEA228/615EB3088C1E11F18EB146E6CE1D38B0.roa
File:                     615EB3088C1E11F18EB146E6CE1D38B0.roa (raw, json)
Hash identifier:          cFc4VbWS8pPLVxvgeV+rsX9un5t5+xDWd6XIIl7MFNc=
Subject key identifier:   F4:C1:E9:31:E4:36:89:98:41:A6:05:13:BA:DD:65:38:81:00:56:E0
Certificate issuer:       /CN=F36EBDD7AF/serialNumber=671762DF2F4B65E8350EF43DFE6E347765751B67
Certificate serial:       07AD
Authority key identifier: 67:17:62:DF:2F:4B:65:E8:35:0E:F4:3D:FE:6E:34:77:65:75:1B:67
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Zxdi3y9LZeg1DvQ9_m40d2V1G2c.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36EBDD7/59907460BE1D11EB9A348B42F8AEA228/615EB3088C1E11F18EB146E6CE1D38B0.roa
Signing time:             Thu 30 Jul 2026 13:55:54 +0000
ROA not before:           Thu 30 Jul 2026 13:55:50 +0000
ROA not after:            Wed 30 Jul 2036 13:55:50 +0000
asID:                     37349
IP address blocks:        2c0f:fda8::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36EBDD7/59907460BE1D11EB9A348B42F8AEA228/Zxdi3y9LZeg1DvQ9_m40d2V1G2c.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36EBDD7/59907460BE1D11EB9A348B42F8AEA228/Zxdi3y9LZeg1DvQ9_m40d2V1G2c.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Zxdi3y9LZeg1DvQ9_m40d2V1G2c.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 12 Sep 2026 02:08:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1965 (0x7ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36EBDD7AF, serialNumber=671762DF2F4B65E8350EF43DFE6E347765751B67
        Validity
            Not Before: Jul 30 13:55:50 2026 GMT
            Not After : Jul 30 13:55:50 2036 GMT
        Subject: CN=6a6b57ea-273a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:87:05:dc:b7:46:76:48:11:a4:79:02:58:9e:
                    1a:72:6a:78:0c:ff:bc:d5:5e:14:bc:ec:71:02:74:
                    86:60:16:cf:97:fd:1f:9f:4f:c3:06:2c:48:d8:89:
                    cd:33:2c:27:a6:ec:ec:ce:c9:fc:20:0b:e8:0b:e0:
                    df:24:86:42:b3:ff:60:9e:92:dc:58:15:6a:1e:53:
                    92:aa:f8:63:dd:5a:9c:0f:1b:c5:8f:00:23:c8:01:
                    c9:78:72:56:24:19:d5:de:cf:5b:6b:3d:29:74:8b:
                    cd:ac:a4:49:03:de:51:24:34:bf:ed:4e:cc:44:4c:
                    e3:5f:4a:91:78:30:23:0a:c3:0c:39:5e:45:65:0b:
                    5b:61:49:48:d5:38:14:7f:40:16:07:fb:55:79:8f:
                    7c:b7:9e:e2:15:b1:9d:8d:b5:90:e5:06:26:21:63:
                    7e:47:a7:f8:c2:20:54:11:bc:c5:22:23:fb:78:01:
                    7d:e1:41:d7:28:77:86:6e:59:cf:5d:aa:71:6c:d0:
                    df:7b:d1:c0:6c:2c:74:a1:51:1b:c9:ce:43:a3:41:
                    05:bd:4c:de:26:2b:36:e3:32:25:94:79:b9:c5:47:
                    29:21:d6:5c:d2:21:80:4a:6a:a8:de:21:5b:bd:3a:
                    f1:bf:6c:6b:66:b6:a1:56:79:50:b7:b4:2a:1c:1c:
                    38:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:C1:E9:31:E4:36:89:98:41:A6:05:13:BA:DD:65:38:81:00:56:E0
            X509v3 Authority Key Identifier:
                keyid:67:17:62:DF:2F:4B:65:E8:35:0E:F4:3D:FE:6E:34:77:65:75:1B:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36EBDD7/59907460BE1D11EB9A348B42F8AEA228/Zxdi3y9LZeg1DvQ9_m40d2V1G2c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Zxdi3y9LZeg1DvQ9_m40d2V1G2c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EBDD7/59907460BE1D11EB9A348B42F8AEA228/615EB3088C1E11F18EB146E6CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:fda8::/32

    Signature Algorithm: sha256WithRSAEncryption
         2c:71:7c:bb:71:89:0c:28:59:b4:2d:f6:58:38:2a:61:d7:85:
         71:ed:e7:e7:69:e9:95:cb:cb:64:61:e6:85:57:a8:0e:82:ba:
         08:5c:60:43:4a:a9:63:41:73:9f:fc:32:95:38:92:a5:9d:95:
         0a:df:9c:4e:02:0e:f5:de:51:b8:0f:64:ea:cf:5f:ca:7a:09:
         9d:6f:63:a9:e0:94:69:ff:d6:f2:9f:d4:8b:15:01:b2:d1:54:
         b9:2b:77:70:aa:56:ad:37:54:97:b0:db:7c:b2:2d:9c:34:a6:
         b0:e4:fc:2f:af:86:64:e5:6f:ab:d6:f0:7b:31:11:80:ab:a1:
         08:c1:c4:aa:20:f9:af:68:43:7e:cf:14:5c:fe:f5:1c:a3:99:
         32:cf:5e:d2:58:38:4b:d2:ab:a8:93:23:28:c6:7c:3b:d1:5d:
         3a:96:47:49:ce:34:3a:9f:74:64:90:ee:a4:81:23:51:64:61:
         9e:cc:ca:6a:e4:b1:6c:8c:0d:7f:29:00:a9:7a:fe:15:09:1a:
         9c:6a:e9:4a:1c:89:5c:ee:50:86:19:a7:59:cc:80:c1:e1:79:
         9d:33:0b:4c:25:c6:af:cc:74:97:e3:d6:c5:78:3f:c9:41:5a:
         7c:60:19:81:ff:96:61:fc:f6:01:e1:c1:b3:c4:23:dc:ad:63:
         d5:63:33:b3
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB60wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RUJERDdBRjExMC8GA1UEBRMoNjcxNzYyREYyRjRCNjVFODM1MEVGNDNERkU2RTM0
Nzc2NTc1MUI2NzAeFw0yNjA3MzAxMzU1NTBaFw0zNjA3MzAxMzU1NTBaMBgxFjAU
BgNVBAMTDTZhNmI1N2VhLTI3M2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC7hwXct0Z2SBGkeQJYnhpyangM/7zVXhS87HECdIZgFs+X/R+fT8MGLEjY
ic0zLCem7OzOyfwgC+gL4N8khkKz/2CektxYFWoeU5Kq+GPdWpwPG8WPACPIAcl4
clYkGdXez1trPSl0i82spEkD3lEkNL/tTsxETONfSpF4MCMKwww5XkVlC1thSUjV
OBR/QBYH+1V5j3y3nuIVsZ2NtZDlBiYhY35Hp/jCIFQRvMUiI/t4AX3hQdcod4Zu
Wc9dqnFs0N970cBsLHShURvJzkOjQQW9TN4mKzbjMiWUebnFRykh1lzSIYBKaqje
IVu9OvG/bGtmtqFWeVC3tCocHDgbAgMBAAGjggKmMIICojAdBgNVHQ4EFgQU9MHp
MeQ2iZhBpgUTut1lOIEAVuAwHwYDVR0jBBgwFoAUZxdi3y9LZeg1DvQ9/m40d2V1
G2cwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkVCREQ3LzU5OTA3NDYwQkUxRDExRUI5QTM0OEI0MkY4QUVBMjI4L1p4ZGkz
eTlMWmVnMUR2UTlfbTQwZDJWMUcyYy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1p4ZGkzeTlMWmVnMUR2UTlfbTQwZDJWMUcyYy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkVCREQ3LzU5OTA3NDYwQkUxRDExRUI5QTM0OEI0MkY4
QUVBMjI4LzYxNUVCMzA4OEMxRTExRjE4RUIxNDZFNkNFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAsD/2oMA0GCSqGSIb3DQEB
CwUAA4IBAQAscXy7cYkMKFm0LfZYOCph14Vx7efnaemVy8tkYeaFV6gOgroIXGBD
SqljQXOf/DKVOJKlnZUK35xOAg713lG4D2Tqz1/Kegmdb2Op4JRp/9byn9SLFQGy
0VS5K3dwqlatN1SXsNt8si2cNKaw5Pwvr4Zk5W+r1vB7MRGAq6EIwcSqIPmvaEN+
zxRc/vUco5kyz17SWDhL0quokyMoxnw70V06lkdJzjQ6n3RkkO6kgSNRZGGezMpq
5LFsjA1/KQCpev4VCRqcaulKHIlc7lCGGadZzIDB4XmdMwtMJcavzHSX49bFeD/J
QVp8YBmB/5Zh/PYB4cGzxCPcrWPVYzOz
-----END CERTIFICATE-----