Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36EBDD7/59907460BE1D11EB9A348B42F8AEA228/DDC146828C1D11F1B05B37E2CE1D38B0.roa
File:                     DDC146828C1D11F1B05B37E2CE1D38B0.roa (raw, json)
Hash identifier:          HKzZfAl6PRyLBevY4HJw4aOs9rhun1HPEqVPgy3QrCk=
Subject key identifier:   BF:AF:54:40:55:BA:2A:B4:27:8C:1E:03:A8:4B:64:B1:7B:4D:BB:8F
Certificate issuer:       /CN=F36EBDD7AF/serialNumber=671762DF2F4B65E8350EF43DFE6E347765751B67
Certificate serial:       07AB
Authority key identifier: 67:17:62:DF:2F:4B:65:E8:35:0E:F4:3D:FE:6E:34:77:65:75:1B:67
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Zxdi3y9LZeg1DvQ9_m40d2V1G2c.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36EBDD7/59907460BE1D11EB9A348B42F8AEA228/DDC146828C1D11F1B05B37E2CE1D38B0.roa
Signing time:             Thu 30 Jul 2026 13:52:13 +0000
ROA not before:           Thu 30 Jul 2026 13:52:09 +0000
ROA not after:            Wed 30 Jul 2036 13:52:09 +0000
asID:                     37349
IP address blocks:        102.212.108.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36EBDD7/59907460BE1D11EB9A348B42F8AEA228/Zxdi3y9LZeg1DvQ9_m40d2V1G2c.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36EBDD7/59907460BE1D11EB9A348B42F8AEA228/Zxdi3y9LZeg1DvQ9_m40d2V1G2c.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Zxdi3y9LZeg1DvQ9_m40d2V1G2c.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 12 Sep 2026 02:08:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1963 (0x7ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36EBDD7AF, serialNumber=671762DF2F4B65E8350EF43DFE6E347765751B67
        Validity
            Not Before: Jul 30 13:52:09 2026 GMT
            Not After : Jul 30 13:52:09 2036 GMT
        Subject: CN=6a6b570d-8c6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:2e:41:34:87:2a:0e:c8:56:73:f8:39:a4:04:
                    eb:43:03:14:0c:d0:d8:c7:23:ae:eb:e7:92:51:ff:
                    ab:4a:e9:8b:43:7d:f4:af:98:72:b6:1f:25:cd:a8:
                    c9:3d:32:55:0f:ad:bb:1f:54:84:b3:00:fa:da:1d:
                    c8:fa:2e:35:60:98:6c:9a:5b:ce:51:d0:9e:c4:f7:
                    83:ac:84:3e:06:9a:77:2c:fc:db:ae:e9:7a:f5:38:
                    5b:30:2c:20:74:dd:07:93:7d:15:58:d1:0d:8b:25:
                    bc:64:b5:e9:8c:42:e0:8d:dc:4b:09:67:ab:ac:8e:
                    3e:20:8b:27:bc:58:6c:0d:2d:51:60:cd:ee:15:0d:
                    18:4a:2f:80:4a:8c:f9:fe:10:a3:fc:20:4d:bb:35:
                    77:7b:83:11:9e:5f:93:21:df:45:38:e9:74:58:75:
                    6e:77:f2:89:f3:98:f8:44:89:ba:1b:4f:dc:35:b0:
                    4e:32:6e:8a:78:ad:c2:4c:8e:06:64:76:b4:4b:d6:
                    9e:a7:92:73:5d:be:5b:49:3a:68:70:29:5e:59:42:
                    a4:1b:91:7c:5c:e2:5d:67:12:e3:2a:b1:ca:17:56:
                    83:82:20:de:ea:aa:8b:1e:1d:e7:5a:c6:a3:16:99:
                    48:10:29:86:4e:35:36:b5:4d:73:60:cc:5a:b4:77:
                    04:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:AF:54:40:55:BA:2A:B4:27:8C:1E:03:A8:4B:64:B1:7B:4D:BB:8F
            X509v3 Authority Key Identifier:
                keyid:67:17:62:DF:2F:4B:65:E8:35:0E:F4:3D:FE:6E:34:77:65:75:1B:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36EBDD7/59907460BE1D11EB9A348B42F8AEA228/Zxdi3y9LZeg1DvQ9_m40d2V1G2c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Zxdi3y9LZeg1DvQ9_m40d2V1G2c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EBDD7/59907460BE1D11EB9A348B42F8AEA228/DDC146828C1D11F1B05B37E2CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.212.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0e:b9:35:db:1d:2b:c3:31:bb:12:e3:84:54:32:4c:9b:15:9e:
         d3:9e:d5:18:4f:ba:85:43:68:d5:bb:b4:63:65:85:83:0a:36:
         c1:cd:99:3d:0e:6b:a8:83:25:0c:05:cb:74:e5:00:aa:b8:05:
         4e:ab:69:ab:b8:3a:91:9b:1c:cb:f6:1d:09:b7:02:e3:04:ce:
         78:01:fc:0b:6e:af:91:77:ca:e8:41:82:d1:00:55:0f:1a:0d:
         84:b5:62:be:c8:58:4d:fc:a4:46:9c:01:d8:43:29:7e:3b:cc:
         55:90:44:1b:91:56:22:fd:b2:69:a4:a0:b5:d2:08:12:16:75:
         ee:78:20:d4:a7:3b:b7:1d:a3:33:fe:ea:ae:12:06:8e:46:9c:
         69:45:95:b6:43:04:3e:cf:3c:de:b2:5a:1b:ee:3d:b5:c8:f5:
         d1:1b:b8:3b:91:c4:ca:80:51:62:1b:d3:96:94:f6:78:bb:2e:
         53:03:37:88:48:75:fc:ca:0b:0c:0f:31:c2:01:b3:4c:5e:33:
         df:c8:8a:27:80:ab:2c:d1:99:5d:10:e4:ce:be:02:f4:9c:97:
         77:59:9b:4e:dd:10:df:cd:d2:83:ed:31:57:6b:05:41:84:e9:
         50:2d:b0:f2:ff:e4:f4:c5:87:95:18:e3:85:f1:60:e2:7d:dc:
         57:d6:0c:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----