Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36ECAA2/53AE1EDCA60911ED9422C1B9F1222468/3E89535C919511F19B87181ACF1D38B0.roa
File:                     3E89535C919511F19B87181ACF1D38B0.roa (raw, json)
Hash identifier:          MgyMP7FWdkZNfngn7DBFq/fV8FrY6m8TI6YhhayywA4=
Subject key identifier:   F9:3A:40:2B:91:8E:B4:EC:22:57:D5:96:22:AD:B7:66:84:2D:2E:8A
Certificate issuer:       /CN=F36ECAA2AF/serialNumber=833D4A24E39CDC942CBC5782541B81D4DD96AEA8
Certificate serial:       053D
Authority key identifier: 83:3D:4A:24:E3:9C:DC:94:2C:BC:57:82:54:1B:81:D4:DD:96:AE:A8
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/gz1KJOOc3JQsvFeCVBuB1N2Wrqg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/53AE1EDCA60911ED9422C1B9F1222468/3E89535C919511F19B87181ACF1D38B0.roa
Signing time:             Thu 06 Aug 2026 12:49:21 +0000
ROA not before:           Thu 06 Aug 2026 12:49:17 +0000
ROA not after:            Wed 06 Aug 2031 12:49:17 +0000
asID:                     37148
IP address blocks:        102.203.104.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/53AE1EDCA60911ED9422C1B9F1222468/gz1KJOOc3JQsvFeCVBuB1N2Wrqg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/53AE1EDCA60911ED9422C1B9F1222468/gz1KJOOc3JQsvFeCVBuB1N2Wrqg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/gz1KJOOc3JQsvFeCVBuB1N2Wrqg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 12 Sep 2026 03:12:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1341 (0x53d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36ECAA2AF, serialNumber=833D4A24E39CDC942CBC5782541B81D4DD96AEA8
        Validity
            Not Before: Aug  6 12:49:17 2026 GMT
            Not After : Aug  6 12:49:17 2031 GMT
        Subject: CN=6a7482d1-2f35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:96:b2:20:d9:e6:47:88:9b:82:92:0f:61:35:
                    50:00:92:04:28:50:e9:21:c6:6a:b2:e8:28:2e:fe:
                    3c:9c:a0:bf:9d:db:4e:a9:b3:a9:5a:a3:93:95:42:
                    b9:e2:55:6f:39:28:92:ff:e8:18:f0:c3:e7:f0:10:
                    73:7a:09:4d:87:b8:a7:a4:a1:1c:9a:50:d7:34:dc:
                    02:0c:5d:a3:48:0e:72:b5:ba:26:1f:a5:4e:60:94:
                    d1:84:1f:e3:c6:e2:6d:27:7c:22:8a:8c:34:d9:74:
                    fb:6d:8f:db:d2:42:ae:25:3b:b8:76:eb:89:9b:02:
                    ff:8f:71:42:a9:95:fb:af:d2:b6:45:ad:4b:a9:b2:
                    a3:57:04:78:bb:8e:13:2d:32:d9:97:a0:ac:f5:a8:
                    29:a8:39:6d:ed:de:95:91:86:40:85:a0:89:f5:fd:
                    3f:8d:0b:61:78:53:87:a9:ba:cf:db:0a:b5:70:05:
                    bc:1e:4e:84:4b:62:4d:b0:07:e6:37:b8:71:ea:cf:
                    da:b2:41:4c:70:2f:65:9d:73:48:44:5e:6d:4c:57:
                    29:af:07:53:5d:a4:c7:49:78:c0:77:8a:15:e5:78:
                    16:7e:74:e6:1c:86:45:04:25:4f:18:11:49:6f:2b:
                    37:0d:3c:f6:74:a8:e3:a3:d9:0f:de:d7:5d:de:34:
                    41:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:3A:40:2B:91:8E:B4:EC:22:57:D5:96:22:AD:B7:66:84:2D:2E:8A
            X509v3 Authority Key Identifier:
                keyid:83:3D:4A:24:E3:9C:DC:94:2C:BC:57:82:54:1B:81:D4:DD:96:AE:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/53AE1EDCA60911ED9422C1B9F1222468/gz1KJOOc3JQsvFeCVBuB1N2Wrqg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gz1KJOOc3JQsvFeCVBuB1N2Wrqg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/53AE1EDCA60911ED9422C1B9F1222468/3E89535C919511F19B87181ACF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.203.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         35:69:1e:b8:ac:51:1b:95:ec:4a:37:1a:1d:9f:ca:5d:7f:3b:
         1a:08:ae:a8:a9:e0:2c:ec:28:d6:06:af:e7:c7:75:e4:6c:b1:
         e7:73:d6:0c:5e:23:cc:b6:07:f3:29:ee:e9:af:1d:75:58:85:
         ce:80:6c:2d:ec:9e:8c:ec:35:21:9d:b2:21:d0:62:c3:63:12:
         be:04:94:23:f8:2b:26:26:27:30:6f:15:77:00:ad:75:ae:27:
         f9:05:e1:fd:e5:98:b5:79:f4:ff:dc:5a:a1:b9:b8:b5:7f:5d:
         6c:39:06:51:ba:a9:d2:43:f3:1e:70:44:51:fd:e2:cb:59:ce:
         86:e1:2f:ef:42:ec:88:ca:f6:91:4a:4a:e1:0f:9e:f6:c0:d2:
         6e:e2:f4:0e:34:7d:6b:d6:a2:69:a3:e3:ed:51:79:0a:e3:fc:
         7b:81:cf:73:4b:01:6b:ae:49:53:b4:4c:bf:07:51:65:43:07:
         70:6d:c9:fc:94:13:a7:3a:d2:0c:09:93:50:bd:22:7b:23:21:
         01:49:da:00:71:8f:54:63:4e:29:4b:52:53:a8:6a:3f:69:2c:
         cb:84:3a:2b:33:59:9f:f2:99:ab:cc:c9:eb:e6:18:fc:6c:31:
         ff:6f:52:ef:56:c7:ba:fd:fb:67:4e:4b:c7:33:1e:a4:81:ad:
         e9:3a:6b:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----