Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EF186/095B7A2A548011EE8C8F332D4AD9E6FC/85D750DE5BC611F089B5C0CEDAE4EC9C.roa
File:                     85D750DE5BC611F089B5C0CEDAE4EC9C.roa (raw, json)
Hash identifier:          wUL5vLxM8aj+NCCF/6WHXknquX7m8EDjptDZl3b+AXA=
Subject key identifier:   A0:04:89:56:DE:01:76:8B:D5:3E:BD:0F:80:B5:07:92:9F:A7:DE:26
Certificate issuer:       /CN=F36EF186AF/serialNumber=F377D4D428F9465B15449C6AFD4532C422446964
Certificate serial:       02C3
Authority key identifier: F3:77:D4:D4:28:F9:46:5B:15:44:9C:6A:FD:45:32:C4:22:44:69:64
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/83fU1Cj5RlsVRJxq_UUyxCJEaWQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36EF186/095B7A2A548011EE8C8F332D4AD9E6FC/85D750DE5BC611F089B5C0CEDAE4EC9C.roa
Signing time:             Tue 08 Jul 2025 06:41:06 +0000
ROA not before:           Tue 08 Jul 2025 06:41:00 +0000
ROA not after:            Tue 31 Jul 2035 06:41:00 +0000
asID:                     328611
IP address blocks:        102.205.132.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36EF186/095B7A2A548011EE8C8F332D4AD9E6FC/83fU1Cj5RlsVRJxq_UUyxCJEaWQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36EF186/095B7A2A548011EE8C8F332D4AD9E6FC/83fU1Cj5RlsVRJxq_UUyxCJEaWQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/83fU1Cj5RlsVRJxq_UUyxCJEaWQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 03 Aug 2025 00:07:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 707 (0x2c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36EF186AF, serialNumber=F377D4D428F9465B15449C6AFD4532C422446964
        Validity
            Not Before: Jul  8 06:41:00 2025 GMT
            Not After : Jul 31 06:41:00 2035 GMT
        Subject: CN=686cbd82-2654
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ea:2e:6d:27:02:19:5e:54:0e:cc:9f:ed:ac:
                    73:a9:83:b0:87:35:ba:57:f0:e3:e6:59:bc:27:ab:
                    b2:cc:61:d6:ce:4f:5a:4e:24:92:2e:d7:e7:28:7a:
                    e7:d1:16:bc:d4:9c:0c:22:83:d6:f3:63:51:70:b1:
                    1e:8d:5e:a1:c8:d0:72:5a:ae:50:9f:dc:11:40:33:
                    b8:73:e1:94:37:ae:d1:bd:4d:43:de:1a:64:68:95:
                    01:4a:29:31:c1:68:34:40:1a:d5:b0:e8:f2:f1:6d:
                    b2:45:97:61:25:31:34:13:a7:98:45:7f:74:28:cd:
                    eb:eb:64:93:57:19:7b:7c:6c:ba:c5:a9:47:e0:af:
                    67:a5:cf:ed:28:d4:42:6d:0d:45:55:ac:f0:92:1f:
                    87:f8:23:48:80:3b:45:05:f7:08:27:b7:73:d7:3a:
                    a1:ff:fe:7b:d0:67:d8:58:1e:0a:cf:75:31:0b:d6:
                    c9:73:68:e5:f8:88:e4:10:28:97:26:fd:80:11:be:
                    63:f3:c7:8b:e8:f6:b9:c0:b7:a0:b5:87:1f:7f:e9:
                    ea:95:35:ed:b1:4a:22:1b:28:b9:5a:94:1c:58:90:
                    d1:16:f3:02:a9:0d:9a:13:a0:82:04:72:a8:c3:32:
                    63:3d:9b:f3:0c:e8:b3:35:14:7c:ff:dc:79:61:b6:
                    a6:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:04:89:56:DE:01:76:8B:D5:3E:BD:0F:80:B5:07:92:9F:A7:DE:26
            X509v3 Authority Key Identifier:
                keyid:F3:77:D4:D4:28:F9:46:5B:15:44:9C:6A:FD:45:32:C4:22:44:69:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36EF186/095B7A2A548011EE8C8F332D4AD9E6FC/83fU1Cj5RlsVRJxq_UUyxCJEaWQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/83fU1Cj5RlsVRJxq_UUyxCJEaWQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EF186/095B7A2A548011EE8C8F332D4AD9E6FC/85D750DE5BC611F089B5C0CEDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.205.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         80:19:29:cb:ed:27:a5:0c:8c:1e:78:4f:f9:c0:5a:59:0b:f0:
         52:2d:f6:c4:0d:fb:34:09:15:14:6a:29:e7:9e:52:eb:bc:94:
         3a:5e:97:d6:05:53:90:d1:93:5b:9c:3d:51:3d:29:7b:72:53:
         f9:6c:ba:9f:f6:3c:27:4e:79:20:8d:1a:01:09:f3:30:36:6a:
         e5:a4:1f:df:a5:5b:85:79:b2:00:92:c1:22:85:13:e2:d8:c3:
         eb:86:d1:2d:19:7d:e1:b8:d9:ea:12:bc:2a:19:95:7d:f2:17:
         91:f8:5b:87:64:4d:59:29:89:97:03:bc:0e:cc:88:b3:97:c4:
         38:a0:7c:b8:ed:f3:35:07:9d:98:99:b8:46:87:01:85:f5:9b:
         87:6a:14:49:e0:23:bf:ea:b7:f2:74:3a:be:3e:6a:41:17:0b:
         12:92:23:32:11:c9:db:7c:5c:88:6e:89:4d:53:cf:73:b9:c2:
         78:45:1c:b2:62:88:73:a3:e6:fe:75:14:32:60:9a:0a:64:9a:
         7a:2a:ea:b3:e2:f7:8c:c9:66:7d:da:5d:96:cc:fd:e7:d0:96:
         8a:04:dd:f4:df:4b:f5:b7:ab:e7:ef:d9:03:c7:38:9b:21:11:
         71:bc:5a:70:cc:6c:54:45:e1:23:08:53:b2:ae:db:a2:ae:79:
         fc:0b:83:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 1 18:09:23 2025 by rpki-client