Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/C2CCB704BB0611F193CEF5B2CE1D38B0.roa
File:                     C2CCB704BB0611F193CEF5B2CE1D38B0.roa (raw, json)
Hash identifier:          wv9rMH8t0kkY6Ne1yt+PsSOMWEjCuZeqg6y2tFrf2nQ=
Subject key identifier:   B0:68:5D:6E:62:8D:7A:C8:45:88:D3:47:F2:5C:21:8F:21:D4:74:8A
Certificate issuer:       /CN=F36EF7D0AF/serialNumber=3A553B6EF80BF922312F96B8DDC1F219A8C4121B
Certificate serial:       05C5
Authority key identifier: 3A:55:3B:6E:F8:0B:F9:22:31:2F:96:B8:DD:C1:F2:19:A8:C4:12:1B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/C2CCB704BB0611F193CEF5B2CE1D38B0.roa
Signing time:             Mon 28 Sep 2026 06:35:14 +0000
ROA not before:           Mon 28 Sep 2026 06:35:10 +0000
ROA not after:            Mon 23 Sep 2030 06:35:10 +0000
asID:                     50385
IP address blocks:        102.212.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 05 Oct 2026 00:08:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1477 (0x5c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36EF7D0AF, serialNumber=3A553B6EF80BF922312F96B8DDC1F219A8C4121B
        Validity
            Not Before: Sep 28 06:35:10 2026 GMT
            Not After : Sep 23 06:35:10 2030 GMT
        Subject: CN=6aba0aa2-4766
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:38:10:36:09:fd:0c:f1:a5:70:97:ef:c0:b0:
                    5e:7a:db:95:22:f3:f4:fa:a1:c8:a9:80:ca:ff:a7:
                    4c:8d:5f:b7:d9:bc:43:e2:a4:1e:c1:80:ac:a7:3b:
                    0c:c5:c8:7b:24:32:8d:80:44:4b:26:0f:8d:da:f1:
                    21:a8:f7:94:5e:47:ac:b9:e4:04:82:c4:33:2f:38:
                    38:5c:04:5c:35:60:9c:3b:8c:0f:8f:ef:80:b6:b4:
                    5f:33:68:fc:fe:81:3d:29:b9:bb:f1:fa:44:46:5f:
                    9c:a0:70:a2:64:e6:93:48:a2:f8:aa:ce:50:db:29:
                    2d:f5:2f:16:27:ee:89:13:b7:72:65:b2:90:b5:c7:
                    35:44:2d:d4:5c:35:b6:d0:4e:e4:4e:43:aa:7f:cf:
                    37:73:88:a9:5c:82:f9:af:05:42:0b:65:bd:2b:49:
                    de:c0:2d:19:f1:e3:f1:e3:2a:52:57:3f:50:b5:b6:
                    7c:2d:fc:6e:aa:cc:1c:d2:6d:f8:66:64:e9:92:2a:
                    01:ad:3b:83:df:f2:9a:81:b9:83:07:a1:4e:e1:cd:
                    82:11:5d:51:68:6b:9a:9c:36:8d:3e:22:9c:7d:61:
                    16:21:b1:d6:ef:d5:75:72:6b:81:b9:c5:2c:42:84:
                    ad:0f:40:4f:96:4a:10:0f:34:d7:c3:7c:ca:e5:b1:
                    95:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:68:5D:6E:62:8D:7A:C8:45:88:D3:47:F2:5C:21:8F:21:D4:74:8A
            X509v3 Authority Key Identifier:
                keyid:3A:55:3B:6E:F8:0B:F9:22:31:2F:96:B8:DD:C1:F2:19:A8:C4:12:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/C2CCB704BB0611F193CEF5B2CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.212.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:c0:1b:5b:76:28:28:05:77:b0:53:b1:c1:06:52:38:43:77:
         88:45:8a:b6:5b:65:56:90:ed:9f:f6:d3:83:d5:d0:00:a7:86:
         cb:46:67:cd:6a:85:bb:cc:c5:ac:0a:90:ec:98:6c:e0:91:3f:
         97:06:24:b9:f1:59:f7:a0:e2:b0:73:40:6a:d8:34:3d:97:d0:
         b5:7e:79:0a:1c:67:61:48:ff:0b:f3:d5:34:b5:22:5e:e6:41:
         fb:6e:b7:48:11:1f:80:bd:7a:9b:6a:05:3e:40:62:42:17:45:
         03:01:1c:f4:2c:3d:ec:ee:2d:e6:87:70:c2:63:d3:bb:ef:e0:
         26:4f:bc:fd:99:35:4d:56:22:c6:1e:65:80:b7:69:d9:8e:a2:
         30:5f:73:c8:d0:ef:2e:e2:46:12:de:89:a6:7f:9e:45:23:e0:
         c7:97:4a:ac:b7:f4:09:43:fa:be:b4:f2:ce:4b:1b:41:6c:88:
         53:09:72:ee:86:39:a8:ea:78:74:84:cd:49:08:e9:b4:c1:36:
         db:7f:15:04:02:8e:28:b3:70:de:2e:b8:87:3a:e7:c1:9a:d4:
         0d:4a:3b:cb:c6:e7:68:89:e5:2b:1a:65:32:1e:01:82:ee:b0:
         a9:80:1f:58:30:9a:27:0d:37:48:69:5b:fa:cc:cc:33:fb:34:
         3e:7b:86:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----