Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36F6034/D916758A90FC11EA9D81306EF8AEA228/DF5534A0B1C911F184211CFCCE1D38B0.roa
File:                     DF5534A0B1C911F184211CFCCE1D38B0.roa (raw, json)
Hash identifier:          tdKG3fAnZ8O4SvFAeUfYg2GlcrozRV06z8IlLTGUwMs=
Subject key identifier:   C1:81:25:F0:E8:60:A5:F1:12:4C:F1:23:5E:CF:9C:F9:22:72:63:B5
Certificate issuer:       /CN=F36F6034AF/serialNumber=C702799EA4BD5DBA3ED3D069A7191B941B5A779A
Certificate serial:       098D
Authority key identifier: C7:02:79:9E:A4:BD:5D:BA:3E:D3:D0:69:A7:19:1B:94:1B:5A:77:9A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/xwJ5nqS9Xbo-09BppxkblBtad5o.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F6034/D916758A90FC11EA9D81306EF8AEA228/DF5534A0B1C911F184211CFCCE1D38B0.roa
Signing time:             Wed 16 Sep 2026 12:26:42 +0000
ROA not before:           Wed 16 Sep 2026 12:26:38 +0000
ROA not after:            Tue 16 Sep 2036 12:26:38 +0000
asID:                     37518
IP address blocks:        196.196.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F6034/D916758A90FC11EA9D81306EF8AEA228/xwJ5nqS9Xbo-09BppxkblBtad5o.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F6034/D916758A90FC11EA9D81306EF8AEA228/xwJ5nqS9Xbo-09BppxkblBtad5o.mft
                          rsync://rpki.afrinic.net/repository/afrinic/xwJ5nqS9Xbo-09BppxkblBtad5o.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 20 Sep 2026 00:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2445 (0x98d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F6034AF, serialNumber=C702799EA4BD5DBA3ED3D069A7191B941B5A779A
        Validity
            Not Before: Sep 16 12:26:38 2026 GMT
            Not After : Sep 16 12:26:38 2036 GMT
        Subject: CN=6aaa8b02-4cad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:8f:30:ba:dc:e1:d1:ce:b0:e6:f3:a4:27:89:
                    83:81:da:d3:84:cf:89:77:98:9d:db:5e:d0:d5:35:
                    d1:52:43:25:39:7e:a2:52:fb:a6:28:00:25:6f:2c:
                    10:ce:3c:ec:20:85:d8:06:c9:76:41:e1:f2:42:af:
                    2e:6c:ac:df:ec:14:d4:da:15:4a:ba:29:32:a6:9f:
                    55:40:40:74:7c:97:83:8b:3a:16:14:e1:c2:e5:e7:
                    63:5d:52:d7:29:2b:3f:26:25:1e:4c:8f:8f:18:a9:
                    63:29:75:15:19:83:02:d8:bf:6b:dc:2a:f9:06:d4:
                    45:6d:8a:b3:c9:92:d7:50:49:aa:b0:3f:df:23:1a:
                    b8:c7:2f:68:01:b9:fe:f6:88:31:a1:01:b9:c3:32:
                    7b:c9:88:37:be:52:57:84:0c:71:f7:80:4d:fa:58:
                    85:27:67:7f:b9:89:65:98:a0:3a:44:df:71:84:99:
                    1c:bf:35:a3:f5:a2:e7:cb:f4:4e:27:7e:de:5d:6a:
                    8b:ed:4a:0a:be:97:c1:e3:6a:4a:0f:c9:fc:a0:6a:
                    88:08:9c:87:4d:95:6b:12:d9:53:9a:aa:38:fd:76:
                    f4:22:aa:ea:16:35:11:18:73:3d:86:db:ea:19:0c:
                    e4:e9:4f:b6:7e:7f:d3:25:23:a6:ec:b4:bc:30:85:
                    52:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:81:25:F0:E8:60:A5:F1:12:4C:F1:23:5E:CF:9C:F9:22:72:63:B5
            X509v3 Authority Key Identifier:
                keyid:C7:02:79:9E:A4:BD:5D:BA:3E:D3:D0:69:A7:19:1B:94:1B:5A:77:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F6034/D916758A90FC11EA9D81306EF8AEA228/xwJ5nqS9Xbo-09BppxkblBtad5o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xwJ5nqS9Xbo-09BppxkblBtad5o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F6034/D916758A90FC11EA9D81306EF8AEA228/DF5534A0B1C911F184211CFCCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.196.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:30:f8:17:52:e5:81:d2:d1:13:f1:37:f1:63:5a:ed:cb:9f:
         a7:8f:31:a1:7b:d7:1a:cc:e2:e6:89:34:57:9d:e7:dd:87:e1:
         be:ca:00:f3:bd:cb:98:43:de:16:02:77:3a:68:d6:39:37:3e:
         2b:2c:48:b7:95:79:e2:b2:d5:07:41:0a:be:e4:ef:6f:eb:46:
         87:fa:3c:bc:f2:66:3b:59:eb:22:44:92:5e:17:c7:33:53:af:
         f6:3e:18:8b:85:35:86:43:26:ad:e0:88:9e:40:0e:a7:d9:40:
         38:38:40:b0:be:ed:d7:bb:a6:b8:32:51:9e:66:da:ac:11:bc:
         8c:c8:54:58:7f:d5:1f:33:d6:ee:1e:da:ea:7d:3d:56:bb:b0:
         2b:f6:cb:f7:67:cf:38:2d:d6:b0:f7:7b:49:8f:38:e1:a8:d2:
         83:80:2c:47:3a:56:c9:bb:22:fa:1f:6c:14:ab:19:07:5c:f1:
         20:99:ac:d0:bc:5b:fa:ad:76:bd:79:47:5e:ce:14:cd:af:a8:
         45:34:b3:00:11:92:8b:72:05:61:77:23:c0:13:4f:5f:e2:d6:
         72:04:9f:fc:6c:ee:e6:17:14:33:86:15:aa:83:81:63:1e:49:
         cb:c8:d4:48:f3:b2:63:b8:95:3f:61:3d:50:b3:b7:d2:74:92:
         a5:0e:f3:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----