Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F361F5C9/C6A3DD50A37711EBBC09D782F8AEA228/68E480FA9BC111F182A092C9CE1D38B0.roa
File:                     68E480FA9BC111F182A092C9CE1D38B0.roa (raw, json)
Hash identifier:          N4uiQf6Nb+lh4wjx0uZtYdhGrGnyVNGiH12tUomhWmM=
Subject key identifier:   DB:AD:A7:49:6D:99:29:05:2E:08:CB:18:1C:32:AE:8C:99:FD:8E:6A
Certificate issuer:       /CN=F361F5C9AF/serialNumber=B7DEB01BACBB4B5A7E9C782FFF99FD8E5DC06CB2
Certificate serial:       07F4
Authority key identifier: B7:DE:B0:1B:AC:BB:4B:5A:7E:9C:78:2F:FF:99:FD:8E:5D:C0:6C:B2
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/t96wG6y7S1p-nHgv_5n9jl3AbLI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361F5C9/C6A3DD50A37711EBBC09D782F8AEA228/68E480FA9BC111F182A092C9CE1D38B0.roa
Signing time:             Wed 19 Aug 2026 11:30:42 +0000
ROA not before:           Wed 19 Aug 2026 11:30:38 +0000
ROA not after:            Fri 31 Dec 2049 11:30:38 +0000
asID:                     328475
IP address blocks:        102.69.224.0/21 maxlen: 24
                          102.207.68.0/22 maxlen: 24
                          102.211.136.0/22 maxlen: 24
                          102.215.4.0/22 maxlen: 24
                          102.217.128.0/22 maxlen: 24
                          102.218.232.0/22 maxlen: 24
                          102.220.36.0/22 maxlen: 24
                          2c0f:e818::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361F5C9/C6A3DD50A37711EBBC09D782F8AEA228/t96wG6y7S1p-nHgv_5n9jl3AbLI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361F5C9/C6A3DD50A37711EBBC09D782F8AEA228/t96wG6y7S1p-nHgv_5n9jl3AbLI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/t96wG6y7S1p-nHgv_5n9jl3AbLI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 09 Oct 2026 00:07:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2036 (0x7f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361F5C9AF, serialNumber=B7DEB01BACBB4B5A7E9C782FFF99FD8E5DC06CB2
        Validity
            Not Before: Aug 19 11:30:38 2026 GMT
            Not After : Dec 31 11:30:38 2049 GMT
        Subject: CN=6a8593e2-9d5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:72:ce:5d:6b:c4:cd:ad:fe:1a:05:71:7b:fb:
                    2a:a3:69:ca:7a:2e:ee:cb:05:c7:f3:c6:d5:a9:39:
                    f2:d5:01:af:1f:c0:ab:36:4a:ff:bd:d7:91:cb:22:
                    75:bb:47:16:eb:90:57:2a:e1:1c:73:a9:ca:55:65:
                    0e:7b:a6:01:10:65:aa:23:f9:5e:28:f1:c7:5c:d0:
                    d7:e3:18:43:35:1d:f4:c2:6a:0d:be:65:aa:4d:a6:
                    98:8f:ee:70:80:37:ef:01:6c:91:94:52:98:5b:4d:
                    44:63:97:76:73:77:44:7e:25:5a:6d:a4:19:42:40:
                    7b:43:b9:fa:5d:53:82:1d:8e:91:d2:f6:cd:15:9d:
                    bb:56:86:16:2e:4f:61:00:d3:24:97:ba:f2:77:6a:
                    6a:f0:0a:f2:63:ec:df:23:e5:b6:cb:53:33:ab:d4:
                    c0:ea:34:11:87:b6:ec:0e:d6:4a:56:bb:9d:c4:47:
                    57:a5:57:52:9e:63:a2:ca:e1:fb:0e:37:0b:77:e1:
                    db:19:e0:75:cb:3a:a8:70:dd:d1:74:ec:b5:67:f3:
                    e5:16:86:6d:82:ad:9f:8c:1c:36:87:3d:f0:77:ad:
                    e7:f1:6a:23:f7:2e:5e:9c:4f:d8:58:0d:27:78:68:
                    09:3d:0a:f7:e2:19:ed:85:27:df:40:b3:37:bf:f9:
                    bf:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:AD:A7:49:6D:99:29:05:2E:08:CB:18:1C:32:AE:8C:99:FD:8E:6A
            X509v3 Authority Key Identifier:
                keyid:B7:DE:B0:1B:AC:BB:4B:5A:7E:9C:78:2F:FF:99:FD:8E:5D:C0:6C:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361F5C9/C6A3DD50A37711EBBC09D782F8AEA228/t96wG6y7S1p-nHgv_5n9jl3AbLI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/t96wG6y7S1p-nHgv_5n9jl3AbLI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361F5C9/C6A3DD50A37711EBBC09D782F8AEA228/68E480FA9BC111F182A092C9CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.69.224.0/21
                  102.207.68.0/22
                  102.211.136.0/22
                  102.215.4.0/22
                  102.217.128.0/22
                  102.218.232.0/22
                  102.220.36.0/22
                IPv6:
                  2c0f:e818::/32

    Signature Algorithm: sha256WithRSAEncryption
         85:eb:58:30:03:97:a4:b8:49:4b:37:a0:ee:e3:77:45:86:c1:
         a6:b6:98:14:d2:fa:0f:65:02:47:a1:ef:da:1a:ee:40:57:b0:
         8b:92:1e:df:76:c7:72:f2:b1:1b:5e:e3:f7:44:70:16:c1:99:
         8d:42:8b:15:3b:38:3c:1b:c7:72:c6:f0:a8:46:61:7d:7e:03:
         35:44:d2:22:20:35:89:17:fd:03:a5:b0:e0:ee:9d:67:17:03:
         c9:4d:f1:94:c6:44:19:0d:c0:98:11:06:ef:94:48:05:09:40:
         ca:1c:9b:5c:45:c9:ed:a3:03:6e:05:17:8c:8d:49:05:4f:80:
         5d:4e:e6:04:d2:a1:ce:76:2d:be:11:22:6a:9c:45:5e:97:00:
         bf:21:37:af:b2:14:62:75:d8:32:f8:22:97:82:2e:c3:ec:44:
         29:3a:3e:a7:50:ac:a7:b8:d0:5a:b6:1b:e0:3a:e2:53:c5:9a:
         96:0d:70:b5:d9:79:04:ac:31:44:29:c0:16:1d:5c:79:da:2a:
         96:f4:5e:a4:82:c8:6b:bb:2f:66:b0:b7:bd:fb:8d:fb:9f:66:
         d5:02:1a:a4:56:ab:7d:c2:c7:75:40:4d:31:68:9a:d6:4e:1c:
         f9:84:3a:f8:41:3e:8f:28:ef:1a:b2:3e:b7:94:6d:f6:5b:a5:
         f6:92:8a:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----