Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36203F3/794AE46CDCFC11F18B1CDFAACE1D38B0/5306BE60DCFD11F1990D3EB1CE1D38B0.roa
File:                     5306BE60DCFD11F1990D3EB1CE1D38B0.roa (raw, json)
Hash identifier:          oXIw6uLdYeIlfEmP80wBzeBBO7PWU1qC9mxgLFsuLjA=
Subject key identifier:   C0:21:E2:AA:05:9E:69:15:0B:45:02:11:4B:D0:94:B6:8F:AF:76:3D
Certificate issuer:       /CN=F36203F3AF/serialNumber=1CF1B961709243E1B01EAB0B1341F77E14B5901F
Certificate serial:       02
Authority key identifier: 1C:F1:B9:61:70:92:43:E1:B0:1E:AB:0B:13:41:F7:7E:14:B5:90:1F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/HPG5YXCSQ-GwHqsLE0H3fhS1kB8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36203F3/794AE46CDCFC11F18B1CDFAACE1D38B0/5306BE60DCFD11F1990D3EB1CE1D38B0.roa
Signing time:             Tue 10 Nov 2026 11:53:21 +0000
ROA not before:           Tue 10 Nov 2026 11:53:16 +0000
ROA not after:            Mon 10 Nov 2031 11:53:16 +0000
asID:                     328841
IP address blocks:        102.221.48.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36203F3/794AE46CDCFC11F18B1CDFAACE1D38B0/HPG5YXCSQ-GwHqsLE0H3fhS1kB8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36203F3/794AE46CDCFC11F18B1CDFAACE1D38B0/HPG5YXCSQ-GwHqsLE0H3fhS1kB8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/HPG5YXCSQ-GwHqsLE0H3fhS1kB8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 16 Nov 2026 00:08:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36203F3AF, serialNumber=1CF1B961709243E1B01EAB0B1341F77E14B5901F
        Validity
            Not Before: Nov 10 11:53:16 2026 GMT
            Not After : Nov 10 11:53:16 2031 GMT
        Subject: CN=6af305b0-bdd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:8f:27:14:cc:f6:94:1a:dc:c0:3d:ba:74:fa:
                    05:25:af:10:b8:c9:01:8c:ed:8a:af:49:ea:db:94:
                    4e:c1:47:c8:77:82:69:ea:a4:d7:5f:f3:69:c7:4f:
                    7d:3f:b2:6a:35:42:4a:21:1e:69:88:e5:af:4e:5c:
                    1f:96:c1:cd:77:fa:e4:07:50:a8:4c:63:e5:76:e9:
                    02:7f:b0:2a:2f:b8:00:98:6f:da:e5:77:df:ff:d5:
                    d5:63:c4:41:a0:10:83:75:af:58:e5:6c:12:30:08:
                    76:e5:89:be:38:51:8f:07:33:55:56:fd:76:9a:ab:
                    f1:bb:a1:86:62:97:8d:b9:3b:45:14:c9:26:40:3b:
                    55:8c:29:6b:b6:39:4d:69:65:dd:99:22:23:e5:7d:
                    d1:81:9b:c9:62:ca:3c:f3:ef:3d:ce:2b:f0:cf:6b:
                    20:0e:a0:23:51:6a:cb:78:8f:3b:d3:47:7f:c9:57:
                    3a:6e:99:a3:2d:d4:63:98:f1:b1:cd:72:03:c0:69:
                    7f:17:3f:07:84:cb:ce:30:04:ea:0d:08:db:4c:ba:
                    16:1b:7f:33:61:67:51:37:a7:66:09:81:04:29:cd:
                    d0:27:e4:36:03:de:1d:74:3a:07:aa:28:06:72:80:
                    d5:81:cb:d2:bd:d3:0d:d4:b6:be:78:82:fd:d4:1c:
                    71:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:21:E2:AA:05:9E:69:15:0B:45:02:11:4B:D0:94:B6:8F:AF:76:3D
            X509v3 Authority Key Identifier:
                keyid:1C:F1:B9:61:70:92:43:E1:B0:1E:AB:0B:13:41:F7:7E:14:B5:90:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36203F3/794AE46CDCFC11F18B1CDFAACE1D38B0/HPG5YXCSQ-GwHqsLE0H3fhS1kB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HPG5YXCSQ-GwHqsLE0H3fhS1kB8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36203F3/794AE46CDCFC11F18B1CDFAACE1D38B0/5306BE60DCFD11F1990D3EB1CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.221.48.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9b:da:32:52:e3:e9:c4:40:a1:96:cd:49:42:58:25:ed:06:c0:
         50:de:74:f0:62:1c:26:ad:96:90:15:49:fd:e8:e9:d2:00:c6:
         f3:61:7b:2b:d1:8c:07:11:0b:5d:2e:cb:67:aa:43:ff:8d:b9:
         29:a8:fe:2a:55:8a:a1:19:ce:a6:8d:b8:a9:f2:b1:84:1f:49:
         18:cf:31:29:f5:e4:20:63:25:4d:9e:f9:9a:b2:20:2f:63:76:
         9a:32:03:0e:ed:f8:21:e1:8d:71:04:94:b7:b1:85:5c:6a:bf:
         dc:01:34:00:9a:f7:03:c3:95:41:4a:66:31:78:a7:e7:2b:9e:
         31:6d:83:02:3a:6b:02:2c:e5:91:da:f0:1c:60:f1:3a:43:85:
         51:46:9f:5b:21:99:e0:79:12:ab:01:c1:c5:11:68:2d:9e:37:
         a5:2b:07:c1:fc:07:bf:69:54:b4:8a:2c:35:59:fa:bb:5c:9d:
         4c:aa:74:98:2c:b3:19:da:5c:bb:60:e8:5b:78:f6:9d:e9:1d:
         1e:71:a7:27:9e:5b:84:f2:14:0b:6f:99:36:67:d2:68:53:08:
         9d:a9:22:68:03:fd:ae:ab:26:90:1f:38:e7:4f:1e:d3:68:aa:
         10:18:55:05:82:41:36:77:13:d6:e3:4e:48:b9:99:61:b2:c2:
         24:4a:d0:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----