Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36232DE/EDEE9450D2EF11EDA5921BB9F1222468/5B69B990B47B11F1A514E7EACE1D38B0.roa
File:                     5B69B990B47B11F1A514E7EACE1D38B0.roa (raw, json)
Hash identifier:          jyhWV3yVnIyiih29CT+rQi3HJtjz49jmrMNSTlCIlBg=
Subject key identifier:   A4:E4:BC:1B:CA:2C:E8:56:A2:37:B7:62:6C:94:F6:35:0C:27:90:B1
Certificate issuer:       /CN=F36232DEAF/serialNumber=1080ACBECDCA1604B666C08B90BDDBEE585D2CF9
Certificate serial:       0524
Authority key identifier: 10:80:AC:BE:CD:CA:16:04:B6:66:C0:8B:90:BD:DB:EE:58:5D:2C:F9
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/EICsvs3KFgS2ZsCLkL3b7lhdLPk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36232DE/EDEE9450D2EF11EDA5921BB9F1222468/5B69B990B47B11F1A514E7EACE1D38B0.roa
Signing time:             Sat 19 Sep 2026 22:42:14 +0000
ROA not before:           Sun 20 Sep 2026 22:42:09 +0000
ROA not after:            Mon 20 Sep 2027 22:42:09 +0000
asID:                     328539
IP address blocks:        2c0f:7540::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36232DE/EDEE9450D2EF11EDA5921BB9F1222468/EICsvs3KFgS2ZsCLkL3b7lhdLPk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36232DE/EDEE9450D2EF11EDA5921BB9F1222468/EICsvs3KFgS2ZsCLkL3b7lhdLPk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/EICsvs3KFgS2ZsCLkL3b7lhdLPk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1316 (0x524)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36232DEAF, serialNumber=1080ACBECDCA1604B666C08B90BDDBEE585D2CF9
        Validity
            Not Before: Sep 20 22:42:09 2026 GMT
            Not After : Sep 20 22:42:09 2027 GMT
        Subject: CN=6aaf0fc5-5adf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:66:fd:f9:51:fe:bc:b2:4f:bf:1f:d7:bc:bd:
                    5a:cd:8f:7b:1d:f2:d3:f0:37:be:01:5c:b0:b1:c2:
                    aa:bc:df:92:15:89:0e:17:8e:5f:ce:c6:9c:a8:06:
                    46:9c:0e:b3:77:f0:8c:5f:ef:97:1f:09:4b:34:3d:
                    60:47:73:ff:69:0a:08:c2:0a:b5:9f:f3:e2:1a:d2:
                    24:4b:13:7f:ac:21:9d:02:8a:62:20:ca:c4:62:6d:
                    64:7f:b0:8b:81:1f:15:25:84:bb:bf:d6:6a:2e:69:
                    4b:f5:69:02:1d:b8:cb:04:9c:b1:7d:ac:c5:fc:12:
                    29:6e:0b:be:06:a9:64:d8:95:d1:a9:bc:3d:35:52:
                    87:21:f3:cc:43:78:23:37:2b:bd:3e:85:e3:09:dc:
                    f2:e1:41:6a:0b:42:31:a7:0b:3d:55:a8:a5:b5:0c:
                    6a:df:bc:3b:61:91:a8:c7:96:c2:42:41:46:45:84:
                    14:61:b7:1d:3a:84:b6:44:0d:25:07:0c:41:f5:0e:
                    63:90:63:80:d5:7c:d2:af:16:87:7e:a4:8f:44:fd:
                    ce:2e:b8:ab:ec:0c:7c:eb:62:6a:49:87:e1:18:64:
                    bc:d0:be:0c:c5:93:ed:99:cd:b0:24:66:e7:30:a2:
                    37:e8:e1:ed:64:94:cc:1f:00:b4:25:b2:ef:46:0a:
                    0c:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:E4:BC:1B:CA:2C:E8:56:A2:37:B7:62:6C:94:F6:35:0C:27:90:B1
            X509v3 Authority Key Identifier:
                keyid:10:80:AC:BE:CD:CA:16:04:B6:66:C0:8B:90:BD:DB:EE:58:5D:2C:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36232DE/EDEE9450D2EF11EDA5921BB9F1222468/EICsvs3KFgS2ZsCLkL3b7lhdLPk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/EICsvs3KFgS2ZsCLkL3b7lhdLPk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36232DE/EDEE9450D2EF11EDA5921BB9F1222468/5B69B990B47B11F1A514E7EACE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:7540::/32

    Signature Algorithm: sha256WithRSAEncryption
         7b:7e:46:58:85:e2:80:42:aa:2d:90:05:b2:77:9c:58:91:6c:
         53:45:a6:86:8a:80:fa:1d:9b:98:f3:99:e0:9e:58:55:ad:b0:
         c8:b1:92:dc:f1:9c:32:74:62:0a:75:24:f0:91:b8:59:9b:cc:
         dd:ff:1b:8f:20:3a:ba:0a:60:0f:1a:21:54:81:23:9a:08:62:
         2a:b7:ae:a4:de:10:fe:cd:24:d8:a6:88:51:90:22:16:d2:21:
         89:2a:a3:21:0d:6f:75:8c:fc:ab:66:20:4f:b2:ca:d2:e9:ab:
         52:1a:d2:b9:77:d9:c7:03:7f:04:cb:16:62:23:90:b5:18:65:
         cc:54:ed:20:b5:ba:b8:d3:d1:b3:ef:56:b0:ab:41:18:a2:4c:
         20:fe:2d:f3:03:f8:2f:59:31:2a:52:d1:fc:2d:55:26:16:e1:
         0b:bf:0f:35:71:0e:82:42:31:0d:54:64:cc:4d:58:9f:e5:b8:
         30:04:8d:22:a9:60:d2:d7:a3:71:c1:a7:6c:73:77:87:01:38:
         39:3b:59:d1:f2:30:10:03:f6:9f:25:9b:cb:ce:c9:7b:76:88:
         5c:8f:f5:35:63:ab:e2:c7:1e:a9:e1:c4:6f:7d:ea:f2:2e:aa:
         f1:e6:3e:6a:eb:c1:0e:84:b9:e7:aa:c6:d9:a1:14:59:ea:3b:
         8d:d4:6b:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----