Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36280C9/892916D0895911F0B0F640C1DAE4EC9C/997B259C963611F185D10DABCE1D38B0.roa
File:                     997B259C963611F185D10DABCE1D38B0.roa (raw, json)
Hash identifier:          VUPSKE+i4O/810Cyv4p8XUMEeYicWchejkyI7vEvZBk=
Subject key identifier:   3E:4D:B4:EF:27:07:03:E2:03:C7:67:31:B3:74:F7:AD:FB:FB:E9:1D
Certificate issuer:       /CN=F36280C9AF/serialNumber=5739E9D2932AD85BCC2240813BF3AB3942843020
Certificate serial:       0168
Authority key identifier: 57:39:E9:D2:93:2A:D8:5B:CC:22:40:81:3B:F3:AB:39:42:84:30:20
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Vznp0pMq2FvMIkCBO_OrOUKEMCA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36280C9/892916D0895911F0B0F640C1DAE4EC9C/997B259C963611F185D10DABCE1D38B0.roa
Signing time:             Wed 12 Aug 2026 10:14:27 +0000
ROA not before:           Wed 12 Aug 2026 10:14:24 +0000
ROA not after:            Thu 12 Aug 2027 10:14:24 +0000
asID:                     329530
IP address blocks:        102.205.248.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36280C9/892916D0895911F0B0F640C1DAE4EC9C/Vznp0pMq2FvMIkCBO_OrOUKEMCA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36280C9/892916D0895911F0B0F640C1DAE4EC9C/Vznp0pMq2FvMIkCBO_OrOUKEMCA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Vznp0pMq2FvMIkCBO_OrOUKEMCA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 05:08:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 360 (0x168)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36280C9AF, serialNumber=5739E9D2932AD85BCC2240813BF3AB3942843020
        Validity
            Not Before: Aug 12 10:14:24 2026 GMT
            Not After : Aug 12 10:14:24 2027 GMT
        Subject: CN=6a7c4783-0883
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d2:0e:1b:99:b0:15:d9:29:5c:31:5a:ae:55:
                    01:2a:0a:a8:33:ee:75:05:88:5f:92:ef:fd:88:c1:
                    46:a0:fa:d7:99:e7:3f:0a:83:c7:23:97:89:4a:00:
                    c7:f2:44:50:43:f6:6a:82:3d:7c:f8:ae:98:eb:23:
                    f8:13:8f:7c:ad:ff:4a:8c:b7:92:e6:b6:9d:d0:6b:
                    ee:ba:a6:73:14:27:6c:7b:40:81:e0:14:f8:ea:20:
                    f2:ef:fb:bc:40:60:8d:65:41:cc:69:5a:21:40:4c:
                    ad:7c:bd:52:22:de:92:a2:28:b2:fd:63:c5:fb:97:
                    36:b3:8c:e2:cd:a1:95:74:52:56:ed:a6:ab:39:de:
                    0d:eb:9e:63:63:f2:e8:09:03:66:d0:ff:a4:27:36:
                    b2:5d:00:91:6c:33:24:d9:b4:82:6d:cc:55:d4:b1:
                    91:e5:9e:56:b6:63:c2:08:2f:54:46:6e:e3:7e:8c:
                    0c:fe:35:a3:84:d1:7f:87:1e:2a:f9:06:f8:58:69:
                    0f:4d:11:2b:0e:d5:79:01:6a:4a:f8:14:80:1e:d8:
                    00:38:84:10:cc:f2:e5:43:a4:4f:45:fb:dd:fb:e1:
                    cd:1b:ca:6a:16:75:a8:48:79:0f:31:db:bd:cd:79:
                    05:74:13:4b:08:68:ba:b7:81:83:95:8b:9a:72:4d:
                    2b:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:4D:B4:EF:27:07:03:E2:03:C7:67:31:B3:74:F7:AD:FB:FB:E9:1D
            X509v3 Authority Key Identifier:
                keyid:57:39:E9:D2:93:2A:D8:5B:CC:22:40:81:3B:F3:AB:39:42:84:30:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36280C9/892916D0895911F0B0F640C1DAE4EC9C/Vznp0pMq2FvMIkCBO_OrOUKEMCA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Vznp0pMq2FvMIkCBO_OrOUKEMCA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36280C9/892916D0895911F0B0F640C1DAE4EC9C/997B259C963611F185D10DABCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.205.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8b:34:e3:49:d3:df:5c:8a:89:c0:82:9e:07:4b:ba:fb:83:8b:
         c2:67:41:f1:4f:ae:c5:f5:14:67:a7:cc:69:ea:f2:96:45:7f:
         08:12:1e:4f:4f:62:df:70:63:95:ad:1e:30:97:e0:60:0b:f8:
         f7:9e:f5:48:1f:38:eb:fb:4a:ff:75:4c:eb:3d:7f:e1:b4:ad:
         af:d2:cb:f6:06:11:66:45:5a:55:74:64:ff:3a:bd:b0:90:7d:
         4d:90:f4:70:5e:e5:6d:44:53:64:87:be:bf:d3:0c:9a:fb:ef:
         7d:ab:a9:8c:12:40:a5:18:00:b9:fb:80:c6:37:58:a6:3f:14:
         10:6f:79:26:b6:21:1e:1b:e7:e7:14:a4:63:78:20:53:14:c4:
         6b:2d:10:a7:47:3e:20:f2:73:98:ca:81:e5:15:ba:30:32:53:
         d8:d0:68:a3:c7:26:25:c0:0e:c1:15:b2:65:e4:21:5b:79:4e:
         34:6d:0f:e3:60:89:26:8b:e6:21:7d:23:dd:2c:a4:f5:44:f6:
         f6:c0:72:22:fe:d6:60:3c:5a:b5:5b:6f:88:00:22:07:3d:4e:
         28:1e:28:69:b1:67:10:3c:73:d2:d8:5f:6b:20:dd:66:46:84:
         40:86:5f:0f:b7:cc:f3:4a:d5:f9:42:21:3f:07:ec:76:d1:96:
         7d:25:2f:83
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICAWgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MjgwQzlBRjExMC8GA1UEBRMoNTczOUU5RDI5MzJBRDg1QkNDMjI0MDgxM0JGM0FC
Mzk0Mjg0MzAyMDAeFw0yNjA4MTIxMDE0MjRaFw0yNzA4MTIxMDE0MjRaMBgxFjAU
BgNVBAMTDTZhN2M0NzgzLTA4ODMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDI0g4bmbAV2SlcMVquVQEqCqgz7nUFiF+S7/2IwUag+teZ5z8Kg8cjl4lK
AMfyRFBD9mqCPXz4rpjrI/gTj3yt/0qMt5Lmtp3Qa+66pnMUJ2x7QIHgFPjqIPLv
+7xAYI1lQcxpWiFATK18vVIi3pKiKLL9Y8X7lzazjOLNoZV0Ulbtpqs53g3rnmNj
8ugJA2bQ/6QnNrJdAJFsMyTZtIJtzFXUsZHlnla2Y8IIL1RGbuN+jAz+NaOE0X+H
Hir5BvhYaQ9NESsO1XkBakr4FIAe2AA4hBDM8uVDpE9F+9374c0bymoWdahIeQ8x
273NeQV0E0sIaLq3gYOVi5pyTSsfAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUPk20
7ycHA+IDx2cxs3T3rfv76R0wHwYDVR0jBBgwFoAUVznp0pMq2FvMIkCBO/OrOUKE
MCAwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjI4MEM5Lzg5MjkxNkQwODk1OTExRjBCMEY2NDBDMURBRTRFQzlDL1Z6bnAw
cE1xMkZ2TUlrQ0JPX09yT1VLRU1DQS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1Z6bnAwcE1xMkZ2TUlrQ0JPX09yT1VLRU1DQS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjI4MEM5Lzg5MjkxNkQwODk1OTExRjBCMEY2NDBDMURB
RTRFQzlDLzk5N0IyNTlDOTYzNjExRjE4NUQxMERBQkNFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJmzfgwDQYJKoZIhvcNAQEL
BQADggEBAIs040nT31yKicCCngdLuvuDi8JnQfFPrsX1FGenzGnq8pZFfwgSHk9P
Yt9wY5WtHjCX4GAL+Pee9UgfOOv7Sv91TOs9f+G0ra/Sy/YGEWZFWlV0ZP86vbCQ
fU2Q9HBe5W1EU2SHvr/TDJr7732rqYwSQKUYALn7gMY3WKY/FBBveSa2IR4b5+cU
pGN4IFMUxGstEKdHPiDyc5jKgeUVujAyU9jQaKPHJiXADsEVsmXkIVt5TjRtD+Ng
iSaL5iF9I90spPVE9vbAciL+1mA8WrVbb4gAIgc9TigeKGmxZxA8c9LYX2sg3WZG
hECGXw+3zPNK1flCIT8H7HbRln0lL4M=
-----END CERTIFICATE-----