Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36303B6/AECF18CAC3BA11F198314B10CF1D38B0/D3AE546EDCD611F1827676BACE1D38B0.roa
File:                     D3AE546EDCD611F1827676BACE1D38B0.roa (raw, json)
Hash identifier:          mdXH41QDkmPVLQEJ2cqSe9wJWvtSt17XghAmyK91Wss=
Subject key identifier:   F6:30:5B:DA:D8:44:B0:EC:FC:DE:DD:A2:9F:A8:BD:72:29:4E:08:92
Certificate issuer:       /CN=F36303B6AF/serialNumber=42BDA6FF50731DA757876349BD0DDF8A6A380D51
Certificate serial:       40
Authority key identifier: 42:BD:A6:FF:50:73:1D:A7:57:87:63:49:BD:0D:DF:8A:6A:38:0D:51
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Qr2m_1BzHadXh2NJvQ3fimo4DVE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36303B6/AECF18CAC3BA11F198314B10CF1D38B0/D3AE546EDCD611F1827676BACE1D38B0.roa
Signing time:             Tue 10 Nov 2026 07:17:46 +0000
ROA not before:           Tue 10 Nov 2026 07:17:41 +0000
ROA not after:            Wed 31 Dec 2036 07:17:41 +0000
asID:                     37037
IP address blocks:        102.68.192.0/24 maxlen: 24 (superfluous maxlen)
                          102.68.193.0/24 maxlen: 24 (superfluous maxlen)
                          102.68.194.0/24 maxlen: 24 (superfluous maxlen)
                          102.68.195.0/24 maxlen: 24 (superfluous maxlen)
                          102.68.196.0/24 maxlen: 24 (superfluous maxlen)
                          102.68.197.0/24 maxlen: 24 (superfluous maxlen)
                          102.68.198.0/24 maxlen: 24 (superfluous maxlen)
                          102.68.199.0/24 maxlen: 24 (superfluous maxlen)
                          102.68.200.0/24 maxlen: 24 (superfluous maxlen)
                          102.68.201.0/24 maxlen: 24 (superfluous maxlen)
                          102.68.202.0/24 maxlen: 24 (superfluous maxlen)
                          102.68.203.0/24 maxlen: 24 (superfluous maxlen)
                          102.68.204.0/24 maxlen: 24 (superfluous maxlen)
                          102.68.205.0/24 maxlen: 24 (superfluous maxlen)
                          102.68.206.0/24 maxlen: 24 (superfluous maxlen)
                          102.68.207.0/24 maxlen: 24 (superfluous maxlen)
                          102.68.208.0/24 maxlen: 24 (superfluous maxlen)
                          102.68.209.0/24 maxlen: 24 (superfluous maxlen)
                          102.68.210.0/24 maxlen: 24 (superfluous maxlen)
                          102.68.211.0/24 maxlen: 24 (superfluous maxlen)
                          102.68.212.0/24 maxlen: 24 (superfluous maxlen)
                          102.68.213.0/24 maxlen: 24 (superfluous maxlen)
                          102.68.214.0/24 maxlen: 24 (superfluous maxlen)
                          102.68.215.0/24 maxlen: 24 (superfluous maxlen)
                          102.68.216.0/24 maxlen: 24 (superfluous maxlen)
                          102.68.217.0/24 maxlen: 24 (superfluous maxlen)
                          102.68.218.0/24 maxlen: 24 (superfluous maxlen)
                          102.68.219.0/24 maxlen: 24 (superfluous maxlen)
                          102.68.220.0/22 maxlen: 22 (superfluous maxlen)
                          102.68.224.0/24 maxlen: 24 (superfluous maxlen)
                          102.68.225.0/24 maxlen: 24 (superfluous maxlen)
                          102.68.226.0/24 maxlen: 24 (superfluous maxlen)
                          102.68.227.0/24 maxlen: 24 (superfluous maxlen)
                          102.68.228.0/24 maxlen: 24 (superfluous maxlen)
                          102.68.229.0/24 maxlen: 24 (superfluous maxlen)
                          102.68.231.0/24 maxlen: 24 (superfluous maxlen)
                          102.68.232.0/24 maxlen: 24 (superfluous maxlen)
                          102.68.233.0/24 maxlen: 24 (superfluous maxlen)
                          102.68.234.0/23 maxlen: 23 (superfluous maxlen)
                          102.68.236.0/24 maxlen: 24 (superfluous maxlen)
                          102.68.237.0/24 maxlen: 24 (superfluous maxlen)
                          102.68.238.0/24 maxlen: 24 (superfluous maxlen)
                          102.68.239.0/24 maxlen: 24 (superfluous maxlen)
                          102.68.240.0/24 maxlen: 24 (superfluous maxlen)
                          102.68.241.0/24 maxlen: 24 (superfluous maxlen)
                          102.68.242.0/24 maxlen: 24 (superfluous maxlen)
                          102.68.243.0/24 maxlen: 24 (superfluous maxlen)
                          102.68.244.0/24 maxlen: 24 (superfluous maxlen)
                          102.68.245.0/24 maxlen: 24 (superfluous maxlen)
                          102.68.246.0/24 maxlen: 24 (superfluous maxlen)
                          102.68.247.0/24 maxlen: 24 (superfluous maxlen)
                          102.68.248.0/24 maxlen: 24 (superfluous maxlen)
                          102.68.249.0/24 maxlen: 24 (superfluous maxlen)
                          102.68.250.0/24 maxlen: 24 (superfluous maxlen)
                          102.68.251.0/24 maxlen: 24 (superfluous maxlen)
                          102.68.252.0/24 maxlen: 24 (superfluous maxlen)
                          102.68.253.0/24 maxlen: 24 (superfluous maxlen)
                          102.68.254.0/24 maxlen: 24 (superfluous maxlen)
                          102.68.255.0/24 maxlen: 24 (superfluous maxlen)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36303B6/AECF18CAC3BA11F198314B10CF1D38B0/Qr2m_1BzHadXh2NJvQ3fimo4DVE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36303B6/AECF18CAC3BA11F198314B10CF1D38B0/Qr2m_1BzHadXh2NJvQ3fimo4DVE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Qr2m_1BzHadXh2NJvQ3fimo4DVE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 16 Nov 2026 06:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 64 (0x40)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36303B6AF, serialNumber=42BDA6FF50731DA757876349BD0DDF8A6A380D51
        Validity
            Not Before: Nov 10 07:17:41 2026 GMT
            Not After : Dec 31 07:17:41 2036 GMT
        Subject: CN=6af2c51a-f030
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:79:71:05:f0:7e:54:c5:f6:cc:ec:fe:33:4e:
                    68:88:db:b9:fa:5f:61:ac:7f:10:66:0e:e5:61:b4:
                    57:a8:67:1b:7a:8c:a3:21:d9:e6:47:52:bc:4b:1d:
                    4d:af:4d:20:9d:04:44:30:c8:04:8b:14:d0:9c:fc:
                    a3:ab:6e:46:bd:a8:0e:bb:58:3d:b7:8a:04:45:b6:
                    09:c3:2c:8a:c9:b3:72:bc:9c:a3:8f:79:dc:a9:98:
                    8a:c1:70:a7:c9:cb:0a:d0:8b:29:12:2d:ed:d0:22:
                    0e:28:c3:59:69:48:3e:39:55:d5:b6:74:2d:29:33:
                    1d:65:15:49:a1:dc:5f:d6:13:f7:1b:4b:5a:78:10:
                    1f:f0:bc:74:3b:a7:fa:f2:c6:fe:52:c3:88:1b:e2:
                    95:76:11:3a:88:26:cd:76:f6:cc:d8:41:de:11:a2:
                    ae:48:b9:71:de:bf:45:fa:c8:af:38:c4:fc:4a:37:
                    d0:7c:08:97:78:ab:b9:a5:e1:5f:54:0f:94:62:90:
                    af:c8:c0:39:60:24:e7:4a:40:82:1a:19:77:1b:6e:
                    2b:80:50:eb:ea:fd:2e:4e:1d:80:a5:d1:2b:87:a1:
                    1e:c0:b1:0d:42:22:0a:02:00:73:c3:e2:bb:46:57:
                    4f:8c:ef:83:72:34:79:a9:fe:06:fc:1d:d8:c1:be:
                    b4:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:30:5B:DA:D8:44:B0:EC:FC:DE:DD:A2:9F:A8:BD:72:29:4E:08:92
            X509v3 Authority Key Identifier:
                keyid:42:BD:A6:FF:50:73:1D:A7:57:87:63:49:BD:0D:DF:8A:6A:38:0D:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36303B6/AECF18CAC3BA11F198314B10CF1D38B0/Qr2m_1BzHadXh2NJvQ3fimo4DVE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Qr2m_1BzHadXh2NJvQ3fimo4DVE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36303B6/AECF18CAC3BA11F198314B10CF1D38B0/D3AE546EDCD611F1827676BACE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.68.192.0-102.68.229.255
                  102.68.231.0-102.68.255.255

    Signature Algorithm: sha256WithRSAEncryption
         2e:f1:ee:4b:47:05:9a:46:4c:67:ba:79:71:67:67:c2:ee:9c:
         73:e8:48:c9:f4:35:33:4e:65:30:e9:eb:7f:04:c4:4c:bb:57:
         6f:f5:61:1c:ca:df:bd:70:ef:3c:6c:7a:1a:ac:e7:a6:49:be:
         c9:ba:5e:8f:65:64:f6:e0:dc:7e:a1:d8:d6:04:9d:d5:bc:69:
         2e:27:18:88:b1:cf:13:19:7b:4a:e1:31:c8:0b:3a:0b:ec:2f:
         78:26:43:6a:97:2d:32:1a:71:0b:6b:34:4e:32:57:d9:fd:02:
         8e:a1:c8:62:70:9b:71:9c:2a:33:e3:b9:b0:3e:69:cc:69:6a:
         27:75:66:5f:cb:4d:dd:6e:de:59:36:ab:22:cf:33:b7:5e:5a:
         12:d9:f8:b1:18:eb:89:17:63:3a:86:50:f3:72:4a:b7:60:34:
         db:36:67:78:3e:77:59:95:16:22:23:5f:63:14:d4:43:72:7f:
         62:23:05:1e:6e:9d:14:02:49:17:52:bc:19:50:25:f6:7c:a7:
         b3:4d:4c:e1:3e:2d:51:91:0a:7a:24:33:65:31:f2:f3:c6:53:
         d8:f0:8e:5d:60:b6:0c:9e:f6:82:74:28:db:0b:d2:14:04:3d:
         14:68:6e:ad:43:5b:fd:d7:ce:79:d1:3a:4d:8b:6f:a4:99:bb:
         bb:ba:19:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----