Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/09617D02B33311F1AD159E0ACF1D38B0.roa
File:                     09617D02B33311F1AD159E0ACF1D38B0.roa (raw, json)
Hash identifier:          5iaTlx5gzUIN3R81LmEyoPaL2ui8Qg3TjcHecJboERM=
Subject key identifier:   3E:28:58:9A:DF:2E:7B:51:27:D5:23:12:03:C2:73:EE:5D:09:E8:50
Certificate issuer:       /CN=F364712FAF/serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
Certificate serial:       0911
Authority key identifier: 3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/09617D02B33311F1AD159E0ACF1D38B0.roa
Signing time:             Fri 18 Sep 2026 07:32:01 +0000
ROA not before:           Fri 18 Sep 2026 07:31:57 +0000
ROA not after:            Wed 31 Dec 2036 07:31:57 +0000
asID:                     29975
IP address blocks:        105.250.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 10 Oct 2026 02:05:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2321 (0x911)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364712FAF, serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
        Validity
            Not Before: Sep 18 07:31:57 2026 GMT
            Not After : Dec 31 07:31:57 2036 GMT
        Subject: CN=6aace8f1-df7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:e2:30:36:6c:43:c3:92:55:25:2a:f2:da:91:
                    13:7e:32:46:d4:57:79:91:fc:47:fd:8d:2d:94:9a:
                    62:31:51:2e:ac:2a:f9:ba:2b:d6:57:84:18:27:e4:
                    1a:98:e5:ad:21:52:2b:1d:1a:a7:dc:19:ac:05:f4:
                    a1:49:29:05:8a:ec:c6:48:55:79:13:86:27:71:2d:
                    97:e1:79:4f:7e:3b:da:7f:2f:b7:98:f8:33:55:db:
                    ad:37:7e:ad:43:38:1a:9a:0b:13:84:9a:e4:26:bf:
                    90:12:b8:07:c8:c0:a2:1d:f0:1f:61:e5:00:01:8a:
                    7a:84:13:42:5f:15:f4:bd:02:e8:23:7c:f6:57:ff:
                    69:0a:fa:ae:5e:78:5e:e4:77:61:29:df:28:3a:7c:
                    47:63:c6:06:97:25:dc:9f:cb:c3:d9:5e:02:37:c6:
                    55:07:70:a5:5a:0e:ca:14:2d:49:f7:db:6b:3b:a7:
                    af:1b:5f:7a:69:c6:3c:ae:bc:9b:8a:85:db:77:f9:
                    ec:b7:74:b8:7c:99:df:6c:da:23:63:0c:06:ce:b5:
                    af:df:7d:cf:86:06:53:76:6c:ce:74:30:df:a9:19:
                    85:20:2f:f7:01:c0:ce:8d:cb:89:85:9a:89:7e:e8:
                    dc:93:3f:26:9d:0f:4e:a9:86:5e:af:20:47:aa:20:
                    01:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:28:58:9A:DF:2E:7B:51:27:D5:23:12:03:C2:73:EE:5D:09:E8:50
            X509v3 Authority Key Identifier:
                keyid:3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/09617D02B33311F1AD159E0ACF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  105.250.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         9a:27:13:cf:34:20:40:4f:40:ec:72:49:cf:50:63:7c:0a:d7:
         d1:7f:9f:49:28:0b:5d:5c:36:4a:5c:dd:26:7e:9b:42:16:bd:
         47:5a:54:3e:5f:6c:7e:ee:fd:81:b0:76:b0:4b:a1:40:84:f9:
         61:bd:76:8f:6d:c7:d5:55:c8:9c:76:df:4a:39:3e:73:8b:98:
         01:04:09:24:d3:6e:db:6e:ff:2f:fc:f6:fc:89:ee:e1:f4:9c:
         df:d9:e3:f9:bd:3a:f9:12:dc:c6:8c:e8:f7:ee:82:ab:f5:ac:
         c8:07:da:8a:b0:65:ba:75:14:ee:be:aa:73:a0:9a:5b:ca:ea:
         37:a0:4b:fc:b9:78:d4:5e:47:f4:f4:95:0e:81:0a:3f:82:98:
         cc:0e:82:d0:2f:1f:92:13:9a:bb:db:d1:1f:b1:ce:b9:e5:f6:
         33:68:73:48:81:43:59:8a:0c:90:c0:f9:ae:1f:4c:20:81:d6:
         bd:48:8d:eb:c0:6b:72:b2:c3:bb:83:bc:4f:9a:99:1c:3a:a2:
         2b:db:87:be:39:1b:d7:89:8c:c7:f3:5f:5e:6b:27:95:d5:2c:
         be:ec:bc:49:81:b3:5e:03:1f:a4:8a:47:fe:66:0b:30:45:cb:
         77:8a:e4:47:7f:68:49:6b:fc:74:7f:b6:39:74:02:c6:20:22:
         5b:86:e6:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----