Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/2B05B3C6B33B11F185BD0CB9CE1D38B0.roa
File:                     2B05B3C6B33B11F185BD0CB9CE1D38B0.roa (raw, json)
Hash identifier:          lqn8tLXwn9XXs4zps0WEWH9iwcq91Hxunq1u3GvzDac=
Subject key identifier:   CC:77:56:AE:49:83:E6:65:E2:AF:D3:D8:76:76:D1:B7:DE:CD:C5:05
Certificate issuer:       /CN=F364712FAF/serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
Certificate serial:       0917
Authority key identifier: 3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/2B05B3C6B33B11F185BD0CB9CE1D38B0.roa
Signing time:             Fri 18 Sep 2026 08:30:13 +0000
ROA not before:           Fri 18 Sep 2026 08:30:09 +0000
ROA not after:            Wed 31 Dec 2036 08:30:09 +0000
asID:                     29975
IP address blocks:        105.253.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2327 (0x917)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364712FAF, serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
        Validity
            Not Before: Sep 18 08:30:09 2026 GMT
            Not After : Dec 31 08:30:09 2036 GMT
        Subject: CN=6aacf695-0a3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b2:a0:f6:4c:c1:93:b9:7c:a3:1e:ae:d5:cd:
                    ec:64:78:d8:a3:42:96:dd:28:ca:d5:0e:66:85:02:
                    f0:6d:ec:a2:03:49:c0:5a:1d:4c:df:a7:58:fa:f4:
                    71:a3:9e:51:69:87:97:11:71:f2:73:1c:b2:2f:d7:
                    6f:b5:88:16:ac:1e:5b:3b:bc:a1:74:bd:db:2b:11:
                    c3:6c:81:34:de:b1:b7:12:fc:d3:63:34:fd:da:c5:
                    ac:c5:85:45:e5:1f:64:3c:c0:42:d3:be:79:cd:4e:
                    75:6d:80:3f:0c:66:f8:ba:37:19:1b:e0:99:8e:3e:
                    84:e0:af:cc:0f:83:a2:c4:1c:91:88:4d:1c:32:cd:
                    bc:ea:89:9b:68:bb:2e:e3:d7:b5:09:01:61:0b:a4:
                    80:06:c1:6e:dc:04:4a:60:7a:10:f6:cc:33:93:72:
                    bb:09:0c:d5:6d:c8:f7:7e:10:d7:a1:e5:ae:29:62:
                    3e:cd:09:3b:28:d5:c3:bf:3b:c3:13:95:0b:ce:a6:
                    6e:4d:4d:27:03:3f:0d:8f:c7:a4:f5:d4:60:0c:09:
                    66:7c:99:22:78:f7:01:55:84:68:6c:df:42:3f:b3:
                    3a:7a:fe:7b:af:44:69:1b:de:ef:ad:6b:32:bf:eb:
                    94:73:56:bb:55:14:b0:d3:d9:83:bd:0f:ba:4d:a5:
                    7e:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:77:56:AE:49:83:E6:65:E2:AF:D3:D8:76:76:D1:B7:DE:CD:C5:05
            X509v3 Authority Key Identifier:
                keyid:3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/2B05B3C6B33B11F185BD0CB9CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  105.253.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         31:63:e2:c8:a9:e2:5a:af:ba:51:fb:33:3b:20:4a:60:6c:61:
         c7:1d:1e:04:10:ef:d1:d9:31:65:4b:7e:8a:04:9e:32:81:13:
         0e:44:e2:35:68:9a:ed:1e:8b:30:21:c7:ad:76:d4:ff:cb:44:
         8a:e3:7e:96:bb:27:58:d4:b3:b1:e9:43:b0:83:6a:05:6d:67:
         d1:02:d2:ee:c7:cf:83:5e:11:16:52:9a:46:76:79:92:b4:99:
         53:8d:6e:5b:4e:81:c3:d1:37:68:3d:50:ce:69:21:a9:1b:f5:
         ed:82:39:a0:d4:a6:3a:a5:4e:3c:a8:8c:56:29:00:f5:9a:f5:
         cf:fb:25:ad:c5:8a:ac:22:ff:b2:a8:c2:a2:4c:17:38:1e:44:
         13:eb:6f:da:51:cf:0b:6f:ca:d1:0f:92:5c:73:df:ad:5f:8b:
         5a:ea:24:6e:23:a2:5c:36:22:0c:44:58:41:b9:de:44:ad:cb:
         19:a6:c2:6d:ee:f1:c0:2a:c3:a9:7e:16:7d:4b:8b:90:6a:30:
         36:8a:4a:b8:98:20:e3:9b:8b:91:54:87:ea:d5:e4:9e:0b:9e:
         86:d0:b5:23:34:dc:b8:5c:1b:b6:27:59:8f:bc:df:5c:bc:28:
         07:39:89:5c:75:5d:7f:8f:08:d0:19:30:05:4c:a2:53:3c:f9:
         9a:42:65:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----