Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/606DAB4AB33111F1A154ADFECE1D38B0.roa
File:                     606DAB4AB33111F1A154ADFECE1D38B0.roa (raw, json)
Hash identifier:          ME0F2zdYu30gsI7RTcO6nQWpHeFKSh/S+Q/KGXsvDnE=
Subject key identifier:   C9:BE:6A:1E:5C:6E:05:B7:5B:11:56:1F:55:31:2B:04:14:56:78:54
Certificate issuer:       /CN=F364712FAF/serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
Certificate serial:       0908
Authority key identifier: 3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/606DAB4AB33111F1A154ADFECE1D38B0.roa
Signing time:             Fri 18 Sep 2026 07:20:08 +0000
ROA not before:           Fri 18 Sep 2026 07:20:04 +0000
ROA not after:            Wed 31 Dec 2036 07:20:04 +0000
asID:                     29975
IP address blocks:        105.252.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2312 (0x908)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364712FAF, serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
        Validity
            Not Before: Sep 18 07:20:04 2026 GMT
            Not After : Dec 31 07:20:04 2036 GMT
        Subject: CN=6aace628-facb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:42:18:83:df:56:76:95:5a:f5:86:33:20:41:
                    c1:89:86:f0:59:fd:6c:80:8f:5b:96:73:de:d0:4f:
                    98:71:35:62:24:76:a3:f3:90:72:07:42:f7:38:71:
                    f9:3c:ca:10:0a:3a:8b:be:d5:cc:1d:2a:1d:75:2a:
                    c9:4b:53:80:47:32:e0:be:06:2e:7f:63:70:6e:16:
                    4e:2d:f4:55:04:98:7c:9f:79:b3:35:5f:a9:a0:aa:
                    8e:c9:d9:78:f7:4e:bf:5d:69:16:2a:d3:3d:85:23:
                    81:29:b8:ed:94:43:74:ea:5e:c4:d7:88:05:b7:b7:
                    01:f8:3a:83:19:c2:d9:90:61:fb:e5:ee:80:70:33:
                    6f:29:97:80:fa:61:10:dc:fe:95:2c:eb:26:24:b7:
                    c1:8b:ba:25:06:4c:63:25:93:a4:09:ce:70:17:01:
                    dc:98:be:68:cc:6f:86:73:2b:25:6e:fc:30:40:42:
                    01:22:2c:09:24:50:b7:cc:27:ec:18:70:b0:b7:cb:
                    02:8d:03:43:40:59:e7:d6:c2:d1:5b:00:bc:79:cb:
                    28:c5:64:14:bc:09:a9:2f:99:00:9c:51:b0:c0:74:
                    cb:8c:8f:0d:c0:27:70:d2:4a:4c:87:b1:b5:15:d9:
                    11:46:48:55:a7:ca:32:4c:35:1d:71:b3:c6:80:83:
                    f3:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:BE:6A:1E:5C:6E:05:B7:5B:11:56:1F:55:31:2B:04:14:56:78:54
            X509v3 Authority Key Identifier:
                keyid:3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/606DAB4AB33111F1A154ADFECE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  105.252.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         a1:4f:57:ae:13:fd:62:44:2d:cb:81:e5:a3:d2:17:ff:1c:17:
         66:d4:4a:07:96:dd:8f:af:a5:44:5b:ed:87:e5:b6:ae:24:81:
         bb:6a:f2:fe:e0:1c:8e:2d:93:66:eb:9d:83:f6:e6:63:41:2d:
         63:c5:9d:6a:08:f9:71:ac:ff:f2:e0:17:33:4d:9c:e4:1a:3b:
         62:8a:1d:aa:80:c5:8a:e2:d6:7c:27:f8:5a:87:02:60:74:9e:
         b5:72:90:8c:8b:98:15:02:67:fb:d8:84:0b:70:cd:cf:38:1a:
         bc:c6:18:02:f7:a7:f5:dc:2b:c3:a2:02:7e:1d:f5:2d:9f:97:
         49:4e:a4:52:f2:7d:ef:18:60:c2:32:ad:55:ba:ff:cc:88:29:
         ee:cd:4a:6e:49:5f:4b:71:da:23:54:2e:36:fc:b0:6a:83:5b:
         0e:05:87:74:47:ee:09:e2:46:eb:b2:d2:f0:e5:22:7d:c7:c0:
         b3:31:29:b7:85:44:e2:de:a5:f3:df:2e:88:cc:b1:70:77:88:
         d4:30:d9:2d:c3:ec:b8:9a:00:b8:d9:3d:c9:ba:59:4d:b1:f6:
         79:4c:c3:d7:5f:24:ee:66:ad:10:fe:e1:db:5e:48:5a:a4:3b:
         2e:4c:b9:7a:26:e2:a1:46:79:fd:8a:7f:44:67:44:9a:e2:9f:
         cb:a1:a6:9f
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCQgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NDcxMkZBRjExMC8GA1UEBRMoM0Q1NUM3ODRFQTE3OTEyRjBFOTYwQTI1QzZDQTky
MEUxMDAyMzAwQTAeFw0yNjA5MTgwNzIwMDRaFw0zNjEyMzEwNzIwMDRaMBgxFjAU
BgNVBAMTDTZhYWNlNjI4LWZhY2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDQQhiD31Z2lVr1hjMgQcGJhvBZ/WyAj1uWc97QT5hxNWIkdqPzkHIHQvc4
cfk8yhAKOou+1cwdKh11KslLU4BHMuC+Bi5/Y3BuFk4t9FUEmHyfebM1X6mgqo7J
2Xj3Tr9daRYq0z2FI4EpuO2UQ3TqXsTXiAW3twH4OoMZwtmQYfvl7oBwM28pl4D6
YRDc/pUs6yYkt8GLuiUGTGMlk6QJznAXAdyYvmjMb4ZzKyVu/DBAQgEiLAkkULfM
J+wYcLC3ywKNA0NAWefWwtFbALx5yyjFZBS8CakvmQCcUbDAdMuMjw3AJ3DSSkyH
sbUV2RFGSFWnyjJMNR1xs8aAg/M3AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUyb5q
HlxuBbdbEVYfVTErBBRWeFQwHwYDVR0jBBgwFoAUPVXHhOoXkS8OlgolxsqSDhAC
MAowDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjQ3MTJGL0U5QzRCQUEyQTBFODExRUI4ODk1OEQxMEY4QUVBMjI4L1BWWEho
T29Ya1M4T2xnb2x4c3FTRGhBQ01Bby5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1BWWEhoT29Ya1M4T2xnb2x4c3FTRGhBQ01Bby5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjQ3MTJGL0U5QzRCQUEyQTBFODExRUI4ODk1OEQxMEY4
QUVBMjI4LzYwNkRBQjRBQjMzMTExRjFBMTU0QURGRUNFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAZp/AAwDQYJKoZIhvcNAQEL
BQADggEBAKFPV64T/WJELcuB5aPSF/8cF2bUSgeW3Y+vpURb7Yfltq4kgbtq8v7g
HI4tk2brnYP25mNBLWPFnWoI+XGs//LgFzNNnOQaO2KKHaqAxYri1nwn+FqHAmB0
nrVykIyLmBUCZ/vYhAtwzc84GrzGGAL3p/XcK8OiAn4d9S2fl0lOpFLyfe8YYMIy
rVW6/8yIKe7NSm5JX0tx2iNULjb8sGqDWw4Fh3RH7gniRuuy0vDlIn3HwLMxKbeF
ROLepfPfLojMsXB3iNQw2S3D7LiaALjZPcm6WU2x9nlMw9dfJO5mrRD+4dteSFqk
Oy5MuXom4qFGef2Kf0RnRJrin8uhpp8=
-----END CERTIFICATE-----