Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/8CEA8496B33011F1947544FACE1D38B0.roa
File:                     8CEA8496B33011F1947544FACE1D38B0.roa (raw, json)
Hash identifier:          lzANwsOEryU/tCQVhW/gZeyCFO1zgp6nVVBXWK6vnkU=
Subject key identifier:   CE:66:B7:B5:E7:69:75:B9:FA:04:C2:EC:8C:27:C9:1C:C0:4F:AA:24
Certificate issuer:       /CN=F364712FAF/serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
Certificate serial:       08FE
Authority key identifier: 3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/8CEA8496B33011F1947544FACE1D38B0.roa
Signing time:             Fri 18 Sep 2026 07:14:13 +0000
ROA not before:           Fri 18 Sep 2026 07:14:09 +0000
ROA not after:            Wed 31 Dec 2036 07:14:09 +0000
asID:                     29975
IP address blocks:        105.250.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 02 Oct 2026 00:07:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2302 (0x8fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364712FAF, serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
        Validity
            Not Before: Sep 18 07:14:09 2026 GMT
            Not After : Dec 31 07:14:09 2036 GMT
        Subject: CN=6aace4c5-27dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:b9:23:8f:e0:f6:01:75:2e:c9:ca:0f:27:3b:
                    27:99:ed:6c:46:c5:f4:3f:5d:ea:66:b0:17:34:06:
                    6a:7f:bf:c7:31:90:6f:99:49:87:49:09:0e:34:24:
                    35:f1:62:bc:15:de:5c:a0:15:47:6b:6c:28:e4:9d:
                    b1:63:7b:37:f2:c4:ad:6c:71:2a:1b:bf:69:77:13:
                    a9:1e:4a:b6:b8:ae:fc:b9:11:7a:63:ef:4c:c6:ce:
                    d0:8a:24:16:1b:4b:e1:01:dd:03:87:e7:f4:02:9a:
                    5e:18:a6:61:c1:3d:64:0e:82:19:0b:5d:a2:c5:c0:
                    02:3a:01:b4:67:2f:9f:79:22:83:56:83:29:fa:f6:
                    2e:c3:6a:47:62:a8:9c:38:cf:94:46:86:f7:56:d6:
                    4d:88:9e:a8:98:26:06:72:2a:12:23:50:4e:19:9d:
                    db:ac:2f:95:cd:28:b5:ac:94:95:4d:63:95:66:bf:
                    60:86:77:99:24:1f:cf:0b:57:b3:90:93:fa:59:c4:
                    e4:b4:fa:a6:48:e3:66:88:58:96:e0:59:45:57:e5:
                    e5:1c:96:f2:5a:40:43:8c:f0:c4:bd:a1:b1:8e:57:
                    81:1a:9d:6d:37:7b:e5:6a:bd:f0:11:2a:1f:fd:9b:
                    25:bd:a4:d6:36:a0:75:b5:05:c8:34:d9:5e:5a:07:
                    df:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:66:B7:B5:E7:69:75:B9:FA:04:C2:EC:8C:27:C9:1C:C0:4F:AA:24
            X509v3 Authority Key Identifier:
                keyid:3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/8CEA8496B33011F1947544FACE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  105.250.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         ce:91:ef:1b:75:86:5e:e4:dc:b3:cb:f5:30:01:d2:5c:79:bb:
         bd:37:5b:22:98:84:00:67:a8:10:4f:3c:81:d7:db:5e:81:5f:
         38:19:50:0b:95:47:64:65:c8:ad:37:98:0f:35:28:d6:ff:ba:
         a3:12:40:8b:38:93:0c:2a:d0:c5:36:aa:24:48:66:d9:e2:fa:
         82:0c:bf:e5:d6:95:28:21:62:75:ed:3a:1b:01:dd:e4:fa:13:
         10:78:1b:68:aa:68:38:40:3c:a2:a4:60:7f:13:aa:ae:77:92:
         24:5a:0c:3d:59:6f:06:1d:9c:20:62:14:97:47:4d:88:1b:6f:
         89:e3:9c:1b:d8:c0:b8:05:e6:8f:9d:a0:78:51:ab:79:c2:db:
         a4:00:9f:e9:9d:6a:a4:a9:14:60:14:73:b4:46:29:18:ce:df:
         c7:88:3b:c1:31:91:27:6a:ba:6d:aa:b5:6b:73:e5:b8:d1:df:
         4a:02:55:86:08:af:e6:4e:76:fb:e6:67:c0:33:b8:30:4d:33:
         21:4e:ba:85:3a:13:58:46:c9:aa:8d:bb:a6:ab:66:7d:44:be:
         a1:bc:1b:21:11:dc:91:98:6c:84:18:38:d9:02:a5:23:f2:a0:
         28:f4:f0:4e:47:c0:52:39:68:f5:98:f1:b8:f3:0f:41:c3:47:
         70:e9:fd:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----