Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/A6936988B26F11F1A72D45E9CE1D38B0.roa
File:                     A6936988B26F11F1A72D45E9CE1D38B0.roa (raw, json)
Hash identifier:          6xinj4LVJNKYOKspSbF+3FBHjruSh//qn4mvCFKWPWE=
Subject key identifier:   BD:FC:7E:2A:1E:29:FE:BB:92:21:DD:B7:B4:D9:9A:47:A3:62:64:32
Certificate issuer:       /CN=F364712FAF/serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
Certificate serial:       08ED
Authority key identifier: 3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/A6936988B26F11F1A72D45E9CE1D38B0.roa
Signing time:             Thu 17 Sep 2026 08:13:23 +0000
ROA not before:           Thu 17 Sep 2026 08:13:19 +0000
ROA not after:            Wed 31 Dec 2036 08:13:19 +0000
asID:                     29975
IP address blocks:        41.31.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2285 (0x8ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364712FAF, serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
        Validity
            Not Before: Sep 17 08:13:19 2026 GMT
            Not After : Dec 31 08:13:19 2036 GMT
        Subject: CN=6aaba123-2339
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a1:ad:79:cd:8c:9c:d4:cd:5f:a6:8c:2b:9d:
                    93:eb:89:40:d5:57:af:f1:3f:3f:db:66:dd:5a:33:
                    26:47:bb:7b:58:d2:bd:d6:33:4d:61:7f:c5:c1:4b:
                    a3:31:6e:5f:42:8b:29:1f:60:57:84:d3:09:76:85:
                    2d:af:86:ae:d1:61:9a:9f:34:7f:35:30:06:b6:98:
                    13:7e:91:8c:6a:9f:97:ad:28:4b:6c:5f:aa:1c:91:
                    34:ba:e1:d4:98:94:c5:87:df:41:05:44:5d:c7:ae:
                    44:6c:48:85:2d:7f:c2:59:52:b9:73:70:9e:62:57:
                    ae:36:5a:33:0f:ff:5e:a6:ed:d1:c2:b8:3c:99:01:
                    3f:07:d6:16:cf:c2:29:71:d5:73:63:52:93:fc:b6:
                    7e:66:71:e1:f1:08:12:e2:3c:4b:6a:13:f3:8d:ce:
                    13:3f:b8:44:21:7c:c7:51:ae:81:dd:ef:04:4a:01:
                    77:0f:0b:08:a4:b9:72:ca:78:cb:5e:87:d2:cc:ed:
                    3e:b3:d3:80:c3:88:88:00:04:0a:a5:05:28:b7:0e:
                    ce:43:48:ed:79:2a:80:b3:3b:d1:e2:97:d6:e2:80:
                    a2:52:92:17:94:93:a4:11:4a:93:8d:a1:15:df:be:
                    01:6a:cd:5c:72:23:09:18:eb:46:45:ac:ca:09:7a:
                    07:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:FC:7E:2A:1E:29:FE:BB:92:21:DD:B7:B4:D9:9A:47:A3:62:64:32
            X509v3 Authority Key Identifier:
                keyid:3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/A6936988B26F11F1A72D45E9CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.31.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         84:59:32:2e:1c:ad:2a:7e:d8:ac:4a:66:bf:d0:a2:6e:4a:31:
         e6:29:bb:f3:e3:24:bc:e2:6b:1f:b6:fc:ba:63:a8:1b:75:eb:
         53:d0:a2:a3:23:b0:31:4f:d0:eb:00:16:20:52:97:f8:df:bf:
         4a:1c:5f:1e:cd:6a:42:d1:98:49:17:54:8a:fa:e2:6b:9a:d3:
         d3:83:5b:52:ce:38:1b:11:2f:83:80:f9:88:6b:34:ea:d8:55:
         1a:b6:31:3c:9c:77:4e:46:b0:ae:ae:46:ac:9f:81:6a:70:99:
         cf:8e:d7:ea:4c:4c:06:68:59:16:4e:ef:e8:90:74:d2:2d:83:
         7e:ab:0c:2e:d4:77:ac:91:ec:19:75:25:c1:98:ad:7e:73:25:
         de:b7:57:62:51:df:83:6b:14:ac:7f:5a:4c:c5:7c:56:d6:8b:
         88:eb:e5:c2:ca:36:41:93:63:5b:cc:9d:73:ad:f9:88:c7:4f:
         9d:fc:62:c1:f1:42:e2:c7:f6:2d:76:62:28:42:42:24:86:41:
         2f:d9:01:42:12:19:2f:b8:8c:6a:47:91:df:33:67:2d:f7:12:
         95:b9:ce:33:ac:16:1f:f7:1a:b7:c4:af:a0:6d:a4:3c:3a:3b:
         13:69:e7:c5:e4:f7:35:50:dd:b2:45:58:8c:d8:6e:a5:20:2c:
         c7:9e:4d:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----