Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/C59F7FE8B58E11F19B2E2603CF1D38B0.roa
File:                     C59F7FE8B58E11F19B2E2603CF1D38B0.roa (raw, json)
Hash identifier:          rgym20CFKxjYeh52lsQJKC/ghwcjGnipyoN1bzNCgbc=
Subject key identifier:   05:F7:D8:DF:D7:7C:F6:F9:F8:F0:63:97:22:61:1A:5E:49:ED:0D:5D
Certificate issuer:       /CN=F364712FAF/serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
Certificate serial:       0924
Authority key identifier: 3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/C59F7FE8B58E11F19B2E2603CF1D38B0.roa
Signing time:             Mon 21 Sep 2026 07:33:43 +0000
ROA not before:           Mon 21 Sep 2026 07:33:39 +0000
ROA not after:            Wed 31 Dec 2036 07:33:39 +0000
asID:                     29975
IP address blocks:        196.46.168.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Sep 2026 00:07:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2340 (0x924)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364712FAF, serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
        Validity
            Not Before: Sep 21 07:33:39 2026 GMT
            Not After : Dec 31 07:33:39 2036 GMT
        Subject: CN=6ab0ddd7-64d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:0b:db:3c:a7:f3:96:0c:8d:b2:d9:9a:cb:b3:
                    22:34:a1:de:93:f3:1a:fe:0d:4c:04:c5:db:83:b8:
                    d5:4f:f9:22:b7:13:bd:69:9f:b1:0e:a6:5d:1e:55:
                    0e:ee:62:41:59:c6:49:06:ff:f1:6c:c6:5e:fd:0e:
                    79:0c:ca:55:a4:b4:05:e7:81:89:2d:27:55:a6:0f:
                    f2:cf:49:e5:7c:8b:d6:77:f4:5c:19:4b:38:a9:45:
                    5c:6d:1e:04:49:cc:48:9f:13:7f:f2:23:3f:31:a0:
                    1f:ca:0d:02:0c:51:a8:b4:c5:eb:11:1f:97:43:4d:
                    73:1c:37:e2:a8:90:97:c5:74:14:0d:49:d1:36:4c:
                    b4:59:70:01:7a:32:0d:6b:4e:e3:7d:07:b0:03:16:
                    eb:89:1f:1a:2a:af:87:67:dd:f4:b4:99:97:81:29:
                    6f:3a:db:d1:0d:fa:00:42:22:d0:b6:d0:06:61:4a:
                    99:06:fd:ff:54:9a:92:1e:ef:18:bf:9d:65:f3:a1:
                    71:57:fd:4f:c4:91:3b:cd:61:57:5f:06:43:ba:e9:
                    c0:f1:dd:bc:68:d7:72:06:99:44:1b:98:dc:d5:ba:
                    6d:a2:60:7c:01:c8:86:a6:f7:e1:94:2e:23:01:07:
                    e4:7b:bd:d7:ec:9a:e8:6d:35:4a:b2:ce:56:9d:14:
                    0a:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:F7:D8:DF:D7:7C:F6:F9:F8:F0:63:97:22:61:1A:5E:49:ED:0D:5D
            X509v3 Authority Key Identifier:
                keyid:3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/C59F7FE8B58E11F19B2E2603CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.46.168.0/21

    Signature Algorithm: sha256WithRSAEncryption
         94:1e:2b:80:07:80:17:07:15:90:6b:86:51:f5:b2:d9:0a:a2:
         5b:ac:24:f4:45:60:ce:70:ff:0d:e3:45:65:4b:fd:b8:fe:38:
         23:3f:ef:97:9a:ec:a0:0a:fa:12:77:5c:5d:f6:57:79:f2:b2:
         a1:d2:f4:15:88:e5:36:8c:c2:58:e8:b2:48:df:0b:ef:85:c1:
         fe:47:e4:af:3f:b7:8a:36:a9:c4:20:64:ef:2e:ff:49:8d:98:
         2d:19:8f:a4:2b:1f:25:e9:61:87:6a:cd:ae:31:51:b4:69:08:
         f5:2d:f1:de:a2:f3:ee:4a:10:b4:ea:2b:f9:b4:bd:0a:6b:6d:
         a4:9d:f7:65:4b:c7:d7:0d:72:e5:12:ea:b0:e7:14:19:e2:0d:
         78:f0:35:c5:a4:81:7a:ab:7c:17:61:ec:a0:10:7b:9e:f4:24:
         d6:45:2c:60:04:37:ba:88:75:69:90:56:19:f5:b8:b8:f7:30:
         c8:3b:db:9c:7c:f2:75:61:39:e1:06:66:ba:6b:1a:ad:3e:8c:
         e4:27:65:5b:57:4c:b6:2a:c9:0a:de:87:40:e8:ec:d6:0e:0d:
         1f:f0:7e:b5:3a:57:b8:35:93:1a:58:41:af:b4:32:32:d4:98:
         c1:d0:ab:db:89:05:0b:64:81:74:7f:91:77:02:f9:5d:3c:1f:
         d7:24:d1:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----