Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3678405/8AA6ADD28CE711F1BC0FEDB3CE1D38B0/EC3E8552925911F1861D7FC6CE1D38B0.roa
File:                     EC3E8552925911F1861D7FC6CE1D38B0.roa (raw, json)
Hash identifier:          wMxM6iiSP5VezernVRQAzC5Ti2yHn1gKly6ToFgfUc4=
Subject key identifier:   B2:0B:77:A1:09:E9:C7:05:E9:AE:B5:9D:29:E9:75:B9:B2:91:3E:22
Certificate issuer:       /CN=F3678405AF/serialNumber=80011779AB4AD230C47E32AD0F268C065B582739
Certificate serial:       0E
Authority key identifier: 80:01:17:79:AB:4A:D2:30:C4:7E:32:AD:0F:26:8C:06:5B:58:27:39
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/gAEXeatK0jDEfjKtDyaMBltYJzk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3678405/8AA6ADD28CE711F1BC0FEDB3CE1D38B0/EC3E8552925911F1861D7FC6CE1D38B0.roa
Signing time:             Fri 07 Aug 2026 12:17:14 +0000
ROA not before:           Fri 07 Aug 2026 12:17:10 +0000
ROA not after:            Wed 01 Jan 2031 12:17:10 +0000
asID:                     329780
IP address blocks:        102.201.208.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3678405/8AA6ADD28CE711F1BC0FEDB3CE1D38B0/gAEXeatK0jDEfjKtDyaMBltYJzk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3678405/8AA6ADD28CE711F1BC0FEDB3CE1D38B0/gAEXeatK0jDEfjKtDyaMBltYJzk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/gAEXeatK0jDEfjKtDyaMBltYJzk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 10 Oct 2026 05:46:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14 (0xe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3678405AF, serialNumber=80011779AB4AD230C47E32AD0F268C065B582739
        Validity
            Not Before: Aug  7 12:17:10 2026 GMT
            Not After : Jan  1 12:17:10 2031 GMT
        Subject: CN=6a75ccca-ca24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:83:21:ac:0e:18:35:23:bd:17:2f:fe:7f:12:
                    12:29:35:63:6c:e2:2e:c4:87:22:de:f4:1b:2b:37:
                    01:8f:7b:f4:7d:27:3a:a1:f8:6a:7a:c0:e8:c8:43:
                    7b:20:b5:ac:66:4e:be:85:4c:eb:68:ce:1d:09:c1:
                    33:16:eb:71:29:01:0b:ac:ab:d5:e2:f5:f0:01:05:
                    18:d7:40:f7:14:37:9f:88:09:3f:79:e4:48:ce:6f:
                    58:e5:ab:4b:08:51:e9:be:ae:fe:6e:1e:5e:6d:4c:
                    35:b3:ea:7b:0c:46:12:25:eb:cd:c8:46:ac:f1:67:
                    b7:50:5e:de:b2:5b:a5:3c:5c:0d:21:fa:b5:ab:41:
                    f3:ec:36:f6:16:93:72:5a:b7:94:f0:1a:a3:19:c8:
                    de:9f:4e:40:36:46:8c:ba:e7:75:09:86:6e:60:4b:
                    6b:ef:02:f4:d6:a4:0d:6b:9e:6d:2c:03:c1:16:6a:
                    5d:73:be:db:c4:e8:45:a4:2f:a3:d7:d2:f7:a3:8a:
                    95:0f:54:33:be:2d:df:8f:aa:60:a4:85:1c:b2:43:
                    43:80:98:19:57:48:7d:38:00:09:02:a4:ef:34:51:
                    6b:15:a4:99:c8:c4:88:33:52:fb:2d:25:bc:13:f2:
                    49:6d:6e:65:61:ca:22:66:8d:ac:a8:f3:37:5e:fe:
                    31:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:0B:77:A1:09:E9:C7:05:E9:AE:B5:9D:29:E9:75:B9:B2:91:3E:22
            X509v3 Authority Key Identifier:
                keyid:80:01:17:79:AB:4A:D2:30:C4:7E:32:AD:0F:26:8C:06:5B:58:27:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3678405/8AA6ADD28CE711F1BC0FEDB3CE1D38B0/gAEXeatK0jDEfjKtDyaMBltYJzk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gAEXeatK0jDEfjKtDyaMBltYJzk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3678405/8AA6ADD28CE711F1BC0FEDB3CE1D38B0/EC3E8552925911F1861D7FC6CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.201.208.0/23

    Signature Algorithm: sha256WithRSAEncryption
         91:8c:ac:79:df:bd:23:ac:9e:89:f0:1b:6d:c8:27:71:f4:4a:
         05:55:9c:58:f7:95:e0:60:39:bf:80:a4:40:4b:a5:81:6b:2c:
         8f:d8:af:ca:b9:db:3f:1b:05:8a:2d:ef:d0:9f:47:11:34:d7:
         74:57:9e:a4:7b:ed:c6:e5:ef:b0:24:f9:05:1c:a4:e7:5f:6f:
         90:cd:be:65:76:cd:4c:21:55:d9:0f:92:8d:2e:37:c4:58:f6:
         e0:24:c4:fd:81:67:c9:81:fb:e4:7e:93:06:02:df:a9:2f:0b:
         3c:f3:18:b5:ad:dc:b6:13:cd:fd:bc:71:bd:4a:1b:2f:c3:08:
         d0:39:d8:86:49:fd:bf:6c:6a:f3:af:94:9b:ae:09:f4:c3:de:
         c6:3b:02:0b:df:82:a8:01:07:fe:9f:6c:1a:0a:43:8f:13:ac:
         bf:e2:56:35:1a:03:a0:7b:6d:4a:bd:96:52:a5:c6:34:b5:39:
         5d:59:1c:12:4b:60:ab:f1:d5:a6:fc:d9:f7:c1:54:97:73:48:
         08:6c:b0:d7:cf:76:01:87:88:69:9a:2f:fc:96:56:b8:6d:4a:
         91:2a:20:08:71:c6:05:0b:d4:ad:e6:26:af:de:c0:c4:9f:e6:
         43:73:48:ea:93:dc:b5:b5:c5:b4:58:5d:5d:6b:33:46:60:4c:
         00:30:8d:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----