Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F369F058/8B32E79A553911E9A572702FF8AEA228/CF05ECFCA77411F198E04AEDCE1D38B0.roa
File:                     CF05ECFCA77411F198E04AEDCE1D38B0.roa (raw, json)
Hash identifier:          iYESV8f6QL3YpRdWWw9rt0Ncx/khSrDTjVayuJcHApQ=
Subject key identifier:   70:46:56:75:34:C0:BA:F9:CA:1E:F7:B4:5E:62:C4:06:88:76:07:FE
Certificate issuer:       /CN=F369F058AF/serialNumber=C92E885827C67619E13175703017C4442DDFEACF
Certificate serial:       0AF4
Authority key identifier: C9:2E:88:58:27:C6:76:19:E1:31:75:70:30:17:C4:44:2D:DF:EA:CF
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/yS6IWCfGdhnhMXVwMBfERC3f6s8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369F058/8B32E79A553911E9A572702FF8AEA228/CF05ECFCA77411F198E04AEDCE1D38B0.roa
Signing time:             Thu 03 Sep 2026 08:52:36 +0000
ROA not before:           Thu 03 Sep 2026 08:52:32 +0000
ROA not after:            Wed 03 Sep 2036 08:52:32 +0000
asID:                     37741
IP address blocks:        102.203.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369F058/8B32E79A553911E9A572702FF8AEA228/yS6IWCfGdhnhMXVwMBfERC3f6s8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369F058/8B32E79A553911E9A572702FF8AEA228/yS6IWCfGdhnhMXVwMBfERC3f6s8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/yS6IWCfGdhnhMXVwMBfERC3f6s8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2804 (0xaf4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369F058AF, serialNumber=C92E885827C67619E13175703017C4442DDFEACF
        Validity
            Not Before: Sep  3 08:52:32 2026 GMT
            Not After : Sep  3 08:52:32 2036 GMT
        Subject: CN=6a993554-90d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:9e:aa:06:43:97:f5:41:0c:99:7d:38:dd:b4:
                    2b:32:4a:dc:d6:f2:ea:4f:fe:6e:66:e0:df:f5:b9:
                    e3:af:ec:21:a6:01:3e:b6:b6:40:c6:df:90:9b:27:
                    51:a5:b4:62:76:a2:c5:1b:f9:95:5d:f2:2c:54:87:
                    e3:21:c6:a8:c5:59:d4:77:10:db:5f:09:af:c4:55:
                    da:99:c5:a0:16:28:6e:cb:70:36:d6:0d:68:18:c5:
                    1a:d6:2d:99:9f:4a:fb:40:85:a6:7f:37:f7:fb:f4:
                    6c:b6:4d:06:6c:b2:85:e8:a8:c2:c2:43:ca:79:54:
                    b2:bf:96:7a:6f:63:e5:2c:eb:7b:6b:6d:af:7b:92:
                    7f:2b:c7:f5:96:2c:4e:fa:ae:d6:60:07:f2:c5:ba:
                    91:a5:b1:15:f9:7d:df:86:64:2b:0f:16:76:3e:c1:
                    a5:a1:a7:f4:0a:5c:59:df:6d:c9:be:11:d0:45:bf:
                    79:04:bf:39:5d:3e:cd:cb:04:1d:d2:75:0c:9a:b4:
                    01:a2:04:e6:1e:48:07:10:a1:74:1d:b5:28:b4:a3:
                    f8:27:06:88:0a:46:3e:93:68:29:3c:bf:5f:b2:80:
                    40:00:c1:b5:a8:7c:ff:e7:c6:3e:f7:8e:f3:71:d4:
                    c0:6c:25:ca:b8:52:18:2c:da:74:b9:77:19:87:0b:
                    1c:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:46:56:75:34:C0:BA:F9:CA:1E:F7:B4:5E:62:C4:06:88:76:07:FE
            X509v3 Authority Key Identifier:
                keyid:C9:2E:88:58:27:C6:76:19:E1:31:75:70:30:17:C4:44:2D:DF:EA:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369F058/8B32E79A553911E9A572702FF8AEA228/yS6IWCfGdhnhMXVwMBfERC3f6s8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/yS6IWCfGdhnhMXVwMBfERC3f6s8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369F058/8B32E79A553911E9A572702FF8AEA228/CF05ECFCA77411F198E04AEDCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.203.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:75:78:ae:05:88:d7:49:62:d6:80:ed:fa:06:0c:51:20:24:
         d7:67:30:57:d3:3f:be:a6:07:a6:0a:2d:8e:0a:26:48:48:aa:
         6c:d1:5b:fe:1a:eb:78:9d:39:e6:29:25:f8:e4:fa:fe:22:7b:
         7d:bd:a8:7d:ac:28:e5:4f:0e:6d:a8:79:37:89:eb:e1:2a:0b:
         84:2f:19:b9:2e:d8:10:4b:71:9b:93:53:87:c2:79:50:cf:34:
         4d:c9:4d:96:09:28:1c:c0:64:4c:85:7e:f8:1f:67:1d:c1:ae:
         01:bd:97:78:5d:46:92:21:3d:aa:9f:af:e9:bf:7a:16:be:3a:
         b7:27:32:45:b8:8a:30:72:32:85:52:c2:f4:d0:ae:c6:8f:a1:
         6d:ee:da:bf:46:15:3a:9a:3e:64:a1:cd:81:c6:aa:38:2c:8b:
         a1:c8:08:b2:f1:82:f9:4a:75:10:af:6f:41:4b:a5:f2:23:08:
         75:e8:1e:ee:a4:6c:bf:97:d1:1d:11:f4:17:8e:e7:ad:ef:6b:
         27:72:13:22:b7:4f:ae:52:a1:e1:cc:de:04:f8:28:30:1d:ac:
         00:35:4a:6c:68:89:d7:b8:cc:ab:98:2a:d7:31:68:38:f9:5c:
         b8:b1:59:1d:3d:24:a0:f1:30:56:78:40:41:e3:ca:fc:b4:b1:
         e9:d3:c3:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----