Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/DB3E379ABB6511F1B4B5B20ECF1D38B0.roa
File:                     DB3E379ABB6511F1B4B5B20ECF1D38B0.roa (raw, json)
Hash identifier:          ChkJ0jDwTwGd0ybXnM3qVci48Unc/M1NFw499lBNAK0=
Subject key identifier:   F7:E9:28:6E:9F:9C:DD:C8:C2:7E:50:BE:99:69:AB:A9:E8:DC:3A:E5
Certificate issuer:       /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial:       0E07
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access:    rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/DB3E379ABB6511F1B4B5B20ECF1D38B0.roa
Signing time:             Mon 28 Sep 2026 17:55:57 +0000
ROA not before:           Mon 28 Sep 2026 17:55:53 +0000
ROA not after:            Wed 31 Dec 2036 17:55:53 +0000
asID:                     834
IP address blocks:        165.49.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
                          rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 05 Oct 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3591 (0xe07)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
        Validity
            Not Before: Sep 28 17:55:53 2026 GMT
            Not After : Dec 31 17:55:53 2036 GMT
        Subject: CN=6abaaa2d-cba3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:67:ba:ca:e6:92:b6:84:30:63:92:a5:ff:70:
                    89:ec:eb:95:0e:a1:12:64:82:90:ad:94:3a:51:39:
                    19:59:45:81:81:b8:7c:79:3a:54:cf:78:7d:83:66:
                    8f:ca:49:0f:e3:75:a7:cc:85:fb:a9:f0:df:90:e8:
                    f7:f8:28:76:81:06:b5:b2:9a:a5:1e:ea:3c:75:c6:
                    5d:85:4b:71:5e:1c:14:18:b8:a3:d5:53:4b:0e:b7:
                    5e:f1:fd:e5:38:d6:21:a4:0f:7f:ff:df:ac:65:dc:
                    8b:ea:b3:32:17:b7:28:93:a4:71:e3:15:e3:80:57:
                    08:c9:f6:f5:d6:dd:0b:9d:35:3e:6c:f9:9a:c5:5c:
                    6d:90:1e:9f:13:1d:a1:9f:ac:db:75:2c:3d:87:a6:
                    ef:af:94:9c:75:4d:b6:04:76:dd:d3:db:fd:05:f1:
                    a0:d1:c6:3d:38:b2:4f:3a:ca:83:bc:08:2f:55:8c:
                    bd:e2:c4:9e:72:18:6f:5f:85:50:f0:4f:a5:cb:eb:
                    c5:7c:d1:ce:16:7c:b8:7e:b9:e5:8f:7c:4d:0e:9e:
                    fd:69:37:05:23:56:2b:c1:ed:9c:50:13:57:21:ec:
                    6a:4b:32:b3:f9:5b:f9:72:1d:fd:a9:ea:9b:a2:46:
                    3f:9f:d7:c2:6b:bd:cd:83:dd:d9:91:38:b1:97:25:
                    a1:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:E9:28:6E:9F:9C:DD:C8:C2:7E:50:BE:99:69:AB:A9:E8:DC:3A:E5
            X509v3 Authority Key Identifier:
                keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/DB3E379ABB6511F1B4B5B20ECF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.49.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:0e:39:15:eb:67:67:ff:13:0b:39:07:a6:a0:fa:b5:4b:e3:
         85:d1:c9:de:8d:bc:40:e7:47:a7:df:c7:2c:1e:33:b6:4f:ab:
         b2:86:94:07:1d:cf:4a:aa:ca:30:00:24:2f:b6:62:a7:8c:7b:
         d7:70:a0:db:b4:4a:7d:e6:df:88:1b:be:cf:58:1a:28:d7:3a:
         1a:db:9a:9f:94:bd:21:30:e8:40:f2:31:bb:3f:6d:6d:8e:88:
         d1:44:13:09:a1:57:22:c1:50:b6:80:24:1d:e2:50:76:77:3a:
         2a:bb:03:d2:65:f7:1d:de:7e:ed:90:fe:05:e7:c9:65:df:33:
         1e:38:1b:6c:46:3c:69:cf:7f:7d:c7:65:ca:06:f5:13:bf:9b:
         06:18:d2:34:fb:cd:b5:b1:fe:bb:aa:0b:58:e9:bf:89:fb:e6:
         17:6d:dd:50:f9:13:00:eb:0d:b8:1a:a6:49:89:8e:f3:77:c6:
         85:23:89:54:c2:df:59:a3:f4:88:cf:55:e1:70:17:89:12:b7:
         02:91:f3:e0:0a:ff:fd:8b:39:a6:77:2c:e8:e6:55:47:9b:d9:
         09:a5:35:d1:a5:f0:fa:52:85:16:7d:b3:06:48:ab:58:1d:3d:
         be:94:c5:d7:1b:85:a5:5b:a1:87:20:e0:72:64:b3:29:1d:5a:
         20:00:b7:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----