Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36C6E7C/2BD3F1B6590111EDA097F2F0F1222468/3A8303D0927011F1B38B24CCCE1D38B0.roa
File:                     3A8303D0927011F1B38B24CCCE1D38B0.roa (raw, json)
Hash identifier:          ARSQ479hTds7f4R2wC4oFh5+D2OTaRvG5A9HR5RJPoQ=
Subject key identifier:   0D:00:1D:26:1B:3C:87:4D:AC:B0:86:12:D0:42:D1:CB:07:D0:8D:CC
Certificate issuer:       /CN=F36C6E7CAF/serialNumber=83DD126E5E585FFA93F5F1FF5DEEF6FFFDBBFFA6
Certificate serial:       059C
Authority key identifier: 83:DD:12:6E:5E:58:5F:FA:93:F5:F1:FF:5D:EE:F6:FF:FD:BB:FF:A6
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/g90Sbl5YX_qT9fH_Xe72__27_6Y.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C6E7C/2BD3F1B6590111EDA097F2F0F1222468/3A8303D0927011F1B38B24CCCE1D38B0.roa
Signing time:             Fri 07 Aug 2026 14:56:54 +0000
ROA not before:           Fri 07 Aug 2026 14:56:50 +0000
ROA not after:            Fri 01 Oct 2032 14:56:50 +0000
asID:                     328474
IP address blocks:        102.214.192.0/24 maxlen: 24
                          102.214.193.0/24 maxlen: 24
                          102.214.194.0/24 maxlen: 24
                          102.214.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C6E7C/2BD3F1B6590111EDA097F2F0F1222468/g90Sbl5YX_qT9fH_Xe72__27_6Y.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C6E7C/2BD3F1B6590111EDA097F2F0F1222468/g90Sbl5YX_qT9fH_Xe72__27_6Y.mft
                          rsync://rpki.afrinic.net/repository/afrinic/g90Sbl5YX_qT9fH_Xe72__27_6Y.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 03 Oct 2026 00:07:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1436 (0x59c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C6E7CAF, serialNumber=83DD126E5E585FFA93F5F1FF5DEEF6FFFDBBFFA6
        Validity
            Not Before: Aug  7 14:56:50 2026 GMT
            Not After : Oct  1 14:56:50 2032 GMT
        Subject: CN=6a75f236-b466
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:be:1b:c4:2b:ea:60:51:44:fb:b9:2d:f3:16:
                    23:da:1c:e2:63:4a:6b:c6:1c:4a:35:62:83:bc:ba:
                    f2:9f:9c:bb:2a:df:c2:9d:bc:18:ec:fd:21:d4:56:
                    c2:56:2d:79:d9:05:a9:c8:01:6a:13:85:93:9a:e5:
                    6c:dc:d2:cd:6c:3c:20:b7:87:95:8d:82:b1:95:c1:
                    ec:27:9b:3d:29:8d:3b:42:22:02:cc:b0:31:a8:c8:
                    88:64:b8:a7:e7:71:c7:43:7f:55:f5:60:37:87:b0:
                    41:18:82:96:6b:d0:22:1a:01:15:ee:36:c3:e1:7e:
                    23:e7:a1:b5:98:63:2d:e1:0c:d2:21:0b:16:9c:80:
                    df:7d:1e:27:ff:86:1d:66:3e:10:b2:d5:4f:fb:74:
                    27:09:18:e0:a3:9f:4a:28:17:e3:94:a8:30:57:35:
                    bc:27:c6:07:df:14:3b:c2:29:f6:05:1f:66:d9:40:
                    95:3c:8c:39:6d:9c:7f:6e:be:a0:5b:cc:fe:54:bc:
                    e4:24:ee:a5:e2:ff:76:a3:1c:ef:30:1b:cc:87:59:
                    6d:97:1e:f2:60:99:7e:56:8f:d8:28:45:97:c7:dc:
                    87:6e:0d:44:d3:41:f5:67:c1:4b:eb:9c:d1:cf:ef:
                    10:af:2b:e5:04:b3:17:8a:eb:01:b6:6d:e7:71:3b:
                    be:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:00:1D:26:1B:3C:87:4D:AC:B0:86:12:D0:42:D1:CB:07:D0:8D:CC
            X509v3 Authority Key Identifier:
                keyid:83:DD:12:6E:5E:58:5F:FA:93:F5:F1:FF:5D:EE:F6:FF:FD:BB:FF:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C6E7C/2BD3F1B6590111EDA097F2F0F1222468/g90Sbl5YX_qT9fH_Xe72__27_6Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/g90Sbl5YX_qT9fH_Xe72__27_6Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C6E7C/2BD3F1B6590111EDA097F2F0F1222468/3A8303D0927011F1B38B24CCCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.214.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         43:e9:74:74:3b:3b:a2:db:7a:ca:5c:74:0d:97:54:b5:23:9e:
         ca:42:d8:1d:4b:2f:56:06:a2:6c:82:5d:e4:dd:a0:95:d8:55:
         27:90:78:6a:8b:93:ff:e8:d8:5a:be:b5:b5:18:6b:55:ae:ea:
         70:c1:68:01:6a:3c:f2:c5:23:38:d6:29:09:a4:db:6e:30:ab:
         6e:06:1a:8f:07:46:c2:6e:0a:32:ea:49:fa:54:79:65:47:7f:
         67:af:f0:af:4b:f1:2a:ea:e5:3f:e4:a0:c2:82:13:ba:e2:64:
         ce:b1:5c:55:26:77:75:68:81:8f:d4:35:3c:05:7e:65:8d:93:
         cd:1e:34:fd:c9:1a:5b:6e:2a:f8:52:80:d5:08:8e:0d:04:82:
         a0:11:66:3e:64:30:12:58:d7:fd:21:1b:60:3f:d5:ce:4d:a4:
         71:42:61:f5:3f:33:5c:e2:60:97:69:34:cb:cf:d3:c8:86:bd:
         69:a4:d0:6d:29:19:c8:86:1c:ab:be:15:bb:63:f3:85:f9:85:
         69:14:bf:05:c8:7e:20:95:6b:6c:b9:f2:51:3f:53:08:be:74:
         00:64:62:9d:85:91:f4:c7:a7:da:0d:ab:c6:a2:47:19:33:36:
         d6:fb:68:16:5c:68:49:64:31:7e:5c:c6:38:be:c5:a9:6a:a8:
         43:7f:72:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----