Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/8332F9CA926411F1B1256803CF1D38B0.roa
File:                     8332F9CA926411F1B1256803CF1D38B0.roa (raw, json)
Hash identifier:          Smb8OYfZWmJSJ2eIGI7gQdJxZmIz7ZBU1iRTSVHpalc=
Subject key identifier:   CD:55:7F:30:9E:C0:5A:FB:5E:3F:0B:19:79:C5:FC:52:43:5A:45:9E
Certificate issuer:       /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial:       0A61
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/8332F9CA926411F1B1256803CF1D38B0.roa
Signing time:             Fri 07 Aug 2026 13:33:02 +0000
ROA not before:           Fri 07 Aug 2026 13:32:58 +0000
ROA not after:            Sun 31 Jul 2033 13:32:58 +0000
asID:                     37119
IP address blocks:        105.173.0.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Sep 2026 00:07:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2657 (0xa61)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D0F50AF, serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
        Validity
            Not Before: Aug  7 13:32:58 2026 GMT
            Not After : Jul 31 13:32:58 2033 GMT
        Subject: CN=6a75de8e-f345
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:16:1c:71:3f:2b:ee:df:8a:12:9d:fc:55:5a:
                    dc:91:04:32:fb:67:a9:7b:74:07:2e:88:b4:e1:92:
                    27:d5:6d:31:a2:6d:46:ab:da:62:d7:e1:47:85:88:
                    cd:ea:bb:98:9e:f2:8e:cd:27:01:fa:f3:49:a6:32:
                    1e:e6:90:eb:61:a2:03:85:bc:b6:4d:c5:7b:ed:04:
                    cd:0e:b0:bf:97:f0:9e:69:b0:b2:2b:89:36:35:5c:
                    d5:43:6a:69:ee:bc:80:c7:06:3d:ca:d0:87:ae:e3:
                    0e:59:d4:ff:a0:5a:61:57:37:e8:82:f0:ba:cd:a1:
                    02:0a:e2:53:5f:95:a6:0d:58:79:50:cb:1a:e7:1d:
                    5a:65:c0:2d:eb:f8:94:bb:69:3d:d4:ba:a5:5a:65:
                    3c:93:c1:65:e3:21:36:64:4c:ac:3c:d9:c1:c9:96:
                    63:b6:30:d9:81:ad:d9:46:64:b4:f1:54:55:31:ba:
                    77:d3:0f:b4:93:82:c7:f3:14:58:52:c1:cd:fb:fe:
                    ec:83:c7:e2:32:46:fb:cb:bf:ea:df:cf:5c:a7:bf:
                    9e:12:4d:eb:8d:cc:a0:5a:5b:34:2d:e1:c0:86:8f:
                    ce:f8:fd:21:7a:11:2c:9b:9c:45:be:da:48:94:d2:
                    36:2d:c3:9f:9a:ce:5b:09:1b:0a:83:1e:b5:68:d3:
                    26:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:55:7F:30:9E:C0:5A:FB:5E:3F:0B:19:79:C5:FC:52:43:5A:45:9E
            X509v3 Authority Key Identifier:
                keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/8332F9CA926411F1B1256803CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  105.173.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         8d:51:8f:d1:68:a5:4e:fa:44:67:75:79:1e:6c:9a:3a:82:44:
         3c:55:e4:b7:a4:94:ae:35:d3:d6:26:0d:8b:82:3a:7a:f7:2d:
         19:f3:89:2d:f2:ef:03:7b:0e:ae:0c:f5:cd:cb:59:01:83:40:
         94:70:81:6f:f9:ba:0e:29:41:a5:90:b9:18:d5:9f:6e:4d:0c:
         33:e8:b2:47:c0:b1:85:d9:6a:81:2e:e5:27:4e:e1:03:ce:13:
         a7:b4:12:f2:5e:93:a5:63:07:81:79:23:34:4f:68:61:be:14:
         b0:07:6b:96:bd:4a:a5:55:85:93:cd:a9:f9:37:78:8c:e3:3d:
         1d:1d:72:ca:4d:6e:f9:6f:68:71:0a:aa:23:d5:e1:81:51:9c:
         1b:d0:1a:9d:27:73:0d:32:fc:23:ca:8e:96:92:ac:5f:48:db:
         37:26:d3:e1:e4:94:d3:58:e4:51:16:f5:a1:06:10:25:fd:be:
         26:4d:19:93:c4:48:7b:93:8a:eb:49:97:a1:79:33:37:28:83:
         30:ba:25:cc:4a:19:de:4b:5f:18:90:8f:c9:2e:60:39:59:f8:
         f3:b5:51:73:c8:00:f0:d2:fd:02:13:58:02:18:88:5d:99:37:
         27:6f:98:0e:5a:00:29:0c:7c:6b:11:3f:e6:a6:16:c0:3d:0d:
         b8:1a:6e:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----