Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/84553D06932A11F19D4994B7CE1D38B0.roa
File:                     84553D06932A11F19D4994B7CE1D38B0.roa (raw, json)
Hash identifier:          vkaB6p1Vx7RwGTWq9vG88YTRzkFd03UxvSl6GHzOV+A=
Subject key identifier:   AA:23:C1:6B:4E:61:4D:5C:94:8A:F8:B6:3B:33:38:CB:B5:B3:25:0A
Certificate issuer:       /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial:       0A8B
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/84553D06932A11F19D4994B7CE1D38B0.roa
Signing time:             Sat 08 Aug 2026 13:10:25 +0000
ROA not before:           Sat 08 Aug 2026 13:10:21 +0000
ROA not after:            Sun 31 Jul 2033 13:10:21 +0000
asID:                     37119
IP address blocks:        2c0f:f888:dfff::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2699 (0xa8b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D0F50AF, serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
        Validity
            Not Before: Aug  8 13:10:21 2026 GMT
            Not After : Jul 31 13:10:21 2033 GMT
        Subject: CN=6a772ac0-f8a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ad:bd:2b:ef:28:fa:01:d1:81:ef:bd:48:65:
                    62:c2:5a:4f:0c:30:7a:4c:4e:cf:23:3c:2b:30:89:
                    14:49:f0:4d:dd:8a:c9:b9:c7:10:75:ff:72:88:3e:
                    0a:c3:90:88:e8:b7:64:94:0b:33:b4:31:19:2c:2a:
                    61:87:b3:ba:bc:05:e4:23:f7:b4:33:e1:14:0b:5b:
                    ee:20:ee:44:30:d5:db:92:d5:8d:e1:2b:04:66:9f:
                    da:5b:e7:36:5a:7b:ee:05:a4:9a:c3:e6:05:29:d7:
                    8c:42:22:8c:b9:27:44:59:09:3a:f5:5c:fd:1a:1b:
                    e1:5f:c6:c6:77:58:6d:03:be:f8:39:cf:42:63:0b:
                    7e:e3:7e:99:dc:8e:90:b7:7b:c6:86:51:54:e5:f2:
                    47:d8:a4:9a:1d:57:70:3a:82:98:66:50:45:99:15:
                    9e:43:c8:09:4c:aa:a7:83:95:fc:d5:e1:50:e5:60:
                    0c:55:9e:d6:60:7d:aa:89:b2:94:98:a8:c2:5b:72:
                    4f:f1:6a:8f:04:c6:af:ab:a9:6d:f7:cf:a2:90:fa:
                    07:f6:e7:35:ea:6b:0b:be:c1:9a:1d:16:3e:a1:78:
                    d0:d4:d0:fe:94:7d:30:66:fd:63:0a:b6:39:5c:ba:
                    60:d9:14:65:a8:3a:8f:fc:39:cf:4b:dd:4f:4b:a2:
                    d3:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:23:C1:6B:4E:61:4D:5C:94:8A:F8:B6:3B:33:38:CB:B5:B3:25:0A
            X509v3 Authority Key Identifier:
                keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/84553D06932A11F19D4994B7CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:f888:dfff::/48

    Signature Algorithm: sha256WithRSAEncryption
         78:27:bd:7c:96:5a:66:4c:40:3d:64:71:55:37:6d:e9:29:28:
         77:b8:17:41:6a:d8:26:b7:28:42:e8:3f:0c:1f:47:5e:b9:db:
         31:13:21:97:f5:a1:a0:87:a4:2f:dc:35:8f:ba:36:66:7f:06:
         7f:c3:81:62:31:2f:ac:ae:6f:82:53:56:58:e9:29:dc:13:f8:
         8c:1c:50:ad:93:fe:26:21:e1:ba:ac:c6:73:3a:3c:0f:dd:3f:
         af:7e:59:b8:47:cd:24:a6:53:d2:35:36:8a:a3:1a:e7:90:ce:
         97:95:0e:f3:a2:b1:80:a0:6c:3f:35:5f:27:ad:63:76:93:db:
         60:9f:28:05:90:cd:b7:50:09:08:40:cc:c0:4f:86:b9:ea:e0:
         d3:05:91:de:63:f9:43:18:fe:14:73:48:bb:af:10:f4:61:72:
         54:a5:f1:d1:94:f2:4e:1f:47:9a:98:a1:c8:f7:14:72:f0:31:
         ef:44:29:bf:87:a2:c6:72:28:09:45:40:b0:d9:13:17:4b:d0:
         76:ea:8a:12:cd:50:a2:5e:a5:4a:b9:89:28:db:38:e8:ee:b4:
         0d:e5:f6:ac:51:cb:0c:68:11:33:a2:50:d4:6c:df:7d:b8:6b:
         c3:d2:3e:64:c9:b5:31:dd:fa:fb:da:f3:be:c9:c7:bd:0d:0e:
         2b:ca:b3:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----