Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/E03A759E926411F1B9216B07CF1D38B0.roa
File:                     E03A759E926411F1B9216B07CF1D38B0.roa (raw, json)
Hash identifier:          yLVFbEOJ++8LwdPZFmugDv3p/3N6tP0d+LfrZFD1mH0=
Subject key identifier:   6D:FF:9E:AD:52:1A:1E:9E:E4:DC:2B:6F:63:24:71:61:7E:E2:EA:D4
Certificate issuer:       /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial:       0A63
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/E03A759E926411F1B9216B07CF1D38B0.roa
Signing time:             Fri 07 Aug 2026 13:35:39 +0000
ROA not before:           Fri 07 Aug 2026 13:35:33 +0000
ROA not after:            Sun 31 Jul 2033 13:35:33 +0000
asID:                     37119
IP address blocks:        105.173.0.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 06 Oct 2026 01:55:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2659 (0xa63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D0F50AF, serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
        Validity
            Not Before: Aug  7 13:35:33 2026 GMT
            Not After : Jul 31 13:35:33 2033 GMT
        Subject: CN=6a75df2a-56a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:64:94:5c:e0:6b:21:22:4e:e0:21:66:19:3f:
                    d6:1b:3d:d8:4b:8a:b8:41:33:cf:c0:c6:4c:ef:71:
                    88:6c:06:4f:dc:94:c5:91:28:55:55:36:58:f5:cb:
                    0e:2b:d8:2d:21:f6:ed:c8:77:9f:35:dc:82:06:d0:
                    17:df:72:14:cd:0f:4a:74:b1:c3:c6:84:56:70:c0:
                    62:14:bc:20:82:3e:37:34:3c:69:2f:6c:b5:89:e3:
                    fb:20:62:d1:a5:5a:b2:cc:36:e6:4a:db:68:49:dc:
                    2d:5c:01:5d:96:f8:4e:f1:be:c7:bb:be:cc:9f:ef:
                    a7:2f:68:74:27:ba:0f:b9:b8:27:ed:85:e6:f2:1e:
                    2c:7c:5b:05:6a:ee:1b:d3:65:41:14:51:bb:18:02:
                    1c:8a:36:94:3b:43:b1:2d:6a:d2:71:a0:b5:d9:9c:
                    1d:6b:c5:73:3a:b2:28:7a:c6:6b:c2:fd:82:32:e5:
                    7a:79:66:c5:c5:69:8a:2c:a0:14:32:18:9b:84:e4:
                    59:61:49:7b:0b:8e:fc:b2:66:c4:ab:1d:24:02:d2:
                    87:3d:45:e6:95:42:4d:fe:d2:72:21:d9:f7:fb:f6:
                    47:8f:f4:09:55:9f:43:c4:a3:53:da:2e:99:d2:ae:
                    86:83:e6:1e:5b:0a:7e:d8:81:e7:a8:f9:9b:63:65:
                    30:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:FF:9E:AD:52:1A:1E:9E:E4:DC:2B:6F:63:24:71:61:7E:E2:EA:D4
            X509v3 Authority Key Identifier:
                keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/E03A759E926411F1B9216B07CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  105.173.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         6e:a4:cf:00:89:80:bd:19:fb:df:e4:92:74:7b:35:75:08:82:
         bf:87:1e:c4:be:dc:c0:f9:01:39:52:b8:ea:fe:7b:c5:51:4c:
         cb:34:e2:a3:67:2f:78:af:6a:a2:9e:a1:20:4a:ba:14:ec:f2:
         4d:3e:9f:3b:1c:96:9b:20:cf:c9:18:6a:69:e9:7a:a2:f8:0f:
         da:65:e7:2c:b4:6a:12:1e:62:c8:d8:c2:14:ca:10:76:c6:98:
         c8:fa:7c:a1:ea:c8:1e:03:c2:87:91:45:a2:68:bb:24:73:dc:
         92:3d:83:33:86:80:42:97:02:37:c6:24:0d:f9:87:2f:e6:df:
         04:ec:07:3f:05:ba:d4:de:f7:95:cb:8d:5e:f7:57:bc:99:b5:
         51:0f:b4:00:f3:8d:c5:11:a3:d3:78:50:8a:67:29:5a:63:6f:
         f8:40:3f:05:6f:ee:f4:d1:80:fb:03:5e:22:9d:49:6d:6d:fa:
         c8:da:51:35:d9:c9:cc:4d:18:6e:9e:77:b9:b3:c6:4b:f4:2b:
         b4:1e:a9:56:62:ab:91:46:0a:27:20:2c:81:4c:be:d4:61:af:
         9a:cd:94:18:f5:bd:12:7c:55:9b:34:d2:5c:5d:fb:14:f6:18:
         78:c8:f5:9e:20:98:24:26:35:86:c8:2a:8c:51:46:f5:54:51:
         87:25:f5:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----