Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36EC7CE/82014A10989911E9B7396A33F8AEA228/DE9ABBFE963D11F1B08864D6CE1D38B0.roa
File:                     DE9ABBFE963D11F1B08864D6CE1D38B0.roa (raw, json)
Hash identifier:          LmmF61WGi+c5tx7diHsUKoBkDLwT10AuaotpS4JIsnQ=
Subject key identifier:   ED:87:84:A2:DB:08:EE:14:8C:5B:0B:C2:B3:F8:2F:A4:44:37:78:8F
Certificate issuer:       /CN=F36EC7CEAF/serialNumber=0E040ABF4F945F30D77DA28BBF028B6AC49D042C
Certificate serial:       0A93
Authority key identifier: 0E:04:0A:BF:4F:94:5F:30:D7:7D:A2:8B:BF:02:8B:6A:C4:9D:04:2C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/DgQKv0-UXzDXfaKLvwKLasSdBCw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36EC7CE/82014A10989911E9B7396A33F8AEA228/DE9ABBFE963D11F1B08864D6CE1D38B0.roa
Signing time:             Wed 12 Aug 2026 11:06:30 +0000
ROA not before:           Wed 12 Aug 2026 11:06:26 +0000
ROA not after:            Tue 12 Aug 2036 11:06:26 +0000
asID:                     327795
IP address blocks:        102.223.8.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36EC7CE/82014A10989911E9B7396A33F8AEA228/DgQKv0-UXzDXfaKLvwKLasSdBCw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36EC7CE/82014A10989911E9B7396A33F8AEA228/DgQKv0-UXzDXfaKLvwKLasSdBCw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/DgQKv0-UXzDXfaKLvwKLasSdBCw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Sep 2026 01:30:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2707 (0xa93)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36EC7CEAF, serialNumber=0E040ABF4F945F30D77DA28BBF028B6AC49D042C
        Validity
            Not Before: Aug 12 11:06:26 2026 GMT
            Not After : Aug 12 11:06:26 2036 GMT
        Subject: CN=6a7c53b6-9b7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ff:a2:7c:c8:7c:1b:13:59:a9:ff:59:25:d2:
                    4a:48:aa:78:77:f2:9e:84:4c:ca:ab:e8:3c:23:1e:
                    61:d0:d1:6b:65:97:f3:e0:29:7a:ec:12:79:70:60:
                    ac:c8:ec:3e:a5:6a:45:56:3c:b4:2f:4e:7f:66:dd:
                    ad:c7:2a:e6:5e:49:42:af:91:4f:df:3d:ca:25:b5:
                    30:8d:a1:97:8f:4b:25:91:b6:89:0c:d3:2c:fa:8e:
                    ad:5b:25:29:77:ce:27:97:9c:a0:72:42:6b:54:fb:
                    df:ff:e6:7a:ab:7e:81:ec:ec:68:37:37:1b:55:07:
                    61:6d:12:b6:04:9d:86:e4:63:ab:e8:24:a0:7f:34:
                    c4:36:71:42:52:2a:70:85:8a:0b:31:22:40:92:8a:
                    fd:95:2a:e4:c9:ac:99:c1:c1:54:33:e1:90:8a:7d:
                    a6:99:c8:07:03:15:28:86:e3:61:9e:7c:f6:a4:98:
                    e6:d0:b7:eb:6c:3e:d2:fe:bd:69:48:0c:aa:5a:47:
                    0f:cf:ff:d1:44:30:b2:24:05:5c:a3:d1:1b:65:c7:
                    7e:dd:3e:cd:35:e5:c6:da:a5:1a:b7:31:b3:b0:ee:
                    4f:3d:37:23:47:03:55:ff:6f:ac:da:30:06:5a:c2:
                    70:53:cc:13:81:de:25:d4:0a:14:8c:9a:e8:c1:e1:
                    4d:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:87:84:A2:DB:08:EE:14:8C:5B:0B:C2:B3:F8:2F:A4:44:37:78:8F
            X509v3 Authority Key Identifier:
                keyid:0E:04:0A:BF:4F:94:5F:30:D7:7D:A2:8B:BF:02:8B:6A:C4:9D:04:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36EC7CE/82014A10989911E9B7396A33F8AEA228/DgQKv0-UXzDXfaKLvwKLasSdBCw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/DgQKv0-UXzDXfaKLvwKLasSdBCw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EC7CE/82014A10989911E9B7396A33F8AEA228/DE9ABBFE963D11F1B08864D6CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.223.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9b:c8:01:94:b5:51:85:20:10:2a:df:d5:ca:9b:82:38:87:6a:
         ea:e5:d6:42:b3:78:fc:41:1f:37:87:1f:f7:d7:ea:43:e0:31:
         16:c6:27:38:45:ef:3f:92:7f:1b:ee:9e:b9:5a:5d:be:70:60:
         9a:82:b8:64:3a:0e:c4:28:46:3b:b1:28:e0:f3:02:78:bd:b2:
         22:3b:99:00:52:11:db:44:5e:e9:cd:7e:0e:05:4a:65:aa:1f:
         8c:90:00:66:73:32:1a:f8:b1:c8:5e:21:44:ec:19:f0:14:93:
         ac:31:62:de:78:e2:fc:13:d0:ef:b0:a1:19:6d:54:9c:e6:5b:
         95:4f:31:d3:37:87:c5:0d:0d:8b:de:9c:86:30:0e:eb:36:5d:
         11:92:2d:70:a5:ef:29:04:c2:52:68:91:60:23:20:40:59:b7:
         ca:15:11:8b:a4:d3:8d:62:c9:12:33:b5:a6:cb:6b:30:90:dd:
         1a:b3:00:76:c8:7f:a0:f3:8c:7b:29:ae:92:f3:98:2f:78:67:
         92:d8:fb:91:b2:18:85:88:32:2d:2d:3c:cf:b4:d7:5d:4e:65:
         ac:3e:10:fb:e4:b6:21:9c:98:bd:b7:08:78:0a:81:fe:a1:0b:
         cf:e5:45:96:26:cb:82:11:fe:89:01:ac:86:35:3c:59:80:0c:
         3c:5c:bc:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----