Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3634F1B/A133C32A299511F0B2F717B2DAE4EC9C/9CDE6EE2A87411F1878E28F1CE1D38B0.roa
File:                     9CDE6EE2A87411F1878E28F1CE1D38B0.roa (raw, json)
Hash identifier:          Qd5ae98nyr7jSMmNSv52P+8u1CCj37qDdnvkFn1rYpQ=
Subject key identifier:   99:0D:E0:E1:C8:A1:02:27:CB:2A:92:25:2F:73:DE:9D:DA:D3:C1:3B
Certificate issuer:       /CN=F3634F1BAF/serialNumber=49B4D619095D9432AF6460853E147BEF5D1C48B0
Certificate serial:       020C
Authority key identifier: 49:B4:D6:19:09:5D:94:32:AF:64:60:85:3E:14:7B:EF:5D:1C:48:B0
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SbTWGQldlDKvZGCFPhR7710cSLA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3634F1B/A133C32A299511F0B2F717B2DAE4EC9C/9CDE6EE2A87411F1878E28F1CE1D38B0.roa
Signing time:             Fri 04 Sep 2026 15:23:43 +0000
ROA not before:           Fri 04 Sep 2026 15:23:39 +0000
ROA not after:            Thu 04 Sep 2036 15:23:39 +0000
asID:                     328939
IP address blocks:        102.206.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3634F1B/A133C32A299511F0B2F717B2DAE4EC9C/SbTWGQldlDKvZGCFPhR7710cSLA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3634F1B/A133C32A299511F0B2F717B2DAE4EC9C/SbTWGQldlDKvZGCFPhR7710cSLA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/SbTWGQldlDKvZGCFPhR7710cSLA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 25 Sep 2026 00:08:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 524 (0x20c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3634F1BAF, serialNumber=49B4D619095D9432AF6460853E147BEF5D1C48B0
        Validity
            Not Before: Sep  4 15:23:39 2026 GMT
            Not After : Sep  4 15:23:39 2036 GMT
        Subject: CN=6a9ae27f-63db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:19:ba:0b:a7:b6:f8:56:7a:f3:50:31:43:d1:
                    be:a1:70:88:80:16:ba:da:93:23:a1:ec:92:65:ad:
                    b4:a3:e0:8d:2f:54:7c:e5:4b:d0:8f:3f:2e:da:0c:
                    0c:93:af:70:72:4a:f3:0f:68:56:ab:d7:f0:4d:e3:
                    61:88:ad:1f:42:00:18:5f:db:23:79:46:9e:c0:00:
                    e3:80:f6:bd:d1:d9:2f:f5:3e:51:6e:fe:7a:f4:7f:
                    5c:ad:32:63:1c:3f:4f:68:c3:13:3b:9a:31:8e:a6:
                    52:d5:ff:4f:50:21:b1:26:f7:fa:26:c8:25:7a:16:
                    3b:6a:7e:a3:b5:1d:82:1b:c0:f2:38:5f:50:cc:49:
                    76:cb:ec:bf:96:30:57:56:ed:9a:90:d2:00:b0:b7:
                    21:59:a6:3d:6c:a7:62:03:fc:a3:70:1c:a9:78:8e:
                    e3:30:88:a7:ad:96:84:c9:6f:30:79:e1:88:7f:e5:
                    11:42:47:07:90:55:a8:3a:eb:27:ab:a3:ff:fa:1e:
                    26:a8:a5:3a:ba:b3:1d:45:43:ca:91:07:b7:a8:e8:
                    5b:16:99:18:f9:47:7a:5c:7f:92:57:77:30:0f:d5:
                    db:b5:c2:44:0f:62:7d:f3:4d:fc:59:7a:a6:1e:cf:
                    dc:ff:98:ef:c7:78:9b:84:cd:5d:ba:8b:cd:1d:f2:
                    83:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:0D:E0:E1:C8:A1:02:27:CB:2A:92:25:2F:73:DE:9D:DA:D3:C1:3B
            X509v3 Authority Key Identifier:
                keyid:49:B4:D6:19:09:5D:94:32:AF:64:60:85:3E:14:7B:EF:5D:1C:48:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3634F1B/A133C32A299511F0B2F717B2DAE4EC9C/SbTWGQldlDKvZGCFPhR7710cSLA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SbTWGQldlDKvZGCFPhR7710cSLA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3634F1B/A133C32A299511F0B2F717B2DAE4EC9C/9CDE6EE2A87411F1878E28F1CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.206.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:4e:1c:79:a9:8c:50:45:6a:c5:0b:26:4c:5f:e2:da:3d:f2:
         bf:07:e8:62:86:b0:7c:f8:58:2b:f0:e1:5a:71:1f:25:c4:16:
         71:e3:83:9d:bf:cb:b1:7f:6d:ce:31:aa:e1:32:b9:49:52:50:
         f4:8f:0f:af:10:d5:f0:8f:16:ac:44:27:1d:db:f4:b6:3d:9e:
         84:cd:f7:a6:69:1c:da:c7:4a:07:b0:12:ea:a4:94:e1:73:de:
         49:0d:5c:26:77:e5:54:93:c3:50:84:93:03:2d:52:be:fb:9a:
         24:76:64:27:9c:70:55:d5:ff:69:36:ab:9e:4a:b4:25:4c:b2:
         c2:a3:a0:8d:54:4d:68:ef:da:ee:f6:2e:a5:9f:ef:28:b5:cd:
         37:db:26:8c:03:10:f7:8a:27:3a:88:b7:ef:97:52:fe:b3:0c:
         a0:03:ee:16:7b:aa:1e:a5:56:01:14:ea:a0:93:de:6a:fb:d1:
         63:5b:7c:b1:dc:7e:32:21:a1:50:cf:a1:b4:33:3a:13:ec:78:
         1d:3e:30:cd:a1:96:cb:40:3c:98:d3:91:1f:42:d4:38:43:61:
         31:3e:e1:4a:06:93:28:1a:ba:ea:64:8d:60:6d:b1:d3:10:f5:
         d0:dc:c7:64:1e:34:2d:64:90:6e:3c:a2:b5:72:10:5c:54:b3:
         c2:43:1f:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----