Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364B494/38F78A12329411ED96CD57A5F1222468/4B67D68A8A6E11F184D19A14CF1D38B0.roa
File:                     4B67D68A8A6E11F184D19A14CF1D38B0.roa (raw, json)
Hash identifier:          mQKkOZp4IJ77KNXjngRxYZITAGUOeXF20aGNVpbflBA=
Subject key identifier:   64:26:6D:F4:ED:32:6E:04:54:D4:7B:04:83:B0:1D:F0:D6:74:53:65
Certificate issuer:       /CN=F364B494AF/serialNumber=FB0923F869D52E333802B9C53D78B3BA865430CC
Certificate serial:       05C5
Authority key identifier: FB:09:23:F8:69:D5:2E:33:38:02:B9:C5:3D:78:B3:BA:86:54:30:CC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/-wkj-GnVLjM4ArnFPXizuoZUMMw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364B494/38F78A12329411ED96CD57A5F1222468/4B67D68A8A6E11F184D19A14CF1D38B0.roa
Signing time:             Tue 28 Jul 2026 10:22:54 +0000
ROA not before:           Tue 28 Jul 2026 10:22:50 +0000
ROA not after:            Sat 28 Jul 2035 10:22:50 +0000
asID:                     327872
IP address blocks:        102.202.252.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364B494/38F78A12329411ED96CD57A5F1222468/-wkj-GnVLjM4ArnFPXizuoZUMMw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364B494/38F78A12329411ED96CD57A5F1222468/-wkj-GnVLjM4ArnFPXizuoZUMMw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/-wkj-GnVLjM4ArnFPXizuoZUMMw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 31 Jul 2026 00:07:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1477 (0x5c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364B494AF, serialNumber=FB0923F869D52E333802B9C53D78B3BA865430CC
        Validity
            Not Before: Jul 28 10:22:50 2026 GMT
            Not After : Jul 28 10:22:50 2035 GMT
        Subject: CN=6a6882fe-46db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c7:88:b6:ce:58:72:7c:ff:31:a8:8b:55:1b:
                    0e:e1:e4:fb:69:c3:be:eb:5d:8e:fd:0f:da:ff:1a:
                    60:ce:9f:1e:c7:c7:4b:1c:39:c4:81:9f:7c:96:1d:
                    1a:0e:db:7e:9b:ec:3b:bf:0b:f7:64:e1:29:84:40:
                    84:80:0d:f8:b6:8b:54:0b:df:a7:dd:c5:17:33:27:
                    5a:f2:b2:2d:a5:93:7e:5d:df:a5:bc:c8:56:4b:1e:
                    9e:04:2b:d6:ba:cc:46:f3:e0:23:fe:43:40:af:18:
                    1e:57:25:ab:bd:04:9b:68:42:c3:d8:68:5e:bb:1d:
                    a9:29:6d:91:a1:ac:8e:3c:ec:8f:59:f7:bd:4d:ac:
                    0c:1c:c7:a7:e6:a1:dd:7c:87:33:3f:b2:80:9f:61:
                    c9:c2:fd:c7:18:0e:f3:67:3e:0b:34:1d:c5:9e:ec:
                    30:15:eb:40:ba:de:f6:06:07:26:b0:97:59:b5:4f:
                    3b:58:da:e0:a2:6d:e3:07:68:c8:c8:99:3b:00:da:
                    c2:e4:fd:51:7d:7f:04:e3:ef:e7:22:94:e1:45:de:
                    0f:7d:68:ba:48:1a:b3:c2:e3:da:7a:18:65:55:95:
                    9a:ee:3e:c5:bf:58:3c:7f:6e:76:7a:e4:ae:32:76:
                    26:31:0e:d0:ff:fd:83:ff:04:72:ac:36:12:c4:4b:
                    bb:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:26:6D:F4:ED:32:6E:04:54:D4:7B:04:83:B0:1D:F0:D6:74:53:65
            X509v3 Authority Key Identifier:
                keyid:FB:09:23:F8:69:D5:2E:33:38:02:B9:C5:3D:78:B3:BA:86:54:30:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364B494/38F78A12329411ED96CD57A5F1222468/-wkj-GnVLjM4ArnFPXizuoZUMMw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/-wkj-GnVLjM4ArnFPXizuoZUMMw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364B494/38F78A12329411ED96CD57A5F1222468/4B67D68A8A6E11F184D19A14CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.202.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         78:db:c1:3f:74:7e:45:d2:a4:8f:d3:af:5b:68:97:7d:9b:ad:
         fd:dd:5c:0f:6f:a2:5f:5f:b3:13:a8:76:2c:35:af:1e:98:35:
         46:6b:4d:51:f2:2c:89:b1:71:c2:37:cd:20:6b:22:4d:ab:38:
         24:aa:12:80:df:ef:56:8f:2f:0e:fc:40:8f:a1:94:7c:90:f4:
         20:89:27:42:d9:6c:2f:fe:5f:44:3e:d5:bf:d3:47:7c:53:1d:
         6d:9e:73:d1:da:7a:08:9f:e8:30:32:02:a9:be:24:b7:72:ca:
         65:28:72:88:c4:69:17:6b:c2:8f:42:d9:23:3b:5e:d4:5c:06:
         5a:94:e5:51:32:e9:29:3c:9f:2b:72:b5:45:6d:e3:f3:fd:bb:
         91:1d:9b:bb:1a:58:3c:7e:5c:f5:0e:cb:de:0a:6f:dd:4c:50:
         60:0a:57:9c:02:38:35:df:bf:17:92:c4:59:d4:4a:45:8b:e8:
         21:a8:e7:f0:75:af:44:ac:60:d1:03:e2:49:4a:bf:78:58:9e:
         9d:f5:e6:79:29:36:94:5a:eb:16:78:c9:bc:ba:23:6b:9f:ab:
         bd:86:10:f8:6b:4b:14:fc:9c:73:33:87:4d:9b:03:b4:53:67:
         ce:c9:fe:58:69:36:b0:ba:44:e5:96:75:b5:2d:64:14:41:d6:
         92:4c:af:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----