Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F365E03D/5F0CFC18289011ED886D4D94F1222468/F98B7A30926D11F1A9BE00C0CE1D38B0.roa
File:                     F98B7A30926D11F1A9BE00C0CE1D38B0.roa (raw, json)
Hash identifier:          prfBf0XAuvdvwSNyGngFhnfr09mo9VrvLAtRyCG9xrs=
Subject key identifier:   D0:D7:E5:E7:DE:74:E1:8F:97:88:7F:FF:F6:E5:15:75:F7:6B:68:E3
Certificate issuer:       /CN=F365E03DAF/serialNumber=8251B65FCFF4D7672C987590E7C0CB649D44C212
Certificate serial:       05CD
Authority key identifier: 82:51:B6:5F:CF:F4:D7:67:2C:98:75:90:E7:C0:CB:64:9D:44:C2:12
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/glG2X8_012csmHWQ58DLZJ1EwhI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365E03D/5F0CFC18289011ED886D4D94F1222468/F98B7A30926D11F1A9BE00C0CE1D38B0.roa
Signing time:             Fri 07 Aug 2026 14:40:46 +0000
ROA not before:           Fri 07 Aug 2026 14:40:42 +0000
ROA not after:            Sun 29 Aug 2032 14:40:42 +0000
asID:                     328111
IP address blocks:        102.216.168.0/22 maxlen: 24
                          2c0f:eab0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365E03D/5F0CFC18289011ED886D4D94F1222468/glG2X8_012csmHWQ58DLZJ1EwhI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365E03D/5F0CFC18289011ED886D4D94F1222468/glG2X8_012csmHWQ58DLZJ1EwhI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/glG2X8_012csmHWQ58DLZJ1EwhI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1485 (0x5cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365E03DAF, serialNumber=8251B65FCFF4D7672C987590E7C0CB649D44C212
        Validity
            Not Before: Aug  7 14:40:42 2026 GMT
            Not After : Aug 29 14:40:42 2032 GMT
        Subject: CN=6a75ee6e-101b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b0:2d:a4:a2:e0:ff:3f:71:20:65:02:38:dc:
                    44:6d:1e:5c:80:f0:72:58:86:fa:df:f8:80:3f:42:
                    11:21:50:5c:4c:6b:6a:a7:24:e0:48:ee:ab:11:c9:
                    23:23:ad:ac:6c:01:4e:3e:a1:64:d9:1b:d6:75:d9:
                    2b:26:8f:04:0f:6d:c4:cd:b9:a0:47:47:e3:4c:06:
                    2a:d2:51:4c:f5:67:48:74:64:f1:e4:5d:df:20:77:
                    a5:2e:a6:4f:c5:92:6f:bc:f9:93:40:83:6b:7d:16:
                    b8:09:40:be:b8:a2:27:bf:2e:e1:7c:07:d0:a0:bf:
                    ff:39:9a:a1:f4:eb:04:5d:94:61:be:66:16:7e:a6:
                    22:65:30:2a:d0:77:af:c8:ba:c5:a9:dd:11:3f:0a:
                    14:d5:0b:43:0d:95:40:96:46:b9:e6:21:e0:bf:73:
                    e2:a1:af:18:19:90:74:b4:84:5f:1c:aa:7b:b1:1f:
                    f5:d6:08:90:31:85:e5:b6:53:cd:fe:74:0a:08:c0:
                    cb:73:22:e2:22:ad:44:c1:62:99:c9:ad:0d:17:9e:
                    df:f8:ec:e3:b4:ae:75:20:ea:37:1b:83:e3:af:cf:
                    04:a9:62:3d:26:26:18:e1:c9:21:ad:62:ec:dd:70:
                    13:7d:92:ee:43:4c:e2:da:8b:db:1b:70:29:a0:6a:
                    1d:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:D7:E5:E7:DE:74:E1:8F:97:88:7F:FF:F6:E5:15:75:F7:6B:68:E3
            X509v3 Authority Key Identifier:
                keyid:82:51:B6:5F:CF:F4:D7:67:2C:98:75:90:E7:C0:CB:64:9D:44:C2:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365E03D/5F0CFC18289011ED886D4D94F1222468/glG2X8_012csmHWQ58DLZJ1EwhI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/glG2X8_012csmHWQ58DLZJ1EwhI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365E03D/5F0CFC18289011ED886D4D94F1222468/F98B7A30926D11F1A9BE00C0CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.216.168.0/22
                IPv6:
                  2c0f:eab0::/32

    Signature Algorithm: sha256WithRSAEncryption
         66:08:14:21:24:50:0f:04:d4:dc:5d:c6:d0:5d:3c:99:37:05:
         1c:08:9f:16:3a:e0:c1:5e:54:02:6d:01:8c:0f:1e:7a:e3:58:
         2f:e9:bf:50:8e:74:30:e0:f8:d8:da:ef:1d:cf:16:f0:a7:11:
         59:22:45:dd:cd:07:7c:52:22:fb:26:d6:9a:0f:fe:3b:d3:d8:
         77:bc:3c:ef:45:50:b6:c3:13:41:cc:ec:38:42:fa:d0:3a:5c:
         33:b1:a6:03:7a:96:a2:dd:a7:31:ba:0c:32:24:ea:db:39:30:
         45:cd:89:b2:ce:a2:78:a7:39:e8:e8:34:d2:90:6d:ed:6e:b3:
         67:56:f4:5b:33:d2:5c:e6:b4:18:85:5d:19:0e:7c:d1:13:c7:
         17:91:fa:a1:66:ad:6f:9f:90:36:80:a2:5e:2f:69:51:8b:99:
         81:f3:16:a3:ab:11:3e:05:cb:fe:09:87:a9:7f:b6:16:2c:f9:
         1c:51:0c:7f:74:d7:8a:c0:29:79:cb:b1:d5:2d:64:1e:20:bb:
         13:59:6e:de:48:8b:df:3d:4b:8a:37:c9:fc:8d:14:dc:54:49:
         23:9f:b7:b8:25:d7:d8:ac:e5:9a:82:c4:26:a3:e1:50:79:d4:
         3e:67:e5:85:a9:14:c6:25:dc:07:cf:33:8b:1f:3f:ea:bc:a0:
         29:96:c5:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----