Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/4BA69BEA8A3711F1917C49BFCE1D38B0.roa
File:                     4BA69BEA8A3711F1917C49BFCE1D38B0.roa (raw, json)
Hash identifier:          4KOHYJJzP5smw3ACD+tzCOgBuZXKvJ5GTla03CJQf3k=
Subject key identifier:   5E:78:AF:16:AD:DC:3D:1C:61:FD:2A:F5:34:71:9C:6C:58:50:21:AE
Certificate issuer:       /CN=F367B216AF/serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Certificate serial:       09E8
Authority key identifier: 2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/4BA69BEA8A3711F1917C49BFCE1D38B0.roa
Signing time:             Tue 28 Jul 2026 03:49:12 +0000
ROA not before:           Tue 28 Jul 2026 03:49:08 +0000
ROA not after:            Wed 31 Aug 2033 03:49:08 +0000
asID:                     20011
IP address blocks:        197.93.0.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 31 Jul 2026 00:07:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2536 (0x9e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367B216AF, serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
        Validity
            Not Before: Jul 28 03:49:08 2026 GMT
            Not After : Aug 31 03:49:08 2033 GMT
        Subject: CN=6a6826b8-991e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:88:af:bc:8c:f4:26:30:79:91:14:3f:be:97:
                    59:62:ab:ad:52:1d:72:db:4d:e2:ca:3a:5e:83:56:
                    a6:e3:63:02:56:73:fe:9a:1f:e9:3f:28:91:a9:ff:
                    ca:be:f0:27:ab:83:38:a9:6a:d9:84:70:d9:20:f0:
                    b5:5b:7a:c2:ad:2b:a9:fd:9a:34:48:96:b3:f0:b8:
                    8d:79:a9:c6:73:37:b5:02:29:96:79:e3:18:6f:ae:
                    9f:7e:cc:75:68:52:ad:27:03:db:8e:e2:58:98:04:
                    09:f7:05:2c:58:1c:93:f0:b0:fc:b8:9d:8d:a6:9d:
                    e1:af:64:13:c1:1c:09:5e:6a:fe:52:24:40:90:a4:
                    c7:05:64:6e:fc:5d:a5:48:58:96:30:10:87:65:79:
                    4f:c1:31:b0:44:b6:ab:7a:9d:31:24:de:f6:18:47:
                    6c:8c:38:2b:70:ee:d8:b7:a4:0e:27:a3:47:b6:e4:
                    d7:11:6a:84:3a:eb:5c:ca:9e:76:ec:9c:d0:66:0a:
                    5a:79:43:92:29:e8:dd:ec:40:d0:59:a1:fb:53:1e:
                    9b:c9:ec:d9:88:95:a2:f5:c6:e9:b9:53:b4:9c:dc:
                    b9:df:4b:52:27:3b:1f:d2:9a:8c:c6:cf:7f:d8:41:
                    2e:fd:82:c4:ae:68:af:7f:08:aa:92:67:aa:d8:18:
                    73:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:78:AF:16:AD:DC:3D:1C:61:FD:2A:F5:34:71:9C:6C:58:50:21:AE
            X509v3 Authority Key Identifier:
                keyid:2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/4BA69BEA8A3711F1917C49BFCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  197.93.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         5c:f3:87:62:1c:2d:75:53:d6:7c:8d:42:38:40:c7:b6:78:01:
         e0:2e:e4:82:ca:56:0b:5f:9e:70:96:91:c5:b7:2a:b7:40:d6:
         4f:3b:99:fe:48:ef:c5:c3:dc:2a:b5:63:bb:2d:3d:dd:b8:57:
         cf:14:e8:4b:6a:9e:75:cc:cd:97:a9:77:8c:e4:18:2b:c9:1a:
         07:6d:de:14:0c:c5:46:8b:83:b0:f8:d2:d1:77:b1:8f:34:eb:
         c4:b2:51:fc:5e:ac:c6:4d:09:17:0f:32:6a:ca:22:41:53:28:
         a6:94:11:a6:41:0c:36:8f:42:10:c4:9a:89:16:4b:3f:f4:00:
         39:da:47:3e:7f:5b:bb:41:d1:01:2d:de:0d:42:5d:a1:7e:8b:
         f1:82:03:be:e6:c9:8a:ae:be:e6:da:4a:ba:84:ca:d3:cd:b2:
         0c:64:63:c6:7e:5f:ba:e7:a7:84:9e:a1:80:60:3b:df:46:6e:
         66:e0:16:0d:89:3b:cb:37:a5:48:d9:da:c8:d7:6f:1f:13:0a:
         c2:39:3e:f0:86:a8:74:63:3f:85:10:89:55:9b:ac:2b:1c:31:
         de:df:10:f1:cd:14:e6:81:7d:eb:3a:46:62:63:48:6a:0d:7c:
         75:6c:96:db:83:ef:a5:b0:50:5c:da:aa:75:ce:b1:81:91:f3:
         79:0c:2f:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----