Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36974EE/FD906910158111ECB0810771D8A014CE/88C92358A23311F1BB646617CF1D38B0.roa
File:                     88C92358A23311F1BB646617CF1D38B0.roa (raw, json)
Hash identifier:          QCSLXKTWm2vQD3zE/9mvWuz1rZVCYcOC0JbZ7kpAjs0=
Subject key identifier:   D4:49:37:95:B7:3A:C6:EC:4F:DA:35:F2:76:F4:18:5D:2F:D2:1B:B4
Certificate issuer:       /CN=F36974EEAF/serialNumber=9C7A278DAD89ED63E93E25219B4CDA00B1006193
Certificate serial:       074A
Authority key identifier: 9C:7A:27:8D:AD:89:ED:63:E9:3E:25:21:9B:4C:DA:00:B1:00:61:93
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/nHonja2J7WPpPiUhm0zaALEAYZM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36974EE/FD906910158111ECB0810771D8A014CE/88C92358A23311F1BB646617CF1D38B0.roa
Signing time:             Thu 27 Aug 2026 16:22:45 +0000
ROA not before:           Thu 27 Aug 2026 16:22:41 +0000
ROA not after:            Fri 27 Aug 2027 16:22:41 +0000
asID:                     24691
IP address blocks:        41.207.160.0/19 maxlen: 24
                          196.168.0.0/14 maxlen: 24
                          197.148.96.0/19 maxlen: 24
                          2c0f:f578::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36974EE/FD906910158111ECB0810771D8A014CE/nHonja2J7WPpPiUhm0zaALEAYZM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36974EE/FD906910158111ECB0810771D8A014CE/nHonja2J7WPpPiUhm0zaALEAYZM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/nHonja2J7WPpPiUhm0zaALEAYZM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1866 (0x74a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36974EEAF, serialNumber=9C7A278DAD89ED63E93E25219B4CDA00B1006193
        Validity
            Not Before: Aug 27 16:22:41 2026 GMT
            Not After : Aug 27 16:22:41 2027 GMT
        Subject: CN=6a906455-0588
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ce:49:98:b2:7b:c7:c9:55:36:c2:7f:74:d0:
                    d3:14:e7:ce:63:fe:9c:c2:a1:7b:ce:6f:55:be:46:
                    a8:67:f3:ed:e6:6f:a2:63:24:d6:1b:c3:e9:80:bc:
                    04:09:6d:53:d9:58:b9:58:7e:78:84:ab:5a:45:58:
                    7e:1c:4d:ec:4e:ca:3c:a6:84:bb:81:9e:0d:4b:25:
                    58:3c:58:27:42:ac:ce:1e:7b:31:ec:05:dd:5f:e7:
                    ef:86:32:74:e3:1f:ae:69:d8:a5:a8:94:1a:36:c7:
                    e6:34:6a:1f:ff:31:bb:0f:f4:d5:e9:bd:e4:28:56:
                    3e:bf:67:b7:a9:af:8b:70:d0:ae:ee:0c:5f:14:01:
                    c5:3b:4f:6b:a2:f7:0b:46:18:3a:6f:5e:e9:a5:82:
                    6c:79:36:f6:0c:96:50:8b:2e:c5:9c:1b:5c:5b:32:
                    c9:11:2c:ef:7a:cb:64:aa:99:3a:93:e2:3f:a9:f7:
                    6d:95:50:57:c7:d2:ba:8a:c3:1e:0a:d1:2c:6a:35:
                    0e:f4:71:ed:9b:59:b5:f0:8f:d4:75:6f:76:cb:d9:
                    cf:b2:5e:40:d3:4f:12:7f:06:8a:b9:e8:83:a8:61:
                    d1:2a:c7:97:bf:6b:a6:b5:61:f7:78:53:94:7c:4d:
                    ca:8b:42:51:f1:ed:a1:17:74:e0:e9:24:a8:dd:c3:
                    9a:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:49:37:95:B7:3A:C6:EC:4F:DA:35:F2:76:F4:18:5D:2F:D2:1B:B4
            X509v3 Authority Key Identifier:
                keyid:9C:7A:27:8D:AD:89:ED:63:E9:3E:25:21:9B:4C:DA:00:B1:00:61:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36974EE/FD906910158111ECB0810771D8A014CE/nHonja2J7WPpPiUhm0zaALEAYZM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/nHonja2J7WPpPiUhm0zaALEAYZM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36974EE/FD906910158111ECB0810771D8A014CE/88C92358A23311F1BB646617CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.207.160.0/19
                  196.168.0.0/14
                  197.148.96.0/19
                IPv6:
                  2c0f:f578::/32

    Signature Algorithm: sha256WithRSAEncryption
         7e:01:98:6f:32:89:c3:94:27:a7:84:9f:43:a9:81:2a:13:82:
         30:77:3c:b5:28:82:a1:0e:25:cc:70:ab:e8:f5:5d:37:81:0f:
         78:bc:6a:19:81:60:f3:cc:77:96:db:cb:bc:9b:7d:4c:a8:b1:
         3e:3e:82:51:18:62:64:0f:f6:66:f3:7d:67:dd:22:49:5f:2c:
         a7:bc:ff:11:d7:d9:54:54:b4:b2:c6:6f:98:17:54:ff:81:d7:
         80:09:3c:9a:02:a1:37:50:3f:29:76:70:6a:cd:7c:e0:ce:c7:
         d1:23:dd:8f:e9:49:2f:22:7f:aa:d9:26:75:79:5b:4e:98:3d:
         72:be:1d:12:17:29:6e:90:e5:d2:8f:f9:74:30:1c:ba:4d:46:
         51:f8:f8:f3:11:fe:7a:fb:59:5b:61:0f:31:e6:88:c5:5e:97:
         11:ad:3d:fa:55:cb:49:8a:e9:2f:eb:a4:d1:2d:9a:b8:c7:cc:
         69:a8:c9:16:3c:03:1a:24:9a:04:02:34:a0:2f:de:ea:3c:80:
         13:3f:62:52:bd:6c:57:e0:45:94:06:20:84:34:24:79:ad:cd:
         0c:c1:e5:84:c4:fe:8f:c0:3b:f6:9a:39:bd:4d:a7:de:ef:61:
         55:01:f9:5c:87:1f:23:06:20:78:b5:d6:f2:f4:c7:40:52:9c:
         bd:bb:6e:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----