Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36974EE/FD906910158111ECB0810771D8A014CE/FBA2A0FE9C9111F1882BDBB6CE1D38B0.roa
File:                     FBA2A0FE9C9111F1882BDBB6CE1D38B0.roa (raw, json)
Hash identifier:          EbOErodNPM0VUbldttQkM4ZkTtmWp5YI0by4dM37x8M=
Subject key identifier:   00:CD:36:39:FE:08:2D:F7:2A:67:4C:97:68:0D:0F:F3:66:4E:A9:44
Certificate issuer:       /CN=F36974EEAF/serialNumber=9C7A278DAD89ED63E93E25219B4CDA00B1006193
Certificate serial:       0740
Authority key identifier: 9C:7A:27:8D:AD:89:ED:63:E9:3E:25:21:9B:4C:DA:00:B1:00:61:93
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/nHonja2J7WPpPiUhm0zaALEAYZM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36974EE/FD906910158111ECB0810771D8A014CE/FBA2A0FE9C9111F1882BDBB6CE1D38B0.roa
Signing time:             Thu 20 Aug 2026 12:23:43 +0000
ROA not before:           Thu 20 Aug 2026 12:23:39 +0000
ROA not after:            Fri 20 Aug 2027 12:23:39 +0000
asID:                     24691
IP address blocks:        41.207.160.0/19 maxlen: 24
                          196.168.0.0/14 maxlen: 24
                          197.148.96.0/19 maxlen: 24
                          2c0f:f578::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36974EE/FD906910158111ECB0810771D8A014CE/nHonja2J7WPpPiUhm0zaALEAYZM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36974EE/FD906910158111ECB0810771D8A014CE/nHonja2J7WPpPiUhm0zaALEAYZM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/nHonja2J7WPpPiUhm0zaALEAYZM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1856 (0x740)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36974EEAF, serialNumber=9C7A278DAD89ED63E93E25219B4CDA00B1006193
        Validity
            Not Before: Aug 20 12:23:39 2026 GMT
            Not After : Aug 20 12:23:39 2027 GMT
        Subject: CN=6a86f1cf-c777
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:82:2e:94:ef:c5:a3:f1:75:c5:1e:84:00:67:
                    ed:d0:8f:62:21:c1:e6:95:52:ea:c2:c5:ab:46:89:
                    c5:bd:c8:47:7d:63:7e:9d:c7:8c:f8:e6:cb:d2:a2:
                    52:39:9a:52:a6:4b:7b:7d:a5:da:69:a5:e1:21:49:
                    8e:8f:d1:85:cc:d6:8d:7f:4f:56:ad:06:fe:09:c9:
                    ae:ab:9f:88:66:c8:2f:01:40:5b:10:45:64:14:32:
                    f6:65:73:05:b2:d3:71:21:c0:10:43:ff:70:9d:4c:
                    60:75:4a:54:66:32:73:6e:77:07:ea:40:07:e4:cd:
                    40:b0:fd:0d:55:f0:91:07:0a:90:d5:cf:05:3a:91:
                    32:b1:cf:b9:24:a3:0c:4f:c5:63:da:b2:b3:76:51:
                    91:0f:a2:74:f0:ec:5e:90:19:3b:ca:64:1d:12:25:
                    21:5c:07:c9:88:7b:38:6f:e0:83:f5:7c:ba:4e:0b:
                    6a:ad:77:ed:2a:ea:1e:65:d0:1b:17:98:aa:52:4d:
                    da:ac:d4:d3:2d:3a:f9:58:f3:15:88:78:65:5f:22:
                    3d:e2:9b:0a:e2:5e:05:83:10:49:2d:b9:9d:79:08:
                    25:b2:8b:95:cf:ee:43:c6:a8:c2:7c:e9:c5:57:ed:
                    4b:38:7c:8b:94:bf:ce:67:1a:18:f6:24:86:93:c5:
                    c5:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:CD:36:39:FE:08:2D:F7:2A:67:4C:97:68:0D:0F:F3:66:4E:A9:44
            X509v3 Authority Key Identifier:
                keyid:9C:7A:27:8D:AD:89:ED:63:E9:3E:25:21:9B:4C:DA:00:B1:00:61:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36974EE/FD906910158111ECB0810771D8A014CE/nHonja2J7WPpPiUhm0zaALEAYZM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/nHonja2J7WPpPiUhm0zaALEAYZM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36974EE/FD906910158111ECB0810771D8A014CE/FBA2A0FE9C9111F1882BDBB6CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.207.160.0/19
                  196.168.0.0/14
                  197.148.96.0/19
                IPv6:
                  2c0f:f578::/32

    Signature Algorithm: sha256WithRSAEncryption
         43:4f:9c:26:7b:21:4e:87:a3:62:c0:d7:bc:fb:aa:79:30:cd:
         90:19:27:4c:e7:31:58:c8:79:f8:92:ea:b2:56:22:44:03:b5:
         f4:d4:4c:64:c9:36:a7:60:d5:d1:61:84:a2:04:67:a3:f5:15:
         3a:72:e5:ea:0b:50:85:4a:a5:78:f5:f5:49:b7:e3:fc:31:9a:
         e0:e4:bc:a5:96:01:ea:34:28:59:20:57:2c:94:dd:e1:fc:4b:
         40:30:20:7c:14:0d:57:7a:49:30:05:e6:16:d0:05:4c:6e:a7:
         10:12:c3:db:06:f1:41:21:4e:1e:69:13:8b:ee:8c:d4:0f:e7:
         12:04:ef:a7:fa:65:a3:c9:d7:95:89:6f:09:6a:dd:48:fb:b1:
         0d:67:2d:69:69:88:4d:63:a7:cc:15:6a:f0:b3:08:8e:66:17:
         68:31:c4:5b:73:4b:15:77:6e:f9:c8:df:13:12:fd:ca:d9:42:
         0b:ed:df:53:3e:f9:7e:33:3a:d7:a3:e0:ea:2a:dc:37:a0:b4:
         84:0c:b6:17:41:dd:33:fc:58:3d:a5:89:be:1c:35:54:0c:9e:
         5c:f4:61:15:74:25:47:88:b8:cb:3e:2a:16:36:85:dd:74:a9:
         f2:6f:55:fa:6a:7a:ef:7b:e3:bc:39:f8:31:9f:76:bd:47:7b:
         92:17:9b:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----