Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A1982/2F0CD68E45D211F0B09667D4DAE4EC9C/553164D49C9711F1815829D7CE1D38B0.roa
File:                     553164D49C9711F1815829D7CE1D38B0.roa (raw, json)
Hash identifier:          wVWSeXVlQ34ZCg2wQQL7tOgF8T/M9yaqQVdvI4IZzIU=
Subject key identifier:   0E:62:41:DA:59:E3:BA:D1:A4:11:AC:8C:ED:A3:A2:53:21:E4:F0:70
Certificate issuer:       /CN=F36A1982AF/serialNumber=98DFF156BA5D3B11FAA6CD017A8BF654251DEBC7
Certificate serial:       01C1
Authority key identifier: 98:DF:F1:56:BA:5D:3B:11:FA:A6:CD:01:7A:8B:F6:54:25:1D:EB:C7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/mN_xVrpdOxH6ps0Beov2VCUd68c.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A1982/2F0CD68E45D211F0B09667D4DAE4EC9C/553164D49C9711F1815829D7CE1D38B0.roa
Signing time:             Thu 20 Aug 2026 13:02:01 +0000
ROA not before:           Thu 20 Aug 2026 13:01:57 +0000
ROA not after:            Mon 20 Oct 2031 13:01:57 +0000
asID:                     329401
IP address blocks:        102.209.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A1982/2F0CD68E45D211F0B09667D4DAE4EC9C/mN_xVrpdOxH6ps0Beov2VCUd68c.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A1982/2F0CD68E45D211F0B09667D4DAE4EC9C/mN_xVrpdOxH6ps0Beov2VCUd68c.mft
                          rsync://rpki.afrinic.net/repository/afrinic/mN_xVrpdOxH6ps0Beov2VCUd68c.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 04:54:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 449 (0x1c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A1982AF, serialNumber=98DFF156BA5D3B11FAA6CD017A8BF654251DEBC7
        Validity
            Not Before: Aug 20 13:01:57 2026 GMT
            Not After : Oct 20 13:01:57 2031 GMT
        Subject: CN=6a86fac9-57bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:fc:0a:5b:28:5d:a6:4d:4a:fc:f4:18:2b:60:
                    95:63:24:1a:3e:f6:77:a9:36:af:c1:0a:f4:b2:5e:
                    3b:ed:ce:3c:8b:86:07:f8:6b:8e:f6:ab:b8:00:84:
                    0e:4c:b6:9c:91:47:1d:82:4f:73:bc:2b:bb:bd:87:
                    a9:57:85:73:9c:f6:b9:5c:2d:0c:af:d1:07:1a:08:
                    6c:e8:ee:55:b5:f8:ab:0e:50:cb:aa:32:bc:0c:38:
                    57:9c:f7:7a:21:60:7e:8e:18:b0:29:d8:87:6f:35:
                    a3:40:f6:c3:22:a4:e3:6d:55:cd:41:4c:e8:50:2c:
                    8a:1a:71:c7:3f:17:2b:d4:97:0c:14:ef:68:4c:ac:
                    88:67:35:1f:f4:e2:01:82:01:ce:b4:4e:e3:86:74:
                    10:02:42:4f:79:f1:a6:69:51:8c:40:42:4b:10:5b:
                    11:ce:14:10:15:4b:11:d4:ce:d3:a0:cf:cf:d9:15:
                    75:41:b5:73:40:63:e9:ea:67:93:b5:29:41:f8:07:
                    62:49:86:5b:28:8a:49:e5:11:5f:8e:e6:bb:d2:a3:
                    77:18:bc:d6:fb:1a:eb:6c:6f:40:1a:3f:a4:1e:5c:
                    50:b0:e8:44:3d:be:8d:9a:01:4f:93:7b:de:e8:47:
                    21:7b:d4:7c:bd:24:c3:01:9f:69:52:6b:82:64:c6:
                    53:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:62:41:DA:59:E3:BA:D1:A4:11:AC:8C:ED:A3:A2:53:21:E4:F0:70
            X509v3 Authority Key Identifier:
                keyid:98:DF:F1:56:BA:5D:3B:11:FA:A6:CD:01:7A:8B:F6:54:25:1D:EB:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A1982/2F0CD68E45D211F0B09667D4DAE4EC9C/mN_xVrpdOxH6ps0Beov2VCUd68c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/mN_xVrpdOxH6ps0Beov2VCUd68c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A1982/2F0CD68E45D211F0B09667D4DAE4EC9C/553164D49C9711F1815829D7CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.209.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:08:b3:9e:9d:33:e0:f9:59:f2:8b:c1:2e:22:69:b9:81:9b:
         d5:a6:9c:93:db:49:7c:b4:20:be:eb:f1:88:87:47:c8:c0:c1:
         bb:aa:8f:24:a3:6a:bc:f1:4d:00:0a:20:1f:06:3a:96:1e:1d:
         67:b6:36:85:09:01:78:1f:b3:90:62:ac:9a:62:39:d6:91:7a:
         6b:a4:cc:08:d3:15:bd:ab:8f:f4:54:d0:fc:f2:99:5c:6a:30:
         ff:02:12:cb:d9:97:ec:59:63:1b:cb:dd:c4:19:f4:f0:75:8c:
         76:a7:5a:7b:b2:a3:04:a0:ae:f1:9d:2f:e2:21:f6:d3:53:fe:
         5e:c2:d7:92:11:41:cd:9f:2a:18:80:f1:2e:45:0e:3f:00:71:
         fd:a0:42:4a:df:29:e9:7a:54:39:93:7e:69:82:ba:87:34:5a:
         c7:e1:e7:7e:3f:00:f4:91:63:d4:d9:83:b9:fd:09:51:a1:a8:
         5c:03:46:a8:4d:5b:17:ab:c6:56:08:a2:f9:06:70:1f:a1:f6:
         32:ca:d8:4d:d8:07:c4:65:1c:49:e5:d4:7a:67:66:09:28:72:
         04:02:2e:da:c6:77:ad:d0:18:5e:c7:32:3b:34:6b:f1:19:c2:
         f3:de:78:02:3a:c0:ee:d7:66:e1:dd:26:45:3a:81:1f:59:ae:
         3e:22:2e:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----