Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/57596D6CC54911F19B683CBBCE1D38B0.roa
File:                     57596D6CC54911F19B683CBBCE1D38B0.roa (raw, json)
Hash identifier:          up0N9h2eb4HkIYz10DJgcuADbmyG1jPPMzKmFLRvmhA=
Subject key identifier:   7D:5F:6D:63:88:23:77:0F:A6:9D:B6:D6:18:72:2E:F5:8A:05:3F:B7
Certificate issuer:       /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial:       0E26
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access:    rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/57596D6CC54911F19B683CBBCE1D38B0.roa
Signing time:             Sun 11 Oct 2026 07:57:02 +0000
ROA not before:           Sun 11 Oct 2026 07:56:57 +0000
ROA not after:            Wed 31 Dec 2036 07:56:57 +0000
asID:                     834
IP address blocks:        165.49.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
                          rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 17 Oct 2026 00:26:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3622 (0xe26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
        Validity
            Not Before: Oct 11 07:56:57 2026 GMT
            Not After : Dec 31 07:56:57 2036 GMT
        Subject: CN=6acb414e-6f96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c8:5e:dd:a8:ce:6a:45:55:e9:c0:21:23:19:
                    03:7b:6d:2b:6b:ad:cf:ad:8d:2d:77:70:9f:d0:5b:
                    df:07:d3:10:9a:79:b8:00:40:cd:a0:63:a9:fa:f5:
                    cf:2e:70:53:28:0a:08:19:65:5d:33:8e:28:35:58:
                    25:3f:97:87:a3:1c:c2:b1:36:4b:44:c5:a5:67:27:
                    0a:15:86:4e:b5:7a:a3:65:40:75:58:99:d8:49:db:
                    ce:d0:97:15:1d:50:d9:ca:a2:a4:a3:23:57:ee:69:
                    eb:02:84:18:88:01:cd:df:40:81:b8:68:5e:fa:bf:
                    53:06:47:34:57:c5:3f:4a:71:91:d9:11:9e:8e:4d:
                    42:77:1d:97:52:7d:60:ec:f5:e1:30:36:9b:02:74:
                    12:a4:3f:71:e1:7a:9a:b1:83:4c:c9:f3:bf:09:27:
                    d4:ec:d0:ed:f9:df:4c:26:3c:b6:17:45:88:54:77:
                    b7:16:5d:37:c6:26:35:63:ba:13:77:ac:97:ab:ce:
                    96:d3:63:a1:88:14:d7:fe:14:6a:28:ca:ea:41:30:
                    f5:7a:72:0b:f2:62:bd:5a:cc:7c:4b:a6:63:0f:2b:
                    97:cc:af:c0:e2:46:ec:2d:02:0d:b9:4d:c7:4d:68:
                    88:01:98:83:6f:19:e5:e1:c4:e8:ac:44:07:60:8b:
                    c0:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:5F:6D:63:88:23:77:0F:A6:9D:B6:D6:18:72:2E:F5:8A:05:3F:B7
            X509v3 Authority Key Identifier:
                keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/57596D6CC54911F19B683CBBCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.49.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:86:04:57:5b:53:5c:76:de:94:73:d0:8f:e1:a4:84:fc:7f:
         bf:c8:cd:b7:d8:7a:81:0c:83:9f:01:5f:04:c5:e0:73:0e:38:
         e1:84:a6:65:a7:a0:e8:4b:b3:9a:8d:bb:a4:12:3d:30:bf:79:
         01:16:b0:5b:cb:fc:2e:79:45:bd:76:7a:e4:86:63:70:71:1c:
         42:00:d2:c2:18:03:54:91:40:e7:a1:3a:7d:dd:24:91:c2:72:
         57:59:e6:a9:94:5b:78:49:56:38:04:0a:58:7a:31:6e:01:9a:
         2c:11:99:ea:5a:9c:d4:dc:96:49:8f:7a:bd:b4:8b:77:c5:cd:
         67:d4:15:ff:e1:6f:74:1c:a6:78:da:6e:71:36:0b:3b:c2:f1:
         e0:cc:02:a5:66:04:05:3d:2a:06:76:7d:65:fd:6f:54:0a:45:
         8e:af:81:b0:94:d6:50:ef:10:46:96:ba:34:bf:84:43:c7:96:
         a5:ae:4b:bd:09:f8:62:51:e6:6a:ea:b0:6e:68:9a:e3:66:62:
         01:3d:fb:da:77:84:dc:62:ba:4c:d7:39:ed:79:3f:46:a5:cb:
         fd:70:c4:17:bb:0a:fc:72:b5:9e:e4:18:c4:27:fd:f9:a5:47:
         ab:1e:43:98:de:21:31:93:5f:c5:27:34:4d:6f:88:d9:12:be:
         e5:8c:ef:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----