Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/ABDB33A8C79B11F1963B86E2CE1D38B0.roa
File:                     ABDB33A8C79B11F1963B86E2CE1D38B0.roa (raw, json)
Hash identifier:          uFdWQTYdzy156qPhVkxq4qC8S4jge6y+ZipIzNzNov0=
Subject key identifier:   7D:97:82:7A:20:F8:55:CA:F6:FC:B1:FD:FF:F2:92:DA:45:A4:4B:83
Certificate issuer:       /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial:       0E2D
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access:    rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/ABDB33A8C79B11F1963B86E2CE1D38B0.roa
Signing time:             Wed 14 Oct 2026 06:51:25 +0000
ROA not before:           Wed 14 Oct 2026 06:51:20 +0000
ROA not after:            Wed 31 Dec 2036 06:51:20 +0000
asID:                     834
IP address blocks:        165.49.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
                          rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 17 Oct 2026 00:26:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3629 (0xe2d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
        Validity
            Not Before: Oct 14 06:51:20 2026 GMT
            Not After : Dec 31 06:51:20 2036 GMT
        Subject: CN=6acf266c-a9cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:43:05:fc:b2:f1:ce:2a:57:ab:59:ee:07:08:
                    18:44:cc:f0:d5:7f:ab:df:92:6e:79:ac:c2:97:ee:
                    99:f3:e1:41:ca:6e:8e:19:4c:ed:9b:e3:ff:55:90:
                    7e:19:c8:0b:35:45:19:ae:19:84:4b:e8:12:cb:11:
                    0d:ce:43:0a:53:12:00:7e:2e:f7:86:1b:81:e9:10:
                    9e:20:fd:e2:9f:9c:10:41:3f:d4:96:9d:18:99:18:
                    4e:a6:d6:c6:28:b5:28:74:5f:e4:a0:7c:53:ab:23:
                    34:f8:b8:5d:10:f0:da:62:c4:57:a9:7e:52:16:58:
                    3a:f0:5d:d4:9e:b0:81:a9:fd:5e:98:45:51:f4:bc:
                    1b:13:fe:59:b0:f6:13:14:7b:90:80:4e:18:18:0b:
                    d0:ba:a4:ce:78:fb:45:80:40:44:89:69:af:07:e6:
                    a5:fe:11:c1:9e:23:68:91:a2:09:17:b8:00:d8:ba:
                    17:e3:36:25:ba:61:9e:d2:74:a0:63:f6:66:e7:77:
                    c1:c9:15:88:e2:09:23:58:11:11:26:19:c7:a0:22:
                    d9:f8:0c:16:08:df:fd:1c:2a:c7:71:8c:b3:40:3f:
                    6c:d3:d3:c2:1e:1f:14:25:b5:bc:6b:66:33:fa:3b:
                    b2:19:db:1a:f1:7b:01:96:ff:30:08:a9:2a:bd:e7:
                    f6:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:97:82:7A:20:F8:55:CA:F6:FC:B1:FD:FF:F2:92:DA:45:A4:4B:83
            X509v3 Authority Key Identifier:
                keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/ABDB33A8C79B11F1963B86E2CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.49.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:df:fa:82:62:ae:db:16:34:25:71:d3:97:8c:6e:f1:c9:0f:
         05:b6:67:6b:65:b6:cd:78:9b:a2:ab:22:33:a2:9f:15:1a:8a:
         48:d5:da:bb:af:8f:01:74:b7:d5:e2:1b:6c:65:bf:ee:35:67:
         01:1b:96:63:b3:3f:13:7a:e5:37:d6:b5:e2:60:15:58:52:48:
         cb:03:32:48:f5:7e:9b:c9:4a:74:8a:96:22:75:c1:b5:7d:7e:
         33:09:eb:9a:4c:fe:b5:97:b6:86:4f:3c:06:cb:59:cc:43:fe:
         21:d0:4f:42:dd:4f:fc:34:b6:92:a2:49:8f:d2:48:e3:58:32:
         f1:c2:f4:38:ef:0b:a3:1f:40:b8:c8:48:a4:4f:bf:29:43:4e:
         c3:10:4e:75:69:a2:6f:1e:65:ae:81:b8:16:3c:35:ed:1d:c9:
         5c:c5:99:1c:3e:ef:95:fe:d4:94:c1:1a:15:b8:e9:ac:29:eb:
         ff:f7:e5:3b:5d:45:f5:93:ea:d9:24:eb:3e:36:1a:61:c9:a8:
         af:63:2c:e4:e5:ce:41:96:86:93:28:16:a8:1f:a5:8b:c1:2c:
         1d:32:3a:ee:b2:86:a4:27:39:5a:f3:6b:31:d2:19:52:64:41:
         71:28:59:a5:74:3e:98:15:a5:36:56:76:5f:cc:66:a0:41:56:
         e9:75:79:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----