Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A9104/41D036ECF61811ECA84F46AEF1222468/E1379B68963111F1AF34890ECF1D38B0.roa
File:                     E1379B68963111F1AF34890ECF1D38B0.roa (raw, json)
Hash identifier:          cZ2UyVqYhnL/fYV1jsUwYDl9zBo3chxiEbTI6kmghc0=
Subject key identifier:   BD:41:64:94:3E:FC:38:AC:B7:E6:FB:5D:13:46:F6:A2:AF:33:4E:CA
Certificate issuer:       /CN=F36A9104AF/serialNumber=18FDC8AF53877802589BEEDEE813F6B626EF82FE
Certificate serial:       062A
Authority key identifier: 18:FD:C8:AF:53:87:78:02:58:9B:EE:DE:E8:13:F6:B6:26:EF:82:FE
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/GP3Ir1OHeAJYm-7e6BP2tibvgv4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A9104/41D036ECF61811ECA84F46AEF1222468/E1379B68963111F1AF34890ECF1D38B0.roa
Signing time:             Wed 12 Aug 2026 09:40:41 +0000
ROA not before:           Wed 12 Aug 2026 09:40:36 +0000
ROA not after:            Mon 24 Jan 2033 09:40:36 +0000
asID:                     329039
IP address blocks:        102.216.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A9104/41D036ECF61811ECA84F46AEF1222468/GP3Ir1OHeAJYm-7e6BP2tibvgv4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A9104/41D036ECF61811ECA84F46AEF1222468/GP3Ir1OHeAJYm-7e6BP2tibvgv4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/GP3Ir1OHeAJYm-7e6BP2tibvgv4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 02:47:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1578 (0x62a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A9104AF, serialNumber=18FDC8AF53877802589BEEDEE813F6B626EF82FE
        Validity
            Not Before: Aug 12 09:40:36 2026 GMT
            Not After : Jan 24 09:40:36 2033 GMT
        Subject: CN=6a7c3f98-38a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:85:66:18:ce:13:39:40:23:99:66:74:c1:96:
                    1b:98:ce:e6:a1:1b:7d:76:50:1b:68:90:ff:cc:d6:
                    73:1c:59:72:2f:a4:52:4a:b2:17:20:a0:7e:a6:56:
                    c4:a2:5f:fa:dd:5a:e8:bb:9d:c2:d6:16:b9:71:95:
                    72:7b:60:5f:3c:52:3c:64:83:61:92:23:c9:e8:41:
                    3b:84:c6:25:c8:8f:fa:2d:c9:4c:b7:38:39:18:23:
                    f3:2b:c0:38:8a:df:5e:3a:cc:1b:d6:a8:21:66:61:
                    7b:26:5b:28:66:a2:ea:26:87:3d:ed:e0:22:d1:1e:
                    16:86:b2:29:7b:3e:0e:56:48:38:a9:de:a1:29:61:
                    ff:62:c0:91:59:70:53:ec:ef:49:b3:b4:10:d2:81:
                    75:24:89:1b:7a:3d:6f:fe:c2:90:e3:de:6e:8c:f9:
                    dc:1f:e4:d6:17:ad:0e:f5:e8:71:7e:c5:46:d7:b6:
                    59:4d:c6:c2:f9:73:8f:9e:40:45:e0:66:d1:61:f1:
                    48:7e:49:e8:1f:59:b8:67:df:6b:d3:1b:f7:93:c4:
                    be:10:df:86:df:4e:cb:9d:99:7d:0b:e0:13:03:ba:
                    6d:f6:a4:35:ec:ed:8f:e6:19:51:e0:4b:e0:86:8b:
                    3d:3b:e3:6f:29:89:63:16:49:75:d5:44:c0:08:e5:
                    6c:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:41:64:94:3E:FC:38:AC:B7:E6:FB:5D:13:46:F6:A2:AF:33:4E:CA
            X509v3 Authority Key Identifier:
                keyid:18:FD:C8:AF:53:87:78:02:58:9B:EE:DE:E8:13:F6:B6:26:EF:82:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A9104/41D036ECF61811ECA84F46AEF1222468/GP3Ir1OHeAJYm-7e6BP2tibvgv4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/GP3Ir1OHeAJYm-7e6BP2tibvgv4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A9104/41D036ECF61811ECA84F46AEF1222468/E1379B68963111F1AF34890ECF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.216.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:27:fd:9c:f6:97:08:f7:ff:29:95:80:b2:01:84:58:0b:25:
         a9:75:d4:e4:a8:ed:4a:c5:5c:71:b4:80:7a:5a:89:fa:c1:25:
         cd:ba:c2:64:ae:51:df:5e:26:fc:8a:e8:5a:1d:1f:16:1c:8f:
         70:a1:a5:e9:cb:7e:55:77:36:c3:12:3d:33:df:df:24:0f:65:
         97:97:68:75:b4:4b:a1:dc:9a:88:4f:4d:d8:dd:25:25:3c:7d:
         1c:cb:db:d9:f1:2d:a7:7b:0d:05:0c:26:f7:64:f8:63:5c:9a:
         61:20:77:27:1a:e0:e4:58:8e:e2:24:a7:dd:c5:41:92:87:c7:
         c5:4a:8f:14:a1:79:4f:6e:9c:e5:80:b9:5f:59:85:04:3c:4b:
         b9:b3:47:5d:77:c6:2c:06:d1:a2:bc:33:d0:fc:7d:27:33:20:
         ef:34:fc:2f:58:43:cd:76:bd:b4:26:6f:5c:aa:0f:5b:66:f4:
         39:e7:ff:9b:7e:ef:59:48:98:ea:7d:99:df:eb:a6:a3:e5:2b:
         fe:af:59:44:f4:ea:7d:46:83:ba:3b:5f:8b:e0:43:93:f5:ed:
         93:56:f6:bd:c6:e7:34:47:43:f0:ed:1b:ca:df:b2:41:6f:06:
         87:4c:86:d7:08:75:f7:a8:c7:e4:7f:72:36:dc:b1:8b:65:98:
         f5:af:88:a2
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBiowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QTkxMDRBRjExMC8GA1UEBRMoMThGREM4QUY1Mzg3NzgwMjU4OUJFRURFRTgxM0Y2
QjYyNkVGODJGRTAeFw0yNjA4MTIwOTQwMzZaFw0zMzAxMjQwOTQwMzZaMBgxFjAU
BgNVBAMTDTZhN2MzZjk4LTM4YTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDahWYYzhM5QCOZZnTBlhuYzuahG312UBtokP/M1nMcWXIvpFJKshcgoH6m
VsSiX/rdWui7ncLWFrlxlXJ7YF88Ujxkg2GSI8noQTuExiXIj/otyUy3ODkYI/Mr
wDiK3146zBvWqCFmYXsmWyhmouomhz3t4CLRHhaGsil7Pg5WSDip3qEpYf9iwJFZ
cFPs70mztBDSgXUkiRt6PW/+wpDj3m6M+dwf5NYXrQ716HF+xUbXtllNxsL5c4+e
QEXgZtFh8Uh+SegfWbhn32vTG/eTxL4Q34bfTsudmX0L4BMDum32pDXs7Y/mGVHg
S+CGiz07428piWMWSXXVRMAI5WxRAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUvUFk
lD78OKy35vtdE0b2oq8zTsowHwYDVR0jBBgwFoAUGP3Ir1OHeAJYm+7e6BP2tibv
gv4wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkE5MTA0LzQxRDAzNkVDRjYxODExRUNBODRGNDZBRUYxMjIyNDY4L0dQM0ly
MU9IZUFKWW0tN2U2QlAydGlidmd2NC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0dQM0lyMU9IZUFKWW0tN2U2QlAydGlidmd2NC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkE5MTA0LzQxRDAzNkVDRjYxODExRUNBODRGNDZBRUYx
MjIyNDY4L0UxMzc5QjY4OTYzMTExRjFBRjM0ODkwRUNGMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABm2BMwDQYJKoZIhvcNAQEL
BQADggEBACon/Zz2lwj3/ymVgLIBhFgLJal11OSo7UrFXHG0gHpaifrBJc26wmSu
Ud9eJvyK6FodHxYcj3ChpenLflV3NsMSPTPf3yQPZZeXaHW0S6HcmohPTdjdJSU8
fRzL29nxLad7DQUMJvdk+GNcmmEgdyca4ORYjuIkp93FQZKHx8VKjxSheU9unOWA
uV9ZhQQ8S7mzR113xiwG0aK8M9D8fSczIO80/C9YQ812vbQmb1yqD1tm9Dnn/5t+
71lImOp9md/rpqPlK/6vWUT06n1Gg7o7X4vgQ5P17ZNW9r3G5zRHQ/DtG8rfskFv
BodMhtcIdfeox+R/cjbcsYtlmPWviKI=
-----END CERTIFICATE-----