Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36AB5C3/F1C8256E184511EE9E5699174AD9E6FC/A73392CCAE9711F1A00EA6A2CE1D38B0.roa
File:                     A73392CCAE9711F1A00EA6A2CE1D38B0.roa (raw, json)
Hash identifier:          SoNB2m9m9E178Eutxr7TAZFF/JbCBpcc4cAfwqIDNcQ=
Subject key identifier:   F7:D4:1E:AC:6A:D0:FB:C2:A7:FA:8B:ED:CB:21:1A:6D:32:38:DB:30
Certificate issuer:       /CN=F36AB5C3AF/serialNumber=79E907176CFB7506BD916056F375FA38CE41CDA3
Certificate serial:       04B1
Authority key identifier: 79:E9:07:17:6C:FB:75:06:BD:91:60:56:F3:75:FA:38:CE:41:CD:A3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/eekHF2z7dQa9kWBW83X6OM5BzaM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36AB5C3/F1C8256E184511EE9E5699174AD9E6FC/A73392CCAE9711F1A00EA6A2CE1D38B0.roa
Signing time:             Sat 12 Sep 2026 10:49:40 +0000
ROA not before:           Sat 12 Sep 2026 10:49:36 +0000
ROA not after:            Wed 31 Dec 2036 10:49:36 +0000
asID:                     328652
IP address blocks:        102.210.172.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36AB5C3/F1C8256E184511EE9E5699174AD9E6FC/eekHF2z7dQa9kWBW83X6OM5BzaM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36AB5C3/F1C8256E184511EE9E5699174AD9E6FC/eekHF2z7dQa9kWBW83X6OM5BzaM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/eekHF2z7dQa9kWBW83X6OM5BzaM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1201 (0x4b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36AB5C3AF, serialNumber=79E907176CFB7506BD916056F375FA38CE41CDA3
        Validity
            Not Before: Sep 12 10:49:36 2026 GMT
            Not After : Dec 31 10:49:36 2036 GMT
        Subject: CN=6aa52e44-5c4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:6b:f1:d3:cd:f5:71:d4:1b:05:6b:4a:d2:c3:
                    33:59:c7:a2:99:e9:0a:5f:c2:af:5c:43:6a:0e:f5:
                    57:4d:9c:7d:a2:85:56:18:24:8d:ba:21:ef:d1:74:
                    b8:7c:90:a4:53:9a:d3:b3:8f:6f:30:8a:a9:53:46:
                    c2:af:34:66:b8:0e:3b:f1:64:94:73:ab:7d:09:8f:
                    b2:33:18:24:9d:d1:74:8b:27:f1:b2:35:5b:d1:59:
                    11:7a:15:f2:3b:16:8d:04:58:b0:3c:28:8a:2f:f7:
                    17:00:9a:20:8d:b6:91:2c:ec:8f:36:00:52:d6:19:
                    3a:35:fe:90:9b:c7:f1:45:6e:fe:62:59:46:05:94:
                    9d:c4:77:c1:34:6e:ca:fd:cd:10:39:0a:8b:42:eb:
                    04:d8:c6:c2:68:ee:35:86:03:48:a1:81:4e:74:82:
                    2a:27:09:61:3c:a6:6d:e6:fa:49:2f:18:9a:46:d3:
                    0b:a5:14:e5:f8:db:53:42:9d:a7:40:49:df:75:7a:
                    46:f5:24:aa:60:ad:be:17:96:9c:79:be:8c:96:f5:
                    d1:61:b2:6f:e9:e7:1d:5c:f3:49:7e:05:95:a6:d8:
                    ee:d7:39:1b:3b:fc:68:35:5d:06:96:ce:53:6d:ff:
                    62:8e:9e:a7:a0:d8:cd:41:5c:56:76:d0:80:16:f1:
                    7a:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:D4:1E:AC:6A:D0:FB:C2:A7:FA:8B:ED:CB:21:1A:6D:32:38:DB:30
            X509v3 Authority Key Identifier:
                keyid:79:E9:07:17:6C:FB:75:06:BD:91:60:56:F3:75:FA:38:CE:41:CD:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36AB5C3/F1C8256E184511EE9E5699174AD9E6FC/eekHF2z7dQa9kWBW83X6OM5BzaM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/eekHF2z7dQa9kWBW83X6OM5BzaM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AB5C3/F1C8256E184511EE9E5699174AD9E6FC/A73392CCAE9711F1A00EA6A2CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.210.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         67:c1:a7:59:d0:dc:88:dc:19:7f:23:77:16:f6:09:ad:21:83:
         77:58:20:33:0c:11:5e:0c:bf:ae:f2:d7:00:99:8f:3c:b9:24:
         62:8e:0b:16:61:09:af:b4:c3:fc:cb:82:08:3d:60:ce:65:be:
         c4:79:e3:eb:13:ae:a7:84:95:e1:f2:74:54:b7:36:88:a7:0f:
         bb:cb:13:fc:52:d7:83:53:84:c2:1d:29:78:50:98:b8:e1:36:
         f4:80:35:94:d8:cb:44:f9:c9:51:93:a7:71:a9:7c:a3:ec:80:
         a9:0b:83:c1:af:2c:1b:6d:91:e7:4a:51:12:d4:01:82:9a:14:
         97:c4:a9:13:d7:9b:15:30:26:80:49:35:f9:86:bd:c8:ed:fa:
         dd:56:e8:1e:8d:09:aa:8c:97:65:eb:f8:06:1b:d4:1d:ac:52:
         d3:46:00:68:da:a3:17:cf:5e:bc:b7:e5:17:4b:7e:2c:bc:1e:
         26:fa:d5:57:a6:63:81:05:c4:fc:1f:4a:1c:7a:f2:2e:bc:00:
         32:a8:ad:46:b3:77:91:79:f6:24:e3:f4:35:04:85:eb:ca:fb:
         85:3a:73:57:39:93:b5:7f:70:d9:e6:0d:a8:d2:6a:7e:24:b6:
         85:e4:dc:7f:cf:c8:4a:a8:9b:0a:53:dd:46:00:6f:ac:e5:5d:
         5e:52:37:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----