Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36AE219/52BAC3D8231011EF92871F3A7DDC24C2/200F261EAA7611F18D325219CF1D38B0.roa
File:                     200F261EAA7611F18D325219CF1D38B0.roa (raw, json)
Hash identifier:          wwYzLUthjIrNOs+qkhOO2LuhV5ABxOLx5maCLZPDfGc=
Subject key identifier:   95:F0:6C:F9:61:C2:6C:A8:07:4B:0B:53:4C:5A:27:1B:94:73:39:2A
Certificate issuer:       /CN=F36AE219AF/serialNumber=91C99E457967B9929B2EDE7979728B0FE2639AD9
Certificate serial:       0369
Authority key identifier: 91:C9:9E:45:79:67:B9:92:9B:2E:DE:79:79:72:8B:0F:E2:63:9A:D9
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/kcmeRXlnuZKbLt55eXKLD-Jjmtk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36AE219/52BAC3D8231011EF92871F3A7DDC24C2/200F261EAA7611F18D325219CF1D38B0.roa
Signing time:             Mon 07 Sep 2026 04:39:35 +0000
ROA not before:           Mon 07 Sep 2026 04:39:31 +0000
ROA not after:            Tue 30 Sep 2036 04:39:31 +0000
asID:                     329278
IP address blocks:        102.203.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36AE219/52BAC3D8231011EF92871F3A7DDC24C2/kcmeRXlnuZKbLt55eXKLD-Jjmtk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36AE219/52BAC3D8231011EF92871F3A7DDC24C2/kcmeRXlnuZKbLt55eXKLD-Jjmtk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/kcmeRXlnuZKbLt55eXKLD-Jjmtk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 01 Oct 2026 00:07:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 873 (0x369)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36AE219AF, serialNumber=91C99E457967B9929B2EDE7979728B0FE2639AD9
        Validity
            Not Before: Sep  7 04:39:31 2026 GMT
            Not After : Sep 30 04:39:31 2036 GMT
        Subject: CN=6a9e4007-54a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:78:eb:af:67:eb:0e:a2:72:a9:9e:1b:95:f5:
                    f5:69:af:61:f3:7a:f5:40:99:09:27:7a:53:c4:ae:
                    ad:b3:27:dd:8f:5e:c8:00:56:7d:aa:cd:27:dc:03:
                    2e:38:b8:13:2f:14:9a:1d:32:34:58:e1:84:de:e1:
                    a8:99:b8:91:d1:18:65:0b:03:f1:cc:64:38:d9:db:
                    77:73:c5:28:9e:be:cd:3b:f5:9d:a8:14:b6:2e:98:
                    62:7b:01:1d:a7:e9:d9:1c:b5:52:90:32:a9:58:20:
                    a6:2d:a3:c0:81:97:30:2c:cd:2f:3e:1e:76:4d:82:
                    ef:09:50:aa:64:18:d5:94:84:79:c4:f3:71:cb:d7:
                    e8:e1:ad:53:b3:35:7b:8a:d7:68:fc:32:94:1f:3b:
                    02:f7:f0:0e:a4:1f:77:3d:71:58:a2:bc:67:d7:7c:
                    33:a3:fa:c8:a1:46:b6:d2:24:78:7e:43:25:e9:34:
                    8c:b7:f7:7f:1b:ea:fb:5e:56:0c:1a:ad:75:65:07:
                    2f:38:c5:87:3c:e2:27:d9:f3:31:88:21:44:01:3f:
                    6d:74:7d:50:e7:9e:09:3e:4a:3a:21:f7:39:b5:85:
                    57:9f:5e:8e:e6:1a:fb:6a:ac:b3:01:ec:37:c6:d4:
                    ec:47:cb:2a:c7:36:55:40:29:f0:5a:39:9d:05:11:
                    c3:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:F0:6C:F9:61:C2:6C:A8:07:4B:0B:53:4C:5A:27:1B:94:73:39:2A
            X509v3 Authority Key Identifier:
                keyid:91:C9:9E:45:79:67:B9:92:9B:2E:DE:79:79:72:8B:0F:E2:63:9A:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36AE219/52BAC3D8231011EF92871F3A7DDC24C2/kcmeRXlnuZKbLt55eXKLD-Jjmtk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kcmeRXlnuZKbLt55eXKLD-Jjmtk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AE219/52BAC3D8231011EF92871F3A7DDC24C2/200F261EAA7611F18D325219CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.203.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:ca:96:0e:6f:72:f5:04:2b:a0:05:32:4e:2b:27:cb:fe:e9:
         15:c8:a8:6f:3f:58:e7:99:cc:4f:f1:05:70:51:60:ca:91:3c:
         28:33:34:c4:4e:91:4e:eb:33:0b:6f:a2:68:a9:40:ea:e2:10:
         f4:35:5b:47:97:95:7c:26:4b:9d:92:dc:e9:e7:92:a7:33:87:
         36:6f:f3:a1:ff:d4:a6:b2:8c:e6:4b:3f:8a:b2:d4:80:e5:fc:
         2c:af:40:c4:d1:1d:f9:53:a9:59:07:00:22:9a:31:97:2d:ca:
         24:db:fb:6a:4f:1b:d0:6c:f6:35:68:4b:3e:7c:ef:05:4d:09:
         86:e0:35:d0:42:8b:21:89:d1:e5:19:9b:78:e5:a6:81:e7:43:
         18:35:9d:2b:d2:3d:c4:f1:31:8b:4e:ad:88:cf:b2:51:90:e3:
         48:60:4e:4b:da:2f:88:ec:21:90:86:75:ee:a7:be:6d:73:c8:
         f7:f3:79:0b:a7:78:34:56:d8:5e:45:46:ba:57:12:bc:b1:75:
         12:12:1c:2d:22:9c:ec:53:57:e9:d9:ad:f6:16:5d:9a:6c:e6:
         8d:52:22:f2:c9:85:14:78:f8:d6:94:2c:88:e8:9c:0f:9e:cd:
         65:f6:71:3e:b8:e2:5b:c6:1f:cd:e5:8f:c1:17:d9:b5:a8:4d:
         09:57:9a:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----