Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/EF36B71A932C11F1A9AEEFC3CE1D38B0.roa
File:                     EF36B71A932C11F1A9AEEFC3CE1D38B0.roa (raw, json)
Hash identifier:          P9jS1JfKav+YaFWjlyd1AwV0eUs6psZtf0KySr19DtM=
Subject key identifier:   3A:86:1C:98:5E:0B:4B:0A:00:4F:04:7D:BE:73:17:25:A5:3A:4D:E7
Certificate issuer:       /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial:       0A97
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/EF36B71A932C11F1A9AEEFC3CE1D38B0.roa
Signing time:             Sat 08 Aug 2026 13:27:43 +0000
ROA not before:           Sat 08 Aug 2026 13:27:39 +0000
ROA not after:            Sun 31 Jul 2033 13:27:39 +0000
asID:                     37119
IP address blocks:        105.174.0.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2711 (0xa97)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D0F50AF, serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
        Validity
            Not Before: Aug  8 13:27:39 2026 GMT
            Not After : Jul 31 13:27:39 2033 GMT
        Subject: CN=6a772ecf-3a13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:90:4e:3e:9a:20:42:d2:74:03:db:e2:2c:e9:
                    85:64:46:ff:ed:20:91:35:7f:fc:da:61:15:6e:67:
                    53:6d:74:28:53:25:74:17:7f:99:5d:77:fa:9d:74:
                    0b:5a:7e:36:7a:2b:37:d1:4b:aa:61:d2:35:98:3e:
                    75:79:3b:2c:99:c6:1b:b6:ab:26:58:1b:fc:40:21:
                    e3:2c:23:cd:b2:c7:89:93:4b:fd:4c:e8:27:9f:3b:
                    3a:e4:c1:2c:f6:1f:d2:2e:4a:d7:59:18:90:81:ad:
                    3c:f3:7d:3b:06:5d:fd:3b:94:8d:d7:14:fe:f5:53:
                    58:9b:83:a3:1e:f9:43:29:0f:f0:c5:a2:38:d9:78:
                    5e:7c:d4:a1:6b:ee:7d:9b:ef:a0:32:10:00:8f:de:
                    47:86:80:11:4b:9c:44:88:22:79:fb:96:ce:da:52:
                    b5:1a:f3:c8:b5:e4:ff:e5:89:e9:58:42:ac:42:06:
                    42:d8:75:f7:25:ba:92:b8:b5:9b:83:7d:9a:a3:bf:
                    b6:f1:ff:43:5c:2e:6f:39:b8:aa:d6:72:48:c1:2c:
                    dd:d5:4e:60:7a:c2:fd:c1:f2:6d:b5:5e:c7:83:90:
                    70:c0:99:79:c3:8f:6f:fb:e2:80:f7:88:cf:e0:49:
                    d2:11:e1:ba:6e:e0:72:60:c9:19:40:78:cc:ca:53:
                    21:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:86:1C:98:5E:0B:4B:0A:00:4F:04:7D:BE:73:17:25:A5:3A:4D:E7
            X509v3 Authority Key Identifier:
                keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/EF36B71A932C11F1A9AEEFC3CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  105.174.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         05:40:9d:db:33:12:b7:ab:9d:bd:c6:34:ab:32:b2:24:a5:c1:
         bc:de:83:79:98:fc:5c:4a:69:a9:fa:a5:49:48:56:86:ce:ad:
         70:4c:dd:37:0b:33:71:a4:78:d2:3d:0f:ed:d2:4a:a5:3d:65:
         15:99:83:c8:4d:89:21:04:07:ef:e2:6a:d3:50:db:eb:a0:f8:
         2e:5a:3b:4d:5e:c5:75:25:c0:13:24:a5:5b:64:9a:bf:29:a6:
         e0:f3:17:e4:ba:22:bf:ac:2f:95:7e:84:b9:47:0d:14:ce:56:
         e7:4e:51:c0:be:8b:a7:ce:c0:55:8a:cc:ed:3c:23:e5:fc:fc:
         3a:01:d8:9e:a2:a2:a8:3f:4f:99:75:75:38:07:8a:0c:b5:b5:
         88:6a:5b:ec:64:53:bb:0c:3c:b8:f0:91:b0:27:76:65:dc:ee:
         4b:94:bb:e3:a4:1c:7c:6b:e7:fc:6f:8f:15:1d:2e:d5:0f:23:
         3e:7f:1c:f8:03:87:cc:38:64:2c:45:e5:3c:44:c0:30:d3:1d:
         02:16:0b:d8:40:20:93:05:e0:38:f4:05:0e:49:88:e6:ac:e6:
         14:70:37:27:6c:e1:bd:91:4e:bd:78:6c:a0:86:74:15:b4:68:
         5a:39:87:97:8d:83:7d:42:fd:04:3a:e6:06:88:16:64:c6:5d:
         36:1a:cb:fe
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCpcwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RDBGNTBBRjExMC8GA1UEBRMoQUU5OEE1RkRBRDJEQzlGNEZDMUJFNDdGNjY4NTdB
OEM0Nzk4ODEwMjAeFw0yNjA4MDgxMzI3MzlaFw0zMzA3MzExMzI3MzlaMBgxFjAU
BgNVBAMTDTZhNzcyZWNmLTNhMTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCvkE4+miBC0nQD2+Is6YVkRv/tIJE1f/zaYRVuZ1NtdChTJXQXf5ldd/qd
dAtafjZ6KzfRS6ph0jWYPnV5OyyZxhu2qyZYG/xAIeMsI82yx4mTS/1M6CefOzrk
wSz2H9IuStdZGJCBrTzzfTsGXf07lI3XFP71U1ibg6Me+UMpD/DFojjZeF581KFr
7n2b76AyEACP3keGgBFLnESIInn7ls7aUrUa88i15P/lielYQqxCBkLYdfclupK4
tZuDfZqjv7bx/0NcLm85uKrWckjBLN3VTmB6wv3B8m21XseDkHDAmXnDj2/74oD3
iM/gSdIR4bpu4HJgyRlAeMzKUyGVAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUOoYc
mF4LSwoATwR9vnMXJaU6TecwHwYDVR0jBBgwFoAUrpil/a0tyfT8G+R/ZoV6jEeY
gQIwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkQwRjUwLzVFQUFBNkI4MjU4RjExRUJCNzBCN0MxOUY4QUVBMjI4L3JwaWxf
YTB0eWZUOEctUl9ab1Y2akVlWWdRSS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3JwaWxfYTB0eWZUOEctUl9ab1Y2akVlWWdRSS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkQwRjUwLzVFQUFBNkI4MjU4RjExRUJCNzBCN0MxOUY4
QUVBMjI4L0VGMzZCNzFBOTMyQzExRjFBOUFFRUZDM0NFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJprgAwDQYJKoZIhvcNAQEL
BQADggEBAAVAndszErernb3GNKsysiSlwbzeg3mY/FxKaan6pUlIVobOrXBM3TcL
M3GkeNI9D+3SSqU9ZRWZg8hNiSEEB+/iatNQ2+ug+C5aO01exXUlwBMkpVtkmr8p
puDzF+S6Ir+sL5V+hLlHDRTOVudOUcC+i6fOwFWKzO08I+X8/DoB2J6ioqg/T5l1
dTgHigy1tYhqW+xkU7sMPLjwkbAndmXc7kuUu+OkHHxr5/xvjxUdLtUPIz5/HPgD
h8w4ZCxF5TxEwDDTHQIWC9hAIJMF4Dj0BQ5JiOas5hRwNyds4b2RTr14bKCGdBW0
aFo5h5eNg31C/QQ65gaIFmTGXTYay/4=
-----END CERTIFICATE-----