Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36DD92B/F4F4F3EA0BBD11EF8655910D017001B1/8176D5FAB27D11F18AF20EBCCE1D38B0.roa
File:                     8176D5FAB27D11F18AF20EBCCE1D38B0.roa (raw, json)
Hash identifier:          n1a4oKf1AfDMVgheqWRfnPJPmLCX2nozQDZCIZsqBOE=
Subject key identifier:   78:05:24:87:BD:3F:B0:17:EE:33:77:2D:E0:6F:4B:56:32:1A:39:65
Certificate issuer:       /CN=F36DD92BAF/serialNumber=992CD319D7A515A56373294CE049153F8C3E004B
Certificate serial:       0378
Authority key identifier: 99:2C:D3:19:D7:A5:15:A5:63:73:29:4C:E0:49:15:3F:8C:3E:00:4B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/mSzTGdelFaVjcylM4EkVP4w-AEs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36DD92B/F4F4F3EA0BBD11EF8655910D017001B1/8176D5FAB27D11F18AF20EBCCE1D38B0.roa
Signing time:             Thu 17 Sep 2026 09:52:34 +0000
ROA not before:           Thu 17 Sep 2026 09:52:30 +0000
ROA not after:            Wed 17 Sep 2036 09:52:30 +0000
asID:                     328723
IP address blocks:        102.201.48.0/22 maxlen: 24
                          102.206.116.0/22 maxlen: 24
                          102.209.84.0/22 maxlen: 24
                          102.222.20.0/22 maxlen: 24
                          2c0f:e990::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36DD92B/F4F4F3EA0BBD11EF8655910D017001B1/mSzTGdelFaVjcylM4EkVP4w-AEs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36DD92B/F4F4F3EA0BBD11EF8655910D017001B1/mSzTGdelFaVjcylM4EkVP4w-AEs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/mSzTGdelFaVjcylM4EkVP4w-AEs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 12 Oct 2026 04:11:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 888 (0x378)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36DD92BAF, serialNumber=992CD319D7A515A56373294CE049153F8C3E004B
        Validity
            Not Before: Sep 17 09:52:30 2026 GMT
            Not After : Sep 17 09:52:30 2036 GMT
        Subject: CN=6aabb862-7e55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:11:2b:f6:56:53:fa:6c:c6:40:31:a8:5a:e1:
                    e6:9d:67:1e:0b:18:fd:da:2a:cb:a4:e0:d1:ae:0d:
                    f3:2d:43:e5:94:eb:75:d0:74:8f:51:f3:d9:34:a5:
                    a7:12:7c:4d:ba:cc:5b:11:67:a0:77:a5:8e:83:6a:
                    fa:a6:e9:57:cb:35:92:d8:6c:da:48:20:f0:ce:9d:
                    e2:b3:8b:2d:29:6a:90:31:e1:68:0d:91:63:4d:54:
                    7d:1c:97:a0:ca:71:f6:c4:9f:3e:79:27:87:0d:12:
                    02:19:be:5e:25:42:d7:86:46:15:a4:55:32:62:28:
                    1f:b6:70:84:1e:e4:c5:03:b4:32:80:6a:76:d1:b2:
                    4c:4e:ca:5f:cd:68:35:16:92:63:3f:d7:4b:2b:1b:
                    34:c9:d2:84:f0:83:95:b8:1e:8f:b7:5b:7b:83:a9:
                    eb:a1:46:7e:f3:12:49:ef:87:76:51:5f:5b:c2:cd:
                    39:4e:ee:84:c0:32:1f:f4:55:13:a7:36:a8:9b:a7:
                    46:d3:f7:fc:95:41:f8:0d:f3:0c:fc:e4:fa:d5:ae:
                    5e:c1:53:37:f9:fe:46:46:3d:57:61:16:60:c0:b7:
                    06:17:6d:22:87:f9:12:18:d5:28:f9:88:f2:22:7d:
                    05:e5:74:43:e6:c8:56:56:c2:64:72:fb:29:9a:d6:
                    ba:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:05:24:87:BD:3F:B0:17:EE:33:77:2D:E0:6F:4B:56:32:1A:39:65
            X509v3 Authority Key Identifier:
                keyid:99:2C:D3:19:D7:A5:15:A5:63:73:29:4C:E0:49:15:3F:8C:3E:00:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36DD92B/F4F4F3EA0BBD11EF8655910D017001B1/mSzTGdelFaVjcylM4EkVP4w-AEs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/mSzTGdelFaVjcylM4EkVP4w-AEs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DD92B/F4F4F3EA0BBD11EF8655910D017001B1/8176D5FAB27D11F18AF20EBCCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.201.48.0/22
                  102.206.116.0/22
                  102.209.84.0/22
                  102.222.20.0/22
                IPv6:
                  2c0f:e990::/32

    Signature Algorithm: sha256WithRSAEncryption
         39:a9:56:1f:28:48:27:32:be:aa:39:2e:15:92:52:9b:1f:67:
         3c:2c:99:e7:9f:ac:12:56:9a:ef:f2:03:57:f5:f6:fe:66:31:
         7e:a5:92:b0:04:42:6f:60:99:a7:cb:c0:c9:e1:97:e3:3f:33:
         d0:ac:63:35:59:2c:b1:5f:53:72:f7:d6:41:e6:c9:a0:42:6f:
         d0:ba:1f:ab:f7:5f:af:bc:58:ba:c3:e4:88:1e:6f:af:66:56:
         24:bb:d5:7f:dc:f8:5d:3e:a0:a5:f7:f2:de:69:3c:56:cd:74:
         0e:1c:09:2c:58:dc:ee:88:80:68:90:6e:88:3a:84:e2:1b:d6:
         80:27:6d:bc:ce:68:fb:72:45:86:75:53:8c:d3:40:1c:28:cf:
         d6:51:32:7d:dc:53:69:53:5b:31:08:d7:96:e7:91:ce:0f:65:
         37:28:e0:20:b1:dc:3e:1b:8c:a5:d9:57:0d:e5:8e:f6:46:6f:
         ef:3b:b9:a1:bc:e8:f2:bf:ac:42:61:8c:1a:ea:b9:eb:c2:e9:
         bc:25:6f:81:5f:54:7f:56:34:fb:ca:6c:61:c9:42:d2:32:77:
         d3:e1:c9:20:2c:a2:06:b7:81:7e:b3:f5:f9:2a:de:26:c5:36:
         d9:eb:62:52:e7:50:e6:1d:c8:be:0a:b5:a8:b7:1d:65:95:25:
         eb:de:a8:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----