Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36EC7CE/82014A10989911E9B7396A33F8AEA228/8CD08FF6963D11F1B152F6D3CE1D38B0.roa
File:                     8CD08FF6963D11F1B152F6D3CE1D38B0.roa (raw, json)
Hash identifier:          LjBqzY7fBybv856/VtVP+nEOO3AmKuFtPd1aUQ0N8HQ=
Subject key identifier:   CD:43:20:6D:CC:00:C5:92:D0:3F:F4:11:48:D0:07:A8:99:76:6E:3F
Certificate issuer:       /CN=F36EC7CEAF/serialNumber=0E040ABF4F945F30D77DA28BBF028B6AC49D042C
Certificate serial:       0A91
Authority key identifier: 0E:04:0A:BF:4F:94:5F:30:D7:7D:A2:8B:BF:02:8B:6A:C4:9D:04:2C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/DgQKv0-UXzDXfaKLvwKLasSdBCw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36EC7CE/82014A10989911E9B7396A33F8AEA228/8CD08FF6963D11F1B152F6D3CE1D38B0.roa
Signing time:             Wed 12 Aug 2026 11:04:13 +0000
ROA not before:           Wed 12 Aug 2026 11:04:09 +0000
ROA not after:            Tue 12 Aug 2036 11:04:09 +0000
asID:                     327795
IP address blocks:        102.202.136.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36EC7CE/82014A10989911E9B7396A33F8AEA228/DgQKv0-UXzDXfaKLvwKLasSdBCw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36EC7CE/82014A10989911E9B7396A33F8AEA228/DgQKv0-UXzDXfaKLvwKLasSdBCw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/DgQKv0-UXzDXfaKLvwKLasSdBCw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 01:30:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2705 (0xa91)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36EC7CEAF, serialNumber=0E040ABF4F945F30D77DA28BBF028B6AC49D042C
        Validity
            Not Before: Aug 12 11:04:09 2026 GMT
            Not After : Aug 12 11:04:09 2036 GMT
        Subject: CN=6a7c532d-dd58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:7c:f2:18:20:aa:05:c0:53:bc:ba:d3:d6:50:
                    30:5d:a7:eb:9f:03:79:9c:95:f4:20:b9:c1:6e:ac:
                    7e:c3:ca:18:2b:ea:82:0a:f9:42:06:b1:56:53:42:
                    07:44:7a:23:f8:f0:3b:c7:3d:08:9c:ab:2e:e0:45:
                    93:8b:99:5b:63:a9:05:c0:05:b4:6f:90:2c:04:ab:
                    e2:f0:3c:18:f9:60:81:18:40:c0:26:80:49:3a:b2:
                    1a:3c:3a:d7:8d:16:56:ac:7a:16:e8:35:ee:f9:ef:
                    1a:2a:78:f8:7e:f3:90:79:52:d5:b4:8a:e1:93:ce:
                    9b:2a:1e:b9:7b:5c:be:a0:5a:40:46:39:ba:99:62:
                    6f:b7:2a:bb:79:3c:af:14:a8:4d:83:02:c5:71:4e:
                    03:7d:4c:79:61:73:81:d6:0b:d1:24:54:67:ac:fe:
                    c3:e8:11:58:09:ce:8f:53:04:97:78:ad:55:04:06:
                    00:43:82:6d:23:8d:bd:4c:a6:dd:ec:28:3c:15:b1:
                    5d:82:a7:5f:7c:00:3c:3a:70:0a:17:bb:dd:9b:b3:
                    fe:b7:fc:38:80:f0:ad:d8:fb:1c:8d:a3:b6:17:9b:
                    06:19:9a:62:cc:a3:21:5f:fd:80:1f:b2:26:1c:f1:
                    10:9b:e6:07:ee:11:ca:cd:b2:ef:03:b3:5f:36:6e:
                    5b:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:43:20:6D:CC:00:C5:92:D0:3F:F4:11:48:D0:07:A8:99:76:6E:3F
            X509v3 Authority Key Identifier:
                keyid:0E:04:0A:BF:4F:94:5F:30:D7:7D:A2:8B:BF:02:8B:6A:C4:9D:04:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36EC7CE/82014A10989911E9B7396A33F8AEA228/DgQKv0-UXzDXfaKLvwKLasSdBCw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/DgQKv0-UXzDXfaKLvwKLasSdBCw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EC7CE/82014A10989911E9B7396A33F8AEA228/8CD08FF6963D11F1B152F6D3CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.202.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         28:56:a3:a4:ed:26:e7:cb:ce:5b:40:ec:99:33:36:08:f4:f6:
         6b:03:d6:6d:6e:6e:d4:b8:3c:24:7f:f3:36:73:17:0f:fe:df:
         cb:33:45:20:cf:1d:b1:b4:99:6b:c7:71:15:05:ca:29:77:a9:
         32:a6:8f:31:43:78:75:74:20:07:f9:42:d0:c6:3e:0f:f7:e5:
         60:fd:81:e8:0a:ec:47:cd:71:1d:7c:a3:6c:02:d5:2e:b0:89:
         79:55:44:c0:dc:59:c8:b3:d7:4a:ff:33:90:be:70:1c:2d:91:
         fa:46:1b:57:8e:62:c7:8e:b9:00:73:34:69:7c:8c:d3:b3:6e:
         0b:d6:55:65:32:ed:dd:80:be:3f:40:2d:e9:b3:8f:64:ec:bf:
         b4:67:a2:51:04:a5:b5:0b:c3:a5:16:65:e6:ad:18:ab:d2:8f:
         c7:d9:43:48:0f:9e:6d:de:40:d4:51:4c:f3:00:b8:4f:7d:4c:
         14:99:52:e6:02:b2:c3:f3:0a:35:73:d6:6e:57:46:af:12:ec:
         72:b3:21:ca:a4:65:af:08:73:e0:3f:dd:7f:cd:e1:7d:c2:bd:
         44:dc:ae:c4:27:02:89:31:f7:5d:ec:91:fb:91:19:23:9d:f3:
         ff:23:c0:83:4e:38:d9:6f:c6:c0:cf:d8:b5:c4:7e:ac:ec:fa:
         94:c7:da:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----