Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36EC7CE/82014A10989911E9B7396A33F8AEA228/FA78C2A4963711F189AD42B3CE1D38B0.roa
File:                     FA78C2A4963711F189AD42B3CE1D38B0.roa (raw, json)
Hash identifier:          sqnMHuAuMvtV2NgF64lasqjlK/Azxonx9qZ8oNc6bXc=
Subject key identifier:   A5:35:60:B1:7B:A1:DF:5C:0A:19:85:27:D2:C5:79:DD:10:3C:38:BE
Certificate issuer:       /CN=F36EC7CEAF/serialNumber=0E040ABF4F945F30D77DA28BBF028B6AC49D042C
Certificate serial:       0A8B
Authority key identifier: 0E:04:0A:BF:4F:94:5F:30:D7:7D:A2:8B:BF:02:8B:6A:C4:9D:04:2C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/DgQKv0-UXzDXfaKLvwKLasSdBCw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36EC7CE/82014A10989911E9B7396A33F8AEA228/FA78C2A4963711F189AD42B3CE1D38B0.roa
Signing time:             Wed 12 Aug 2026 10:24:20 +0000
ROA not before:           Wed 12 Aug 2026 10:24:16 +0000
ROA not after:            Tue 12 Aug 2036 10:24:16 +0000
asID:                     327795
IP address blocks:        2c0f:efe8:620::/43 maxlen: 43
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36EC7CE/82014A10989911E9B7396A33F8AEA228/DgQKv0-UXzDXfaKLvwKLasSdBCw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36EC7CE/82014A10989911E9B7396A33F8AEA228/DgQKv0-UXzDXfaKLvwKLasSdBCw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/DgQKv0-UXzDXfaKLvwKLasSdBCw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2699 (0xa8b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36EC7CEAF, serialNumber=0E040ABF4F945F30D77DA28BBF028B6AC49D042C
        Validity
            Not Before: Aug 12 10:24:16 2026 GMT
            Not After : Aug 12 10:24:16 2036 GMT
        Subject: CN=6a7c49d4-755d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:75:c9:08:ba:8d:ee:43:23:06:49:75:f8:1a:
                    28:41:ea:d0:e6:1f:01:43:ca:31:a6:a3:24:14:f0:
                    ee:c3:c0:8c:67:56:85:85:f3:75:4c:e6:74:a2:92:
                    b6:42:a5:30:2a:75:9f:58:34:4d:14:a5:45:19:0e:
                    0c:81:9f:f6:e2:78:58:7e:d5:b0:8e:f8:92:e0:0e:
                    75:ea:15:da:4b:b0:6b:6a:3a:25:cd:8f:56:e9:47:
                    d6:07:b0:f3:ca:3d:33:d3:63:4d:cc:fc:51:ba:2d:
                    29:9b:13:2b:30:ef:f2:e2:9c:ca:3e:03:6a:6c:4d:
                    e4:3f:82:de:61:28:4a:fb:3a:31:d9:e8:29:72:ae:
                    e1:73:fa:57:47:84:33:b2:4a:bd:43:dd:f3:87:6d:
                    73:b0:7c:e9:2a:b5:2a:2b:0c:fb:f6:84:b4:65:fe:
                    47:df:42:cc:51:e4:6b:50:3f:f6:8c:44:e4:9b:2e:
                    2b:d1:aa:aa:0d:1a:cb:c4:0b:08:3a:ac:04:6f:0e:
                    fb:d3:00:fe:c4:3a:dd:3e:b2:aa:55:86:7f:8d:7a:
                    56:38:99:40:e6:88:df:af:f3:eb:05:49:d7:82:2f:
                    08:91:f8:83:f0:7c:b6:69:7d:ea:01:b4:17:4f:c0:
                    f2:5d:f7:b4:24:b3:13:57:42:55:54:13:92:ce:2e:
                    04:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:35:60:B1:7B:A1:DF:5C:0A:19:85:27:D2:C5:79:DD:10:3C:38:BE
            X509v3 Authority Key Identifier:
                keyid:0E:04:0A:BF:4F:94:5F:30:D7:7D:A2:8B:BF:02:8B:6A:C4:9D:04:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36EC7CE/82014A10989911E9B7396A33F8AEA228/DgQKv0-UXzDXfaKLvwKLasSdBCw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/DgQKv0-UXzDXfaKLvwKLasSdBCw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EC7CE/82014A10989911E9B7396A33F8AEA228/FA78C2A4963711F189AD42B3CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:efe8:620::/43

    Signature Algorithm: sha256WithRSAEncryption
         85:d4:35:b7:e9:9a:7b:cd:a5:fd:a9:fe:9b:c1:66:0f:75:5c:
         2c:bb:28:fa:c8:04:5e:20:ae:fa:5f:14:95:71:0e:26:45:c3:
         7e:68:84:e6:e7:11:e2:02:95:44:06:ea:ec:83:3a:e0:b8:0f:
         d7:ba:bc:b7:16:9f:dc:68:43:ca:46:96:7d:61:85:f9:9c:f3:
         af:a4:c0:a6:9b:7a:06:a6:10:17:82:51:d1:06:21:5f:e0:10:
         79:19:30:64:eb:db:d3:07:23:a6:0d:f7:24:dc:de:de:98:2b:
         54:44:69:d9:a2:b4:0f:8a:82:d1:d3:be:a8:04:28:23:9f:8c:
         41:d0:25:30:ca:01:41:ba:81:7b:41:6b:2b:3d:29:26:ab:8d:
         58:6c:9d:2c:0c:15:bb:ff:18:6f:cc:eb:62:ae:ce:00:46:c0:
         ca:de:7a:17:2d:2d:c5:8f:23:e3:d1:b2:ec:08:5a:8a:a9:b2:
         1a:85:ce:0a:e5:d0:ff:eb:ed:5a:01:b9:a1:47:40:b3:b6:5b:
         9f:19:e1:73:fe:56:f5:27:da:a3:20:1c:94:33:fe:aa:28:02:
         1e:19:2e:b2:ef:51:03:14:6a:71:8a:0e:9c:d9:7b:11:1a:63:
         b9:59:32:d1:67:71:d9:3e:b0:a9:86:ec:ce:52:31:77:4b:a8:
         8b:cd:d0:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----