Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36FEA6B/7B27920E8B8211E9888B6F73F8AEA228/297034DCB7D211F1B54802C5CE1D38B0.roa
File:                     297034DCB7D211F1B54802C5CE1D38B0.roa (raw, json)
Hash identifier:          rXWVQT892VCrJK5vdICYklgxuIZ5tALpLCItsAt6RW8=
Subject key identifier:   B0:2C:C1:6E:CC:E0:C3:D9:FE:BA:A8:A4:BE:B9:37:74:7F:1B:6D:5B
Certificate issuer:       /CN=F36FEA6BAF/serialNumber=93C2C99AF0EC4D1A4643497F5F8CBDC7EC45748F
Certificate serial:       0AD2
Authority key identifier: 93:C2:C9:9A:F0:EC:4D:1A:46:43:49:7F:5F:8C:BD:C7:EC:45:74:8F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FEA6B/7B27920E8B8211E9888B6F73F8AEA228/297034DCB7D211F1B54802C5CE1D38B0.roa
Signing time:             Thu 24 Sep 2026 04:41:09 +0000
ROA not before:           Thu 24 Sep 2026 04:41:05 +0000
ROA not after:            Wed 24 Sep 2036 04:41:05 +0000
asID:                     329811
IP address blocks:        102.214.142.0/24 maxlen: 24
                          2001:43fd:e000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FEA6B/7B27920E8B8211E9888B6F73F8AEA228/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FEA6B/7B27920E8B8211E9888B6F73F8AEA228/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2770 (0xad2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FEA6BAF, serialNumber=93C2C99AF0EC4D1A4643497F5F8CBDC7EC45748F
        Validity
            Not Before: Sep 24 04:41:05 2026 GMT
            Not After : Sep 24 04:41:05 2036 GMT
        Subject: CN=6ab4a9e5-374b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:fb:e0:5b:09:4e:95:fe:c9:4e:f6:d7:f6:cd:
                    a3:a5:bf:5d:ea:d4:a0:2e:73:f4:5e:ac:b7:7b:28:
                    5f:51:0a:e0:ef:1b:ed:89:0a:f4:68:ed:a7:eb:32:
                    b0:ab:de:c8:c0:40:f2:88:c4:68:7c:43:80:fd:36:
                    12:5b:bf:55:c5:7e:e7:32:61:c5:64:6f:e3:aa:78:
                    d6:a3:5b:bb:bc:1d:a9:45:00:c7:6f:cd:91:61:c9:
                    df:64:62:80:f3:48:b7:9a:4b:31:1c:a7:f8:9e:52:
                    f8:2d:ed:6e:29:af:e7:ff:0f:e9:b4:bc:e3:42:57:
                    e8:4c:23:8d:85:97:e0:a2:4d:1f:db:25:5e:ca:c2:
                    0d:a8:81:99:62:df:81:90:b8:39:4b:8d:76:79:ae:
                    1e:02:1d:b5:42:45:08:e4:ca:cd:81:7e:e3:6e:a4:
                    63:27:ab:b5:23:1b:c1:f0:99:71:94:32:91:87:c2:
                    6e:5a:b2:f1:2c:da:19:f9:3a:03:9c:9a:41:cd:36:
                    e2:9c:e7:90:dc:10:b7:e3:52:98:c3:f4:61:5f:a1:
                    8c:f1:a9:b2:0d:3d:db:6e:c3:87:b5:7b:19:f7:8b:
                    59:95:8f:29:4a:aa:03:5f:be:87:e5:ea:28:5e:57:
                    e3:74:6e:aa:b0:3a:60:60:f0:fe:41:7e:dd:44:92:
                    b2:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:2C:C1:6E:CC:E0:C3:D9:FE:BA:A8:A4:BE:B9:37:74:7F:1B:6D:5B
            X509v3 Authority Key Identifier:
                keyid:93:C2:C9:9A:F0:EC:4D:1A:46:43:49:7F:5F:8C:BD:C7:EC:45:74:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FEA6B/7B27920E8B8211E9888B6F73F8AEA228/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FEA6B/7B27920E8B8211E9888B6F73F8AEA228/297034DCB7D211F1B54802C5CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.214.142.0/24
                IPv6:
                  2001:43fd:e000::/48

    Signature Algorithm: sha256WithRSAEncryption
         20:89:6c:61:8d:64:98:b6:96:ce:89:57:84:43:9a:5c:c5:26:
         d1:52:ae:87:e9:de:b8:04:e7:d5:9a:be:3c:1f:e6:ac:ad:4f:
         67:e9:ef:93:98:46:fd:c1:9b:af:78:6f:bb:a9:99:e0:50:fa:
         4b:e8:91:d3:18:ce:dc:1d:2c:7a:50:5e:2c:6d:50:e6:36:1e:
         46:f5:d1:7a:4a:04:e2:02:a1:89:f1:38:73:04:96:d4:88:e8:
         47:60:a5:09:73:c2:04:11:3a:ca:2e:af:4e:f1:28:c2:3a:57:
         4f:dd:10:de:b4:16:62:bf:cc:1c:ee:88:d3:d5:04:49:a0:af:
         e4:7b:d3:e8:e2:da:76:33:ed:9b:ae:1e:9e:b3:29:8c:ed:b6:
         7a:47:ac:9e:8e:d6:29:43:21:c4:00:14:5d:ec:16:f4:ff:f8:
         5c:b4:f2:7f:83:82:ee:a2:be:62:0f:bf:a7:b7:b0:52:ae:d1:
         a2:ff:4f:8b:cb:a1:e0:c6:15:74:00:3d:66:a3:dd:3d:55:6d:
         ef:35:70:2c:80:e4:02:4a:85:f3:20:32:45:4a:6e:43:25:30:
         ae:f6:e9:f3:4e:23:b4:fe:1b:ee:84:2b:e1:fc:5c:27:e9:65:
         44:c3:5f:fb:c7:8d:37:45:52:ed:b7:da:94:46:3f:d5:04:f7:
         f2:23:29:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----