Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F367B3A6/98961646D15A11F1AF1C01A8CE1D38B0/F8D007C4D15A11F19F3710ACCE1D38B0.roa
File:                     F8D007C4D15A11F19F3710ACCE1D38B0.roa (raw, json)
Hash identifier:          ncnn1Fx0/5+q8yYSmPcZe1oM50v+osyKiJWvRf8FleU=
Subject key identifier:   3E:24:81:12:D8:A2:09:AF:F6:E6:F1:92:7A:D8:C8:F1:46:FF:0F:4B
Certificate issuer:       /CN=F367B3A6AF/serialNumber=8CD7B012258E95B1B821218F79F0A55DC4945F9B
Certificate serial:       02
Authority key identifier: 8C:D7:B0:12:25:8E:95:B1:B8:21:21:8F:79:F0:A5:5D:C4:94:5F:9B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/jNewEiWOlbG4ISGPefClXcSUX5s.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367B3A6/98961646D15A11F1AF1C01A8CE1D38B0/F8D007C4D15A11F19F3710ACCE1D38B0.roa
Signing time:             Mon 26 Oct 2026 16:33:28 +0000
ROA not before:           Mon 26 Oct 2026 16:33:23 +0000
ROA not after:            Wed 31 Dec 2036 16:33:23 +0000
asID:                     329839
IP address blocks:        102.200.182.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367B3A6/98961646D15A11F1AF1C01A8CE1D38B0/jNewEiWOlbG4ISGPefClXcSUX5s.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367B3A6/98961646D15A11F1AF1C01A8CE1D38B0/jNewEiWOlbG4ISGPefClXcSUX5s.mft
                          rsync://rpki.afrinic.net/repository/afrinic/jNewEiWOlbG4ISGPefClXcSUX5s.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 06 Nov 2026 06:06:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367B3A6AF, serialNumber=8CD7B012258E95B1B821218F79F0A55DC4945F9B
        Validity
            Not Before: Oct 26 16:33:23 2026 GMT
            Not After : Dec 31 16:33:23 2036 GMT
        Subject: CN=6adf80d8-0ca3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c5:00:ca:0a:93:ef:e1:a1:dd:ac:85:ea:e5:
                    a3:ed:e6:49:4e:e5:83:3f:81:2e:8b:40:02:d2:00:
                    03:d0:d1:cd:16:72:aa:3d:0b:9b:ff:8e:c6:a0:ac:
                    39:a8:60:5a:00:18:3b:6a:6a:26:69:64:a7:60:66:
                    15:87:e7:bf:d0:d5:79:44:18:c0:05:85:00:7e:1f:
                    65:8c:a1:25:0a:0c:56:98:7c:e5:17:aa:f6:68:66:
                    f3:c7:4f:0d:cb:3e:17:51:7b:ce:f1:ae:97:e9:e4:
                    27:8e:d3:29:7b:74:f5:8a:14:0f:20:36:81:cc:6c:
                    5b:c4:0b:d5:59:9d:e4:d4:49:9c:ef:76:86:58:15:
                    88:17:57:ad:0b:17:3f:97:e4:7f:3b:db:52:b5:2a:
                    6a:05:b9:a2:dc:3d:df:1d:e9:4e:b0:30:08:d1:b9:
                    6f:74:cd:83:77:1a:81:0e:a6:2a:9c:d6:dc:2a:88:
                    5d:8b:b1:bc:c8:be:ac:c9:c7:bb:23:4a:b6:ae:6b:
                    f7:e3:e6:5e:8b:b1:3b:67:f5:5d:fa:36:43:b8:8f:
                    2f:d1:85:15:06:89:63:a6:1a:52:a9:8d:b2:7c:da:
                    24:82:8e:10:38:04:af:d9:35:5f:62:bc:9f:c7:71:
                    77:90:d3:8e:f1:c6:5e:c4:73:ca:8d:e3:69:ac:04:
                    77:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:24:81:12:D8:A2:09:AF:F6:E6:F1:92:7A:D8:C8:F1:46:FF:0F:4B
            X509v3 Authority Key Identifier:
                keyid:8C:D7:B0:12:25:8E:95:B1:B8:21:21:8F:79:F0:A5:5D:C4:94:5F:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367B3A6/98961646D15A11F1AF1C01A8CE1D38B0/jNewEiWOlbG4ISGPefClXcSUX5s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/jNewEiWOlbG4ISGPefClXcSUX5s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B3A6/98961646D15A11F1AF1C01A8CE1D38B0/F8D007C4D15A11F19F3710ACCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.200.182.0/23

    Signature Algorithm: sha256WithRSAEncryption
         41:fe:b4:28:f6:7f:11:bc:2a:8f:06:b2:5a:6b:6c:78:ab:4f:
         37:32:9b:31:64:e4:5a:65:3b:a1:e7:d0:56:69:f2:bf:4b:57:
         7f:03:5c:07:ae:5a:1e:c3:26:17:ba:7e:45:1f:26:7d:81:28:
         33:8b:80:e8:d3:33:58:b5:5f:26:82:e7:4e:a1:45:64:1e:f9:
         59:e6:01:cd:00:38:09:00:1f:cf:b9:a2:49:21:63:fa:8f:40:
         55:17:12:d1:ab:b3:9c:4d:46:0f:1d:0e:d3:e2:81:f8:01:8f:
         e6:28:97:d8:9b:bb:2c:ca:be:15:7d:78:3d:a7:a4:20:fc:4d:
         17:26:33:f0:c1:58:d6:a1:c8:d6:db:86:6d:7a:89:1c:a6:e7:
         95:88:4b:7f:10:f3:fd:30:f6:0c:9f:cd:10:17:1f:d2:3b:4d:
         2b:e5:62:15:5b:41:2b:5b:d8:1b:3a:ea:72:6f:75:0c:44:c8:
         47:36:04:ec:c9:3d:f0:00:2e:32:c8:3b:39:34:7c:85:d2:92:
         3c:98:8e:df:ae:b6:42:6f:79:83:d1:8f:41:41:3e:e1:94:5d:
         b6:af:f9:5c:8c:d7:1f:4f:43:cb:29:67:e1:0d:bb:29:31:67:
         4c:43:ed:e7:2d:7c:f6:92:5a:1b:8a:72:bf:27:2f:38:5a:35:
         2b:d5:95:20
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY3
QjNBNkFGMTEwLwYDVQQFEyg4Q0Q3QjAxMjI1OEU5NUIxQjgyMTIxOEY3OUYwQTU1
REM0OTQ1RjlCMB4XDTI2MTAyNjE2MzMyM1oXDTM2MTIzMTE2MzMyM1owGDEWMBQG
A1UEAxMNNmFkZjgwZDgtMGNhMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALnFAMoKk+/hod2sherlo+3mSU7lgz+BLotAAtIAA9DRzRZyqj0Lm/+OxqCs
OahgWgAYO2pqJmlkp2BmFYfnv9DVeUQYwAWFAH4fZYyhJQoMVph85Req9mhm88dP
Dcs+F1F7zvGul+nkJ47TKXt09YoUDyA2gcxsW8QL1Vmd5NRJnO92hlgViBdXrQsX
P5fkfzvbUrUqagW5otw93x3pTrAwCNG5b3TNg3cagQ6mKpzW3CqIXYuxvMi+rMnH
uyNKtq5r9+PmXouxO2f1Xfo2Q7iPL9GFFQaJY6YaUqmNsnzaJIKOEDgEr9k1X2K8
n8dxd5DTjvHGXsRzyo3jaawEd20CAwEAAaOCAqUwggKhMB0GA1UdDgQWBBQ+JIES
2KIJr/bm8ZJ62MjxRv8PSzAfBgNVHSMEGDAWgBSM17ASJY6VsbghIY958KVdxJRf
mzAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2N0IzQTYvOTg5NjE2NDZEMTVBMTFGMUFGMUMwMUE4Q0UxRDM4QjAvak5ld0Vp
V09sYkc0SVNHUGVmQ2xYY1NVWDVzLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvak5ld0VpV09sYkc0SVNHUGVmQ2xYY1NVWDVzLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2N0IzQTYvOTg5NjE2NDZEMTVBMTFGMUFGMUMwMUE4Q0Ux
RDM4QjAvRjhEMDA3QzREMTVBMTFGMTlGMzcxMEFDQ0UxRDM4QjAucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWbItjANBgkqhkiG9w0BAQsF
AAOCAQEAQf60KPZ/EbwqjwayWmtseKtPNzKbMWTkWmU7oefQVmnyv0tXfwNcB65a
HsMmF7p+RR8mfYEoM4uA6NMzWLVfJoLnTqFFZB75WeYBzQA4CQAfz7miSSFj+o9A
VRcS0auznE1GDx0O0+KB+AGP5iiX2Ju7LMq+FX14PaekIPxNFyYz8MFY1qHI1tuG
bXqJHKbnlYhLfxDz/TD2DJ/NEBcf0jtNK+ViFVtBK1vYGzrqcm91DETIRzYE7Mk9
8AAuMsg7OTR8hdKSPJiO3662Qm95g9GPQUE+4ZRdtq/5XIzXH09Dyyln4Q27KTFn
TEPt5y189pJaG4pyvycvOFo1K9WVIA==
-----END CERTIFICATE-----