Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F361452C/15F0402057F011F0AF4575C8DAE4EC9C/86ED536ABFFC11F19FAA4306CF1D38B0.roa
File:                     86ED536ABFFC11F19FAA4306CF1D38B0.roa (raw, json)
Hash identifier:          i6wT9ZZ/Z8wmUOpeRScJEtbE1CTO48JmxTsCRgpVVJM=
Subject key identifier:   15:E8:44:C4:63:C0:29:6E:AC:18:F2:54:C1:5B:FA:CD:D3:B8:9F:65
Certificate issuer:       /CN=F361452CAF/serialNumber=1683A92157CEE0259E36880DABE016B6DDB5E9CE
Certificate serial:       01DA
Authority key identifier: 16:83:A9:21:57:CE:E0:25:9E:36:88:0D:AB:E0:16:B6:DD:B5:E9:CE
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/FoOpIVfO4CWeNogNq-AWtt216c4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361452C/15F0402057F011F0AF4575C8DAE4EC9C/86ED536ABFFC11F19FAA4306CF1D38B0.roa
Signing time:             Sun 04 Oct 2026 14:04:34 +0000
ROA not before:           Sun 04 Oct 2026 14:04:30 +0000
ROA not after:            Wed 31 Dec 2036 14:04:30 +0000
asID:                     329552
IP address blocks:        102.205.188.0/23 maxlen: 24
                          2c0f:23c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361452C/15F0402057F011F0AF4575C8DAE4EC9C/FoOpIVfO4CWeNogNq-AWtt216c4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361452C/15F0402057F011F0AF4575C8DAE4EC9C/FoOpIVfO4CWeNogNq-AWtt216c4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/FoOpIVfO4CWeNogNq-AWtt216c4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 28 Oct 2026 05:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 474 (0x1da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361452CAF, serialNumber=1683A92157CEE0259E36880DABE016B6DDB5E9CE
        Validity
            Not Before: Oct  4 14:04:30 2026 GMT
            Not After : Dec 31 14:04:30 2036 GMT
        Subject: CN=6ac25cf2-fd73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:9f:df:68:04:a6:ff:52:1a:7c:89:17:64:51:
                    26:57:d7:30:2a:bf:eb:02:dd:dd:e4:bb:91:b1:0b:
                    4e:60:ca:36:64:38:a1:8e:b3:6d:aa:9f:a8:47:ee:
                    f8:66:14:b4:ee:b4:b8:ba:44:c4:fa:3c:af:dc:90:
                    85:09:b8:56:58:aa:d9:e5:4a:70:cc:29:00:32:2b:
                    10:c1:73:73:08:a1:be:ce:84:88:76:c9:05:af:c5:
                    9a:25:bf:4a:0f:d4:36:c9:ef:16:5f:43:a4:0c:3f:
                    dc:83:c6:89:76:d9:62:f5:00:af:74:9c:e0:27:00:
                    10:5f:66:b8:91:fb:51:de:44:24:e4:f1:a8:70:8f:
                    de:36:da:dc:ab:77:e7:e0:72:fb:7b:f3:74:a1:1c:
                    a6:a8:46:4f:1c:73:39:6b:b1:39:98:09:ad:91:1d:
                    24:cb:89:73:63:11:73:fe:50:b5:fb:f7:2b:7b:86:
                    89:3a:03:f4:4f:25:de:eb:f2:cc:a5:a2:6e:f1:c1:
                    3d:e4:85:25:c8:20:78:bc:95:1b:9f:f9:14:04:2a:
                    1a:e5:4a:1c:af:db:c6:52:c4:03:be:af:33:46:40:
                    aa:2f:42:80:f0:34:d9:e1:f9:ba:5c:74:93:a3:37:
                    0b:fd:61:ec:ad:e5:62:50:19:92:0a:ab:a2:2f:53:
                    71:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:E8:44:C4:63:C0:29:6E:AC:18:F2:54:C1:5B:FA:CD:D3:B8:9F:65
            X509v3 Authority Key Identifier:
                keyid:16:83:A9:21:57:CE:E0:25:9E:36:88:0D:AB:E0:16:B6:DD:B5:E9:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361452C/15F0402057F011F0AF4575C8DAE4EC9C/FoOpIVfO4CWeNogNq-AWtt216c4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/FoOpIVfO4CWeNogNq-AWtt216c4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361452C/15F0402057F011F0AF4575C8DAE4EC9C/86ED536ABFFC11F19FAA4306CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.205.188.0/23
                IPv6:
                  2c0f:23c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         2c:ce:c2:a9:c5:2f:ee:6d:6e:08:5d:0e:6c:20:d4:33:3a:ec:
         e2:af:78:e5:ad:75:d8:b2:68:88:b1:85:c8:7a:08:18:07:19:
         56:2c:84:47:27:31:d3:81:2f:20:de:b6:7c:7f:81:94:31:49:
         c5:57:0d:ce:35:82:04:b4:68:1d:9a:4e:89:78:4f:d1:5d:8b:
         95:b3:af:5b:b9:94:08:fa:e8:8e:e9:01:35:52:e8:be:17:43:
         6c:aa:cb:7f:a7:5e:77:38:bd:0c:c7:ad:36:72:85:b8:6c:df:
         32:77:ac:99:bc:6e:12:5d:ef:4e:86:39:71:47:87:5a:59:27:
         8f:40:13:22:29:af:65:e1:f1:d7:7d:8a:df:eb:25:5a:a8:06:
         92:d6:a5:61:67:23:d2:35:45:e5:c7:aa:fc:d9:69:07:b6:64:
         d6:d3:a8:a5:c0:bd:68:2d:a4:2d:33:9f:7a:3f:06:50:93:8b:
         e8:40:6f:b6:28:21:ca:43:26:35:43:b7:1a:03:a7:1b:b1:0f:
         ae:40:36:18:82:1f:80:61:d4:63:52:1c:e5:58:58:6e:24:60:
         01:74:f9:d0:50:13:dd:4b:d4:9b:ce:e9:4c:2c:aa:3c:02:aa:
         42:65:40:57:65:d3:e4:c4:ff:42:63:1f:55:70:9c:ed:9f:3f:
         d2:d1:04:02
-----BEGIN CERTIFICATE-----
MIIFkjCCBHqgAwIBAgICAdowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MTQ1MkNBRjExMC8GA1UEBRMoMTY4M0E5MjE1N0NFRTAyNTlFMzY4ODBEQUJFMDE2
QjZEREI1RTlDRTAeFw0yNjEwMDQxNDA0MzBaFw0zNjEyMzExNDA0MzBaMBgxFjAU
BgNVBAMTDTZhYzI1Y2YyLWZkNzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDAn99oBKb/Uhp8iRdkUSZX1zAqv+sC3d3ku5GxC05gyjZkOKGOs22qn6hH
7vhmFLTutLi6RMT6PK/ckIUJuFZYqtnlSnDMKQAyKxDBc3MIob7OhIh2yQWvxZol
v0oP1DbJ7xZfQ6QMP9yDxol22WL1AK90nOAnABBfZriR+1HeRCTk8ahwj9422tyr
d+fgcvt783ShHKaoRk8cczlrsTmYCa2RHSTLiXNjEXP+ULX79yt7hok6A/RPJd7r
8sylom7xwT3khSXIIHi8lRuf+RQEKhrlShyv28ZSxAO+rzNGQKovQoDwNNnh+bpc
dJOjNwv9Yeyt5WJQGZIKq6IvU3HbAgMBAAGjggK0MIICsDAdBgNVHQ4EFgQUFehE
xGPAKW6sGPJUwVv6zdO4n2UwHwYDVR0jBBgwFoAUFoOpIVfO4CWeNogNq+AWtt21
6c4wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjE0NTJDLzE1RjA0MDIwNTdGMDExRjBBRjQ1NzVDOERBRTRFQzlDL0ZvT3BJ
VmZPNENXZU5vZ05xLUFXdHQyMTZjNC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0ZvT3BJVmZPNENXZU5vZ05xLUFXdHQyMTZjNC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjE0NTJDLzE1RjA0MDIwNTdGMDExRjBBRjQ1NzVDOERB
RTRFQzlDLzg2RUQ1MzZBQkZGQzExRjE5RkFBNDMwNkNGMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAFmzbwwDQQCAAIwBwMFACwP
I8AwDQYJKoZIhvcNAQELBQADggEBACzOwqnFL+5tbghdDmwg1DM67OKveOWtddiy
aIixhch6CBgHGVYshEcnMdOBLyDetnx/gZQxScVXDc41ggS0aB2aTol4T9Fdi5Wz
r1u5lAj66I7pATVS6L4XQ2yqy3+nXnc4vQzHrTZyhbhs3zJ3rJm8bhJd706GOXFH
h1pZJ49AEyIpr2Xh8dd9it/rJVqoBpLWpWFnI9I1ReXHqvzZaQe2ZNbTqKXAvWgt
pC0zn3o/BlCTi+hAb7YoIcpDJjVDtxoDpxuxD65ANhiCH4Bh1GNSHOVYWG4kYAF0
+dBQE91L1JvO6UwsqjwCqkJlQFdl0+TE/0JjH1VwnO2fP9LRBAI=
-----END CERTIFICATE-----