Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36250A1/0C146B5EA2A811F18FA880E7CE1D38B0/BAF5007CA5C611F18A373AC4CE1D38B0.roa
File:                     BAF5007CA5C611F18A373AC4CE1D38B0.roa (raw, json)
Hash identifier:          /F1vWOzW0fg+2W1kCzqXuu5VBgL5pobx9VVGHh2FCq4=
Subject key identifier:   62:06:AB:15:A8:08:73:A8:BF:D5:B6:FC:F4:FC:4B:DE:B0:50:A4:3C
Certificate issuer:       /CN=F36250A1AF/serialNumber=6B9A8419B8BCBAE98C4109C5B13F53DC202D9A79
Certificate serial:       07
Authority key identifier: 6B:9A:84:19:B8:BC:BA:E9:8C:41:09:C5:B1:3F:53:DC:20:2D:9A:79
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/a5qEGbi8uumMQQnFsT9T3CAtmnk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36250A1/0C146B5EA2A811F18FA880E7CE1D38B0/BAF5007CA5C611F18A373AC4CE1D38B0.roa
Signing time:             Tue 01 Sep 2026 05:33:59 +0000
ROA not before:           Tue 01 Sep 2026 05:33:55 +0000
ROA not after:            Wed 31 Dec 2036 05:33:55 +0000
asID:                     329783
IP address blocks:        102.201.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36250A1/0C146B5EA2A811F18FA880E7CE1D38B0/a5qEGbi8uumMQQnFsT9T3CAtmnk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36250A1/0C146B5EA2A811F18FA880E7CE1D38B0/a5qEGbi8uumMQQnFsT9T3CAtmnk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/a5qEGbi8uumMQQnFsT9T3CAtmnk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 20 Sep 2026 00:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7 (0x7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36250A1AF, serialNumber=6B9A8419B8BCBAE98C4109C5B13F53DC202D9A79
        Validity
            Not Before: Sep  1 05:33:55 2026 GMT
            Not After : Dec 31 05:33:55 2036 GMT
        Subject: CN=6a9663c7-1ff1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:9f:ae:e2:97:87:6b:bb:24:1d:4f:2e:26:e5:
                    d7:51:84:ea:99:5d:55:69:89:17:88:52:21:23:c4:
                    db:fe:33:0b:c6:36:29:55:28:b3:41:be:a3:9a:74:
                    10:09:1a:07:47:8d:c2:a0:53:48:eb:2c:d4:80:fd:
                    a2:bb:36:48:c0:2b:98:e2:b0:b3:6c:8e:ac:f1:e3:
                    c9:e5:af:03:23:23:52:b4:6c:a9:ac:f3:64:86:7a:
                    06:bc:a6:ef:12:d1:4d:75:6f:27:f9:09:57:f8:66:
                    7d:59:40:2b:c0:c2:99:63:c4:74:be:5e:f1:66:98:
                    b4:ce:01:13:5d:28:4e:06:a1:53:c2:1d:51:97:da:
                    67:52:80:5d:5e:43:fc:07:98:89:66:2c:65:75:48:
                    32:c3:f0:2e:1d:5f:88:7c:13:1c:da:67:a6:60:74:
                    8d:89:2c:ca:56:de:d0:7c:35:3a:4c:6e:48:d2:6e:
                    59:73:d8:fa:05:48:c3:2f:c9:5c:ca:5a:df:00:81:
                    98:d7:77:ba:ca:62:cf:c8:b6:81:b8:ac:89:79:14:
                    01:9e:5f:2a:95:b6:2e:6f:03:e2:21:72:e4:a1:d3:
                    10:a6:5e:35:73:3a:85:df:4e:6f:d2:e6:2f:db:26:
                    69:f8:1b:61:6a:dc:cd:92:6d:49:4a:0c:9a:18:fb:
                    9a:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:06:AB:15:A8:08:73:A8:BF:D5:B6:FC:F4:FC:4B:DE:B0:50:A4:3C
            X509v3 Authority Key Identifier:
                keyid:6B:9A:84:19:B8:BC:BA:E9:8C:41:09:C5:B1:3F:53:DC:20:2D:9A:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36250A1/0C146B5EA2A811F18FA880E7CE1D38B0/a5qEGbi8uumMQQnFsT9T3CAtmnk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/a5qEGbi8uumMQQnFsT9T3CAtmnk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36250A1/0C146B5EA2A811F18FA880E7CE1D38B0/BAF5007CA5C611F18A373AC4CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.201.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:0f:12:44:94:f7:bb:87:58:e2:ef:70:1c:57:ac:d0:4f:ae:
         25:b7:c6:be:9d:e1:9d:78:59:62:90:63:46:e0:72:be:38:2c:
         03:13:0c:96:fe:cc:8e:dd:6b:2c:d8:13:8c:75:86:cc:ec:c9:
         86:a7:4b:0a:3e:9d:61:5a:91:38:9f:28:cf:bc:38:38:d2:db:
         47:ac:e6:6f:89:61:19:9c:c3:12:00:bf:8f:35:d4:7d:d9:e2:
         ff:46:fb:02:83:5f:15:88:ad:fa:14:ab:b8:d3:05:7b:34:6e:
         5d:e6:ba:35:49:80:4c:bb:c9:8d:01:2c:64:8c:0c:88:38:1a:
         d6:b8:5e:6a:8b:fd:18:c9:12:c9:e9:99:c1:4e:9f:f7:d4:6b:
         13:c4:ea:e1:a4:ec:8d:62:92:2a:b1:0e:f7:d5:d4:c8:8a:be:
         ac:3b:c1:9d:86:4e:e5:37:a0:d0:77:41:32:4a:cf:49:d3:8a:
         6e:94:41:87:75:5d:c6:2a:34:04:ba:df:8b:7b:a7:fa:f6:b5:
         6f:ac:c2:8b:df:53:4a:6e:b1:92:86:46:3e:74:96:b2:f3:45:
         e9:c1:ca:c6:ec:f1:39:94:42:9b:c3:8f:c7:ec:60:08:b5:2f:
         70:74:9e:9b:8b:ac:9b:39:85:e0:85:17:9a:e9:4a:a0:f8:71:
         7a:b2:6d:69
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBBzANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzYy
NTBBMUFGMTEwLwYDVQQFEyg2QjlBODQxOUI4QkNCQUU5OEM0MTA5QzVCMTNGNTNE
QzIwMkQ5QTc5MB4XDTI2MDkwMTA1MzM1NVoXDTM2MTIzMTA1MzM1NVowGDEWMBQG
A1UEAxMNNmE5NjYzYzctMWZmMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJmfruKXh2u7JB1PLibl11GE6pldVWmJF4hSISPE2/4zC8Y2KVUos0G+o5p0
EAkaB0eNwqBTSOss1ID9ors2SMArmOKws2yOrPHjyeWvAyMjUrRsqazzZIZ6Brym
7xLRTXVvJ/kJV/hmfVlAK8DCmWPEdL5e8WaYtM4BE10oTgahU8IdUZfaZ1KAXV5D
/AeYiWYsZXVIMsPwLh1fiHwTHNpnpmB0jYksylbe0Hw1OkxuSNJuWXPY+gVIwy/J
XMpa3wCBmNd3uspiz8i2gbisiXkUAZ5fKpW2Lm8D4iFy5KHTEKZeNXM6hd9Ob9Lm
L9smafgbYWrczZJtSUoMmhj7mmsCAwEAAaOCAqUwggKhMB0GA1UdDgQWBBRiBqsV
qAhzqL/Vtvz0/EvesFCkPDAfBgNVHSMEGDAWgBRrmoQZuLy66YxBCcWxP1PcIC2a
eTAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2MjUwQTEvMEMxNDZCNUVBMkE4MTFGMThGQTg4MEU3Q0UxRDM4QjAvYTVxRUdi
aTh1dW1NUVFuRnNUOVQzQ0F0bW5rLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvYTVxRUdiaTh1dW1NUVFuRnNUOVQzQ0F0bW5rLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MjUwQTEvMEMxNDZCNUVBMkE4MTFGMThGQTg4MEU3Q0Ux
RDM4QjAvQkFGNTAwN0NBNUM2MTFGMThBMzczQUM0Q0UxRDM4QjAucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGbJxTANBgkqhkiG9w0BAQsF
AAOCAQEAkQ8SRJT3u4dY4u9wHFes0E+uJbfGvp3hnXhZYpBjRuByvjgsAxMMlv7M
jt1rLNgTjHWGzOzJhqdLCj6dYVqROJ8oz7w4ONLbR6zmb4lhGZzDEgC/jzXUfdni
/0b7AoNfFYit+hSruNMFezRuXea6NUmATLvJjQEsZIwMiDga1rheaov9GMkSyemZ
wU6f99RrE8Tq4aTsjWKSKrEO99XUyIq+rDvBnYZO5Teg0HdBMkrPSdOKbpRBh3Vd
xio0BLrfi3un+va1b6zCi99TSm6xkoZGPnSWsvNF6cHKxuzxOZRCm8OPx+xgCLUv
cHSem4usmzmF4IUXmulKoPhxerJtaQ==
-----END CERTIFICATE-----