Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F364C81D/33794D2E890E11E99A72D162F8AEA228/8B320BD2C96611F1A7BF580BCF1D38B0.roa
File:                     8B320BD2C96611F1A7BF580BCF1D38B0.roa (raw, json)
Hash identifier:          iYn/Q3JK8WsRGrCtIsQihC2VQsqLwwepcWdZFw2yTBE=
Subject key identifier:   48:C7:02:41:B2:A8:97:BD:CB:8F:2E:59:5E:7B:E8:55:F7:93:C3:73
Certificate issuer:       /CN=F364C81DAF/serialNumber=BCCE86D612D43F841AB0416EC5A884070F5CE5D6
Certificate serial:       0ADD
Authority key identifier: BC:CE:86:D6:12:D4:3F:84:1A:B0:41:6E:C5:A8:84:07:0F:5C:E5:D6
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/vM6G1hLUP4QasEFuxaiEBw9c5dY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364C81D/33794D2E890E11E99A72D162F8AEA228/8B320BD2C96611F1A7BF580BCF1D38B0.roa
Signing time:             Fri 16 Oct 2026 13:36:09 +0000
ROA not before:           Fri 16 Oct 2026 13:36:05 +0000
ROA not after:            Mon 01 Jan 2029 13:36:05 +0000
asID:                     327822
IP address blocks:        102.223.200.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364C81D/33794D2E890E11E99A72D162F8AEA228/vM6G1hLUP4QasEFuxaiEBw9c5dY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364C81D/33794D2E890E11E99A72D162F8AEA228/vM6G1hLUP4QasEFuxaiEBw9c5dY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/vM6G1hLUP4QasEFuxaiEBw9c5dY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 30 Oct 2026 00:08:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2781 (0xadd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364C81DAF, serialNumber=BCCE86D612D43F841AB0416EC5A884070F5CE5D6
        Validity
            Not Before: Oct 16 13:36:05 2026 GMT
            Not After : Jan  1 13:36:05 2029 GMT
        Subject: CN=6ad22849-d0ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:a6:12:78:40:8a:13:c0:e3:2f:59:bb:b6:96:
                    82:a9:d7:e9:96:e5:f8:4c:11:31:4c:65:c1:ef:e8:
                    54:60:1a:32:53:00:e0:0d:24:a6:cb:69:90:f4:c1:
                    0c:bb:5e:53:23:ff:1f:81:bf:5e:fd:aa:44:af:76:
                    5c:77:8c:3b:73:9f:56:d8:3b:2b:5d:51:8b:84:7a:
                    a0:42:53:11:3b:f7:d0:26:b8:91:3b:2b:a1:43:5c:
                    72:c2:d9:0c:61:e3:a3:7f:9f:ea:90:57:3c:0c:dc:
                    ee:d0:ee:c3:75:0d:da:43:de:0c:62:53:94:66:90:
                    14:8d:17:c6:19:cd:9b:b2:18:0f:f2:74:19:df:d1:
                    2c:09:4a:ce:91:de:9c:1d:c4:ee:be:50:ca:88:0d:
                    61:b3:35:07:0f:5f:e9:a4:50:b4:72:c8:cc:b9:c4:
                    b9:dd:09:93:d6:d6:e7:ea:f0:ae:eb:09:53:d2:98:
                    54:55:e7:a9:9a:c5:48:e3:1e:e1:88:05:c2:14:07:
                    52:ca:17:ab:1a:d4:58:70:6b:fc:cf:41:3c:6f:ec:
                    b0:cf:30:4f:9d:71:00:b0:cb:bc:fe:60:df:b8:b3:
                    9c:9f:80:41:4d:ba:e8:b7:9d:a9:ac:73:0b:e9:42:
                    1c:86:8e:71:cf:00:15:54:e8:93:89:ca:cf:e0:b4:
                    f4:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:C7:02:41:B2:A8:97:BD:CB:8F:2E:59:5E:7B:E8:55:F7:93:C3:73
            X509v3 Authority Key Identifier:
                keyid:BC:CE:86:D6:12:D4:3F:84:1A:B0:41:6E:C5:A8:84:07:0F:5C:E5:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364C81D/33794D2E890E11E99A72D162F8AEA228/vM6G1hLUP4QasEFuxaiEBw9c5dY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/vM6G1hLUP4QasEFuxaiEBw9c5dY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364C81D/33794D2E890E11E99A72D162F8AEA228/8B320BD2C96611F1A7BF580BCF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.223.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         05:55:83:36:50:68:e0:df:bd:b6:8f:76:d4:4b:5e:f8:62:48:
         74:59:fc:6b:cf:8e:13:09:64:09:82:9d:66:e7:77:00:c9:f1:
         91:c1:f6:7e:ea:6a:f2:88:7b:62:14:e5:17:0a:7c:4f:ed:a5:
         16:09:4a:9e:62:a4:ee:b2:fa:23:8f:53:4b:be:59:f7:36:5b:
         cf:de:60:c4:7d:66:1d:35:ee:a9:cd:25:42:28:09:aa:2a:f7:
         2a:f8:1f:49:b2:7a:21:65:63:02:1e:4f:3d:cc:1a:4e:d1:c9:
         e1:85:03:1a:d6:ef:6c:9f:3e:1a:79:b0:ea:7b:20:99:24:c5:
         c3:c4:1f:2b:7a:53:ba:da:3a:77:cb:4f:6c:45:a9:51:09:05:
         5c:dd:f9:24:b2:70:9e:0b:91:93:e7:a9:e6:34:72:eb:4f:f4:
         86:ed:0f:55:c0:11:f3:a3:f6:95:3c:d9:32:48:0c:4d:a2:44:
         30:73:4c:d5:10:d0:9e:91:bf:e8:7d:b3:4a:de:42:db:89:9b:
         a5:8c:a1:99:66:09:a5:1f:28:51:31:77:68:35:b3:7b:04:24:
         5a:98:ce:09:d1:ef:92:46:81:64:1e:bc:1d:a3:4d:49:a1:3c:
         71:28:80:ba:32:0c:e0:36:86:91:9e:ca:39:3e:eb:69:01:14:
         c2:35:01:1b
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCt0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NEM4MURBRjExMC8GA1UEBRMoQkNDRTg2RDYxMkQ0M0Y4NDFBQjA0MTZFQzVBODg0
MDcwRjVDRTVENjAeFw0yNjEwMTYxMzM2MDVaFw0yOTAxMDExMzM2MDVaMBgxFjAU
BgNVBAMTDTZhZDIyODQ5LWQwZWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQD4phJ4QIoTwOMvWbu2loKp1+mW5fhMETFMZcHv6FRgGjJTAOANJKbLaZD0
wQy7XlMj/x+Bv179qkSvdlx3jDtzn1bYOytdUYuEeqBCUxE799AmuJE7K6FDXHLC
2Qxh46N/n+qQVzwM3O7Q7sN1DdpD3gxiU5RmkBSNF8YZzZuyGA/ydBnf0SwJSs6R
3pwdxO6+UMqIDWGzNQcPX+mkULRyyMy5xLndCZPW1ufq8K7rCVPSmFRV56maxUjj
HuGIBcIUB1LKF6sa1Fhwa/zPQTxv7LDPME+dcQCwy7z+YN+4s5yfgEFNuui3nams
cwvpQhyGjnHPABVU6JOJys/gtPQnAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUSMcC
QbKol73Ljy5ZXnvoVfeTw3MwHwYDVR0jBBgwFoAUvM6G1hLUP4QasEFuxaiEBw9c
5dYwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjRDODFELzMzNzk0RDJFODkwRTExRTk5QTcyRDE2MkY4QUVBMjI4L3ZNNkcx
aExVUDRRYXNFRnV4YWlFQnc5YzVkWS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3ZNNkcxaExVUDRRYXNFRnV4YWlFQnc5YzVkWS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjRDODFELzMzNzk0RDJFODkwRTExRTk5QTcyRDE2MkY4
QUVBMjI4LzhCMzIwQkQyQzk2NjExRjFBN0JGNTgwQkNGMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJm38gwDQYJKoZIhvcNAQEL
BQADggEBAAVVgzZQaODfvbaPdtRLXvhiSHRZ/GvPjhMJZAmCnWbndwDJ8ZHB9n7q
avKIe2IU5RcKfE/tpRYJSp5ipO6y+iOPU0u+Wfc2W8/eYMR9Zh017qnNJUIoCaoq
9yr4H0myeiFlYwIeTz3MGk7RyeGFAxrW72yfPhp5sOp7IJkkxcPEHyt6U7raOnfL
T2xFqVEJBVzd+SSycJ4LkZPnqeY0cutP9IbtD1XAEfOj9pU82TJIDE2iRDBzTNUQ
0J6Rv+h9s0reQtuJm6WMoZlmCaUfKFExd2g1s3sEJFqYzgnR75JGgWQevB2jTUmh
PHEogLoyDOA2hpGeyjk+62kBFMI1ARs=
-----END CERTIFICATE-----