Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3650200/9D398EC6ADC911F18EE25FC3CE1D38B0/FC1EA44EADC911F19B5792C5CE1D38B0.roa
File:                     FC1EA44EADC911F19B5792C5CE1D38B0.roa (raw, json)
Hash identifier:          IoSo/fTT9xgXZx2TF2zrfO85eiSaegvRgJNHkNr6EBA=
Subject key identifier:   C0:2D:B8:71:C9:6C:2E:8E:A2:F9:4E:6D:A5:D8:1D:3A:ED:16:F3:58
Certificate issuer:       /CN=F3650200AF/serialNumber=268A7D874339DBE908FB982A9A1A17BFEC4393D4
Certificate serial:       02
Authority key identifier: 26:8A:7D:87:43:39:DB:E9:08:FB:98:2A:9A:1A:17:BF:EC:43:93:D4
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Jop9h0M52-kI-5gqmhoXv-xDk9Q.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3650200/9D398EC6ADC911F18EE25FC3CE1D38B0/FC1EA44EADC911F19B5792C5CE1D38B0.roa
Signing time:             Fri 11 Sep 2026 10:17:26 +0000
ROA not before:           Fri 11 Sep 2026 10:17:22 +0000
ROA not after:            Thu 11 Sep 2031 10:17:22 +0000
asID:                     329729
IP address blocks:        102.202.189.0/24 maxlen: 24
                          2c0f:4a20::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3650200/9D398EC6ADC911F18EE25FC3CE1D38B0/Jop9h0M52-kI-5gqmhoXv-xDk9Q.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3650200/9D398EC6ADC911F18EE25FC3CE1D38B0/Jop9h0M52-kI-5gqmhoXv-xDk9Q.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Jop9h0M52-kI-5gqmhoXv-xDk9Q.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 20 Sep 2026 00:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3650200AF, serialNumber=268A7D874339DBE908FB982A9A1A17BFEC4393D4
        Validity
            Not Before: Sep 11 10:17:22 2026 GMT
            Not After : Sep 11 10:17:22 2031 GMT
        Subject: CN=6aa3d536-6df8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ad:26:ca:89:b6:b9:cf:aa:68:73:97:72:25:
                    6a:67:d9:08:26:e1:cc:e7:8d:43:d3:e1:aa:65:15:
                    a9:51:a7:56:81:c3:d4:54:d8:b0:b6:dd:6e:e1:c4:
                    e8:53:79:32:ae:40:fe:41:2a:72:7c:45:7a:91:e9:
                    07:ca:5a:1b:67:91:b7:51:b0:9d:b0:87:ae:73:e1:
                    39:8e:00:8d:c4:78:f0:37:e3:fa:5a:c5:a2:00:3b:
                    70:76:c8:18:27:e4:0e:06:f8:af:ab:33:ba:0f:29:
                    65:56:87:e6:1a:54:d4:86:24:6a:33:d1:ba:fc:61:
                    4f:49:9a:37:04:42:4a:72:16:0f:ee:ba:a7:92:8f:
                    b4:f8:bf:69:08:b9:bb:5d:85:3a:11:05:7b:ac:34:
                    0b:b9:9e:22:62:6f:de:2a:d3:70:28:e2:b3:d0:2f:
                    dd:c8:01:94:69:cb:ff:e6:15:7c:20:49:09:e9:55:
                    c0:79:3b:1e:50:89:15:8d:39:66:29:61:d8:a6:98:
                    c3:f6:da:1f:78:c0:e9:47:11:db:1e:49:d7:41:17:
                    37:4e:31:ea:85:78:77:7e:66:b6:ec:3d:a2:79:d9:
                    14:33:c0:17:b4:b8:7e:df:1d:70:92:c8:3b:51:3a:
                    59:79:d8:b7:41:94:5e:4e:61:ac:63:15:37:e8:f1:
                    2e:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:2D:B8:71:C9:6C:2E:8E:A2:F9:4E:6D:A5:D8:1D:3A:ED:16:F3:58
            X509v3 Authority Key Identifier:
                keyid:26:8A:7D:87:43:39:DB:E9:08:FB:98:2A:9A:1A:17:BF:EC:43:93:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3650200/9D398EC6ADC911F18EE25FC3CE1D38B0/Jop9h0M52-kI-5gqmhoXv-xDk9Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Jop9h0M52-kI-5gqmhoXv-xDk9Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3650200/9D398EC6ADC911F18EE25FC3CE1D38B0/FC1EA44EADC911F19B5792C5CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.202.189.0/24
                IPv6:
                  2c0f:4a20::/32

    Signature Algorithm: sha256WithRSAEncryption
         a0:22:c1:f8:ed:1c:80:27:e4:5d:c8:f8:58:09:59:99:e6:21:
         54:7c:a6:41:5a:b6:4a:bf:f8:a7:6d:cc:e0:e0:0f:ce:80:7e:
         4a:d0:4a:05:56:9f:39:d9:78:b3:14:a4:53:03:f6:89:be:49:
         9a:3c:8e:05:78:2b:b7:4b:6e:9a:d5:ee:39:2c:7e:9f:24:79:
         55:3d:7a:f6:2c:01:0a:da:e0:79:27:45:cd:cc:d7:28:06:64:
         39:83:2f:17:f8:32:73:81:25:1a:f5:3c:93:e7:60:09:4f:47:
         0b:19:60:34:1d:9c:47:88:2e:d3:49:a3:7a:07:fd:99:42:1a:
         1c:fa:77:09:a0:a0:66:52:09:f4:65:e2:82:7e:3e:e5:27:47:
         4c:78:90:22:36:b9:ed:03:b1:f1:a3:8d:4b:8a:89:f0:be:db:
         c2:3c:9c:b7:61:05:35:0f:22:31:b7:33:83:2b:d1:7f:e9:38:
         d7:9d:8c:a3:12:bf:79:d4:bc:cb:2b:26:a2:34:be:3c:c1:88:
         0c:9f:b8:96:65:34:a2:93:07:3b:06:40:7e:13:7b:3e:21:58:
         a6:1f:b1:57:20:dc:88:13:a5:fb:4d:62:6f:d4:86:15:c7:7d:
         75:95:e8:62:e9:68:c6:93:90:42:c8:7c:95:df:59:ea:28:ee:
         4f:e0:90:6e
-----BEGIN CERTIFICATE-----
MIIFkTCCBHmgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY1
MDIwMEFGMTEwLwYDVQQFEygyNjhBN0Q4NzQzMzlEQkU5MDhGQjk4MkE5QTFBMTdC
RkVDNDM5M0Q0MB4XDTI2MDkxMTEwMTcyMloXDTMxMDkxMTEwMTcyMlowGDEWMBQG
A1UEAxMNNmFhM2Q1MzYtNmRmODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKitJsqJtrnPqmhzl3IlamfZCCbhzOeNQ9PhqmUVqVGnVoHD1FTYsLbdbuHE
6FN5Mq5A/kEqcnxFepHpB8paG2eRt1GwnbCHrnPhOY4AjcR48Dfj+lrFogA7cHbI
GCfkDgb4r6szug8pZVaH5hpU1IYkajPRuvxhT0maNwRCSnIWD+66p5KPtPi/aQi5
u12FOhEFe6w0C7meImJv3irTcCjis9Av3cgBlGnL/+YVfCBJCelVwHk7HlCJFY05
Zilh2KaYw/baH3jA6UcR2x5J10EXN04x6oV4d35mtuw9onnZFDPAF7S4ft8dcJLI
O1E6WXnYt0GUXk5hrGMVN+jxLo8CAwEAAaOCArQwggKwMB0GA1UdDgQWBBTALbhx
yWwujqL5Tm2l2B067RbzWDAfBgNVHSMEGDAWgBQmin2HQznb6Qj7mCqaGhe/7EOT
1DAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2NTAyMDAvOUQzOThFQzZBREM5MTFGMThFRTI1RkMzQ0UxRDM4QjAvSm9wOWgw
TTUyLWtJLTVncW1ob1h2LXhEazlRLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvSm9wOWgwTTUyLWtJLTVncW1ob1h2LXhEazlRLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NTAyMDAvOUQzOThFQzZBREM5MTFGMThFRTI1RkMzQ0Ux
RDM4QjAvRkMxRUE0NEVBREM5MTFGMTlCNTc5MkM1Q0UxRDM4QjAucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAGbKvTANBAIAAjAHAwUALA9K
IDANBgkqhkiG9w0BAQsFAAOCAQEAoCLB+O0cgCfkXcj4WAlZmeYhVHymQVq2Sr/4
p23M4OAPzoB+StBKBVafOdl4sxSkUwP2ib5JmjyOBXgrt0tumtXuOSx+nyR5VT16
9iwBCtrgeSdFzczXKAZkOYMvF/gyc4ElGvU8k+dgCU9HCxlgNB2cR4gu00mjegf9
mUIaHPp3CaCgZlIJ9GXign4+5SdHTHiQIja57QOx8aONS4qJ8L7bwjyct2EFNQ8i
MbczgyvRf+k4152MoxK/edS8yysmojS+PMGIDJ+4lmU0opMHOwZAfhN7PiFYph+x
VyDciBOl+01ib9SGFcd9dZXoYuloxpOQQsh8ld9Z6ijuT+CQbg==
-----END CERTIFICATE-----