Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3655DF0/B70B4B5494CF11F199F198A8CE1D38B0/819517FE94D711F1A3C9E0D4CE1D38B0.roa
File:                     819517FE94D711F1A3C9E0D4CE1D38B0.roa (raw, json)
Hash identifier:          KGYLp5bJccYbpYXZZ1ntigtAMQHrt+LgJKaGPbfZ2Nc=
Subject key identifier:   CA:3C:1B:8F:53:CE:66:C1:C6:CD:54:45:26:29:F9:2C:A0:74:66:22
Certificate issuer:       /CN=F3655DF0AF/serialNumber=13AA2F705F4E0FD368447CF287813B56812D56D4
Certificate serial:       02
Authority key identifier: 13:AA:2F:70:5F:4E:0F:D3:68:44:7C:F2:87:81:3B:56:81:2D:56:D4
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/E6ovcF9OD9NoRHzyh4E7VoEtVtQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3655DF0/B70B4B5494CF11F199F198A8CE1D38B0/819517FE94D711F1A3C9E0D4CE1D38B0.roa
Signing time:             Mon 10 Aug 2026 16:21:14 +0000
ROA not before:           Mon 10 Aug 2026 16:21:10 +0000
ROA not after:            Sat 31 Aug 2030 16:21:10 +0000
asID:                     329757
IP address blocks:        102.202.68.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3655DF0/B70B4B5494CF11F199F198A8CE1D38B0/E6ovcF9OD9NoRHzyh4E7VoEtVtQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3655DF0/B70B4B5494CF11F199F198A8CE1D38B0/E6ovcF9OD9NoRHzyh4E7VoEtVtQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/E6ovcF9OD9NoRHzyh4E7VoEtVtQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 20 Sep 2026 00:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3655DF0AF, serialNumber=13AA2F705F4E0FD368447CF287813B56812D56D4
        Validity
            Not Before: Aug 10 16:21:10 2026 GMT
            Not After : Aug 31 16:21:10 2030 GMT
        Subject: CN=6a79fa7a-dd66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:cd:ec:f3:fa:d6:9e:52:7b:d2:bf:53:0f:12:
                    f1:c9:fc:a3:99:d6:7f:be:f5:d3:18:df:52:d8:5b:
                    ca:b3:8e:9f:07:95:fe:85:d8:fe:1c:0a:0f:d0:3a:
                    3a:61:46:de:63:f3:ce:07:74:09:c2:75:f7:05:21:
                    94:fe:7a:e8:b4:5f:33:07:af:64:cb:8f:b9:ad:86:
                    78:9d:81:99:ac:00:5c:0a:9e:10:be:84:6a:b4:c1:
                    f8:8e:52:4e:69:83:51:f7:76:d3:f8:df:0b:7b:e9:
                    6f:7a:67:56:3a:dc:d5:52:9f:26:19:48:26:a4:96:
                    d0:36:f9:ec:dc:08:08:3d:15:4c:27:7b:a2:03:8e:
                    14:34:8e:c9:4d:82:e5:26:53:2e:24:61:86:79:02:
                    37:58:af:0c:33:ce:aa:0b:2b:92:2e:fd:50:87:3d:
                    e1:c8:37:fe:3d:35:e1:81:63:dd:58:11:41:3a:93:
                    b8:c4:fc:bb:b1:19:bc:09:1a:45:fb:a5:42:86:f9:
                    78:31:f0:cf:8d:8b:83:80:b0:3e:b7:fa:ac:f1:ff:
                    07:78:6e:e5:92:47:82:e9:05:e6:be:0b:a5:e5:01:
                    00:b1:6f:41:6a:2d:17:36:38:17:5f:0e:2a:69:0b:
                    47:16:6c:e7:b6:20:38:b2:6e:56:67:70:ee:6f:68:
                    2b:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:3C:1B:8F:53:CE:66:C1:C6:CD:54:45:26:29:F9:2C:A0:74:66:22
            X509v3 Authority Key Identifier:
                keyid:13:AA:2F:70:5F:4E:0F:D3:68:44:7C:F2:87:81:3B:56:81:2D:56:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3655DF0/B70B4B5494CF11F199F198A8CE1D38B0/E6ovcF9OD9NoRHzyh4E7VoEtVtQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/E6ovcF9OD9NoRHzyh4E7VoEtVtQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3655DF0/B70B4B5494CF11F199F198A8CE1D38B0/819517FE94D711F1A3C9E0D4CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.202.68.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5b:5f:0e:64:6b:33:61:d0:ce:16:2c:71:79:e9:21:60:2b:98:
         62:17:e7:12:4a:62:fd:d6:ec:39:a6:eb:6f:90:0a:70:eb:6b:
         e5:d8:c2:fb:de:1f:0a:7e:fe:a0:76:07:e5:2a:5a:c5:2f:b1:
         39:30:e4:4a:93:2f:b3:85:c6:be:77:ca:3d:61:23:dd:a9:cb:
         ca:2c:50:62:ff:2b:24:be:d5:95:74:57:fe:91:67:4b:b0:3a:
         15:58:b6:83:4e:cd:15:ba:35:17:14:88:84:31:44:d0:aa:2e:
         5a:f8:f2:19:cc:bd:3f:0b:53:08:c4:6a:d0:7e:cc:08:e3:ae:
         0a:11:a4:46:23:30:c2:fc:46:a7:9a:e1:bc:99:2d:24:07:61:
         f4:ac:32:4e:f2:08:21:fe:f1:01:70:07:d4:cd:37:a0:ff:27:
         6b:54:bd:9c:ca:10:eb:df:46:48:5c:6e:90:08:69:c2:e3:9e:
         0d:4c:c2:f4:a2:6b:b7:be:ff:74:da:46:a5:40:c5:80:0f:5f:
         e0:94:24:79:b4:92:0b:63:46:e2:a7:8f:6d:73:72:d5:3c:68:
         e3:e0:bf:b8:56:ea:e5:62:e1:9b:e4:58:c8:86:a8:10:be:17:
         d6:4c:46:ce:8e:3d:12:d4:af:d5:02:89:7e:7e:1e:0e:56:2b:
         99:5d:1b:1c
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY1
NURGMEFGMTEwLwYDVQQFEygxM0FBMkY3MDVGNEUwRkQzNjg0NDdDRjI4NzgxM0I1
NjgxMkQ1NkQ0MB4XDTI2MDgxMDE2MjExMFoXDTMwMDgzMTE2MjExMFowGDEWMBQG
A1UEAxMNNmE3OWZhN2EtZGQ2NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMPN7PP61p5Se9K/Uw8S8cn8o5nWf7710xjfUthbyrOOnweV/oXY/hwKD9A6
OmFG3mPzzgd0CcJ19wUhlP566LRfMwevZMuPua2GeJ2BmawAXAqeEL6EarTB+I5S
TmmDUfd20/jfC3vpb3pnVjrc1VKfJhlIJqSW0Db57NwICD0VTCd7ogOOFDSOyU2C
5SZTLiRhhnkCN1ivDDPOqgsrki79UIc94cg3/j014YFj3VgRQTqTuMT8u7EZvAka
RfulQob5eDHwz42Lg4CwPrf6rPH/B3hu5ZJHgukF5r4LpeUBALFvQWotFzY4F18O
KmkLRxZs57YgOLJuVmdw7m9oKwcCAwEAAaOCAqUwggKhMB0GA1UdDgQWBBTKPBuP
U85mwcbNVEUmKfksoHRmIjAfBgNVHSMEGDAWgBQTqi9wX04P02hEfPKHgTtWgS1W
1DAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2NTVERjAvQjcwQjRCNTQ5NENGMTFGMTk5RjE5OEE4Q0UxRDM4QjAvRTZvdmNG
OU9EOU5vUkh6eWg0RTdWb0V0VnRRLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvRTZvdmNGOU9EOU5vUkh6eWg0RTdWb0V0VnRRLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NTVERjAvQjcwQjRCNTQ5NENGMTFGMTk5RjE5OEE4Q0Ux
RDM4QjAvODE5NTE3RkU5NEQ3MTFGMUEzQzlFMEQ0Q0UxRDM4QjAucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWbKRDANBgkqhkiG9w0BAQsF
AAOCAQEAW18OZGszYdDOFixxeekhYCuYYhfnEkpi/dbsOabrb5AKcOtr5djC+94f
Cn7+oHYH5SpaxS+xOTDkSpMvs4XGvnfKPWEj3anLyixQYv8rJL7VlXRX/pFnS7A6
FVi2g07NFbo1FxSIhDFE0KouWvjyGcy9PwtTCMRq0H7MCOOuChGkRiMwwvxGp5rh
vJktJAdh9KwyTvIIIf7xAXAH1M03oP8na1S9nMoQ699GSFxukAhpwuOeDUzC9KJr
t77/dNpGpUDFgA9f4JQkebSSC2NG4qePbXNy1Txo4+C/uFbq5WLhm+RYyIaoEL4X
1kxGzo49EtSv1QKJfn4eDlYrmV0bHA==
-----END CERTIFICATE-----