Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36724C2/BFDAB754AB8811F183655414CF1D38B0/9F808EA0AC1111F19AD8B1DACE1D38B0.roa
File:                     9F808EA0AC1111F19AD8B1DACE1D38B0.roa (raw, json)
Hash identifier:          bZGnR4XDOjfzW6mAG8midsORjwq8CK4KJW9R5kCZnwI=
Subject key identifier:   1E:15:B8:A1:75:23:D6:2D:5B:51:58:7C:33:0C:66:4C:63:27:D6:58
Certificate issuer:       /CN=F36724C2AF/serialNumber=AC5DF5304809BB783EB962126958A00786E8F67C
Certificate serial:       0E
Authority key identifier: AC:5D:F5:30:48:09:BB:78:3E:B9:62:12:69:58:A0:07:86:E8:F6:7C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/rF31MEgJu3g-uWISaVigB4bo9nw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36724C2/BFDAB754AB8811F183655414CF1D38B0/9F808EA0AC1111F19AD8B1DACE1D38B0.roa
Signing time:             Wed 09 Sep 2026 05:45:12 +0000
ROA not before:           Wed 09 Sep 2026 05:45:08 +0000
ROA not after:            Thu 09 Sep 2027 05:45:08 +0000
asID:                     15399
IP address blocks:        102.222.220.0/22 maxlen: 22
                          102.222.220.0/22 maxlen: 23
                          102.222.220.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36724C2/BFDAB754AB8811F183655414CF1D38B0/rF31MEgJu3g-uWISaVigB4bo9nw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36724C2/BFDAB754AB8811F183655414CF1D38B0/rF31MEgJu3g-uWISaVigB4bo9nw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/rF31MEgJu3g-uWISaVigB4bo9nw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 20 Sep 2026 00:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14 (0xe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36724C2AF, serialNumber=AC5DF5304809BB783EB962126958A00786E8F67C
        Validity
            Not Before: Sep  9 05:45:08 2026 GMT
            Not After : Sep  9 05:45:08 2027 GMT
        Subject: CN=6aa0f268-5e3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f9:22:12:cd:ee:26:be:2f:74:90:75:6c:c1:
                    5b:b0:49:21:0d:36:86:0f:b8:b8:f5:cd:58:67:e3:
                    6d:01:53:94:bf:c4:6d:e4:31:91:46:99:6f:9a:04:
                    c2:f0:87:37:a4:f1:02:6a:3b:d0:c4:da:70:41:7c:
                    a9:b2:14:6b:5c:ac:90:58:f3:17:60:5c:c5:dd:37:
                    16:8c:21:8b:64:5d:3c:f5:1d:76:43:e6:2d:eb:3b:
                    78:e9:0e:a7:ce:8c:9c:c9:e2:9f:7f:ba:ea:84:ff:
                    f3:ba:45:30:70:f7:47:a5:06:37:b5:36:1f:d6:b2:
                    2f:2f:cd:47:4b:3a:60:ff:76:16:a5:95:48:ca:e9:
                    89:72:ee:40:92:36:f4:8f:42:44:f4:d0:f1:7a:71:
                    12:fa:0d:f6:b1:f3:fd:79:42:bb:8a:26:c5:7d:9c:
                    4a:42:6e:06:c9:cf:e0:2b:0c:67:7b:82:18:98:9d:
                    ee:fc:24:21:18:3c:f6:b0:77:26:53:b3:7d:ab:bb:
                    2f:19:06:22:65:5b:86:0d:6a:e2:2f:92:25:92:bb:
                    48:78:6b:9f:0d:f9:e7:1b:72:1a:95:0b:78:e8:07:
                    0b:85:c0:cf:0d:80:2f:ab:32:ac:91:f4:c3:44:ee:
                    1d:f6:68:3a:2b:f1:94:bf:22:b2:87:11:c2:1b:95:
                    4c:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:15:B8:A1:75:23:D6:2D:5B:51:58:7C:33:0C:66:4C:63:27:D6:58
            X509v3 Authority Key Identifier:
                keyid:AC:5D:F5:30:48:09:BB:78:3E:B9:62:12:69:58:A0:07:86:E8:F6:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36724C2/BFDAB754AB8811F183655414CF1D38B0/rF31MEgJu3g-uWISaVigB4bo9nw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rF31MEgJu3g-uWISaVigB4bo9nw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36724C2/BFDAB754AB8811F183655414CF1D38B0/9F808EA0AC1111F19AD8B1DACE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.222.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         49:32:82:87:bb:8a:bb:42:20:f0:35:af:ca:f8:f2:bd:10:8c:
         7e:46:b0:c1:d3:63:f4:49:75:b2:ea:32:b0:b7:19:ab:1e:e6:
         bc:58:83:fc:83:0d:d3:a4:2a:2a:ba:9b:b4:15:d7:68:14:5e:
         eb:c3:ef:75:55:88:81:9d:e6:92:81:7f:d3:b1:7d:62:d6:7c:
         18:45:bf:21:c2:06:a6:eb:4d:53:d6:80:9f:3b:a4:6b:6a:29:
         a6:63:b3:22:0b:a6:14:71:fc:06:31:2c:1c:b2:93:f7:64:3e:
         9a:ec:b3:b3:29:2c:d8:80:81:2e:80:cf:1e:3d:c1:fc:b5:99:
         68:2d:86:85:db:59:c5:3a:5d:dd:64:9b:dd:77:c6:28:9e:65:
         09:92:77:cd:b9:c9:8b:ce:66:a4:68:66:02:96:8f:75:10:13:
         ea:3d:f0:ad:72:6c:c8:83:44:58:a4:6c:da:a4:8f:d6:95:be:
         65:29:4e:49:27:54:4e:99:af:c7:e2:da:9a:55:19:e7:33:32:
         39:1e:b2:47:8f:aa:67:60:be:6e:77:44:2a:cb:7a:21:08:ac:
         29:30:34:f3:98:cb:f1:b7:c5:53:2f:a4:b3:3e:6d:9b:bd:fa:
         0e:af:0b:b1:44:81:10:9f:5c:34:ea:d2:9c:09:6a:ed:73:09:
         99:8a:39:f5
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBDjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY3
MjRDMkFGMTEwLwYDVQQFEyhBQzVERjUzMDQ4MDlCQjc4M0VCOTYyMTI2OTU4QTAw
Nzg2RThGNjdDMB4XDTI2MDkwOTA1NDUwOFoXDTI3MDkwOTA1NDUwOFowGDEWMBQG
A1UEAxMNNmFhMGYyNjgtNWUzZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKT5IhLN7ia+L3SQdWzBW7BJIQ02hg+4uPXNWGfjbQFTlL/EbeQxkUaZb5oE
wvCHN6TxAmo70MTacEF8qbIUa1yskFjzF2Bcxd03Fowhi2RdPPUddkPmLes7eOkO
p86MnMnin3+66oT/87pFMHD3R6UGN7U2H9ayLy/NR0s6YP92FqWVSMrpiXLuQJI2
9I9CRPTQ8XpxEvoN9rHz/XlCu4omxX2cSkJuBsnP4CsMZ3uCGJid7vwkIRg89rB3
JlOzfau7LxkGImVbhg1q4i+SJZK7SHhrnw355xtyGpULeOgHC4XAzw2AL6syrJH0
w0TuHfZoOivxlL8isocRwhuVTN0CAwEAAaOCAqUwggKhMB0GA1UdDgQWBBQeFbih
dSPWLVtRWHwzDGZMYyfWWDAfBgNVHSMEGDAWgBSsXfUwSAm7eD65YhJpWKAHhuj2
fDAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2NzI0QzIvQkZEQUI3NTRBQjg4MTFGMTgzNjU1NDE0Q0YxRDM4QjAvckYzMU1F
Z0p1M2ctdVdJU2FWaWdCNGJvOW53LmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvckYzMU1FZ0p1M2ctdVdJU2FWaWdCNGJvOW53LmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NzI0QzIvQkZEQUI3NTRBQjg4MTFGMTgzNjU1NDE0Q0Yx
RDM4QjAvOUY4MDhFQTBBQzExMTFGMTlBRDhCMURBQ0UxRDM4QjAucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmbe3DANBgkqhkiG9w0BAQsF
AAOCAQEASTKCh7uKu0Ig8DWvyvjyvRCMfkawwdNj9El1suoysLcZqx7mvFiD/IMN
06QqKrqbtBXXaBRe68PvdVWIgZ3mkoF/07F9YtZ8GEW/IcIGputNU9aAnzuka2op
pmOzIgumFHH8BjEsHLKT92Q+muyzsyks2ICBLoDPHj3B/LWZaC2GhdtZxTpd3WSb
3XfGKJ5lCZJ3zbnJi85mpGhmApaPdRAT6j3wrXJsyINEWKRs2qSP1pW+ZSlOSSdU
Tpmvx+LamlUZ5zMyOR6yR4+qZ2C+bndEKst6IQisKTA085jL8bfFUy+ksz5tm736
Dq8LsUSBEJ9cNOrSnAlq7XMJmYo59Q==
-----END CERTIFICATE-----