Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36724C2/BFDAB754AB8811F183655414CF1D38B0/DE2EF662ABA011F19AF8B4A5CE1D38B0.roa
File:                     DE2EF662ABA011F19AF8B4A5CE1D38B0.roa (raw, json)
Hash identifier:          AJt7vIDOyMxhIXoi/drQ0C3lLoTcGlgNcHMGniY8aTg=
Subject key identifier:   AC:6A:C8:6C:AC:65:76:6C:00:12:EC:AE:79:30:8F:49:6B:52:87:E8
Certificate issuer:       /CN=F36724C2AF/serialNumber=AC5DF5304809BB783EB962126958A00786E8F67C
Certificate serial:       04
Authority key identifier: AC:5D:F5:30:48:09:BB:78:3E:B9:62:12:69:58:A0:07:86:E8:F6:7C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/rF31MEgJu3g-uWISaVigB4bo9nw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36724C2/BFDAB754AB8811F183655414CF1D38B0/DE2EF662ABA011F19AF8B4A5CE1D38B0.roa
Signing time:             Tue 08 Sep 2026 16:18:04 +0000
ROA not before:           Tue 08 Sep 2026 16:18:00 +0000
ROA not after:            Wed 08 Sep 2027 16:18:00 +0000
asID:                     15399
IP address blocks:        102.140.192.0/18 maxlen: 18
                          102.140.192.0/18 maxlen: 23
                          102.140.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36724C2/BFDAB754AB8811F183655414CF1D38B0/rF31MEgJu3g-uWISaVigB4bo9nw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36724C2/BFDAB754AB8811F183655414CF1D38B0/rF31MEgJu3g-uWISaVigB4bo9nw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/rF31MEgJu3g-uWISaVigB4bo9nw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 20 Sep 2026 00:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36724C2AF, serialNumber=AC5DF5304809BB783EB962126958A00786E8F67C
        Validity
            Not Before: Sep  8 16:18:00 2026 GMT
            Not After : Sep  8 16:18:00 2027 GMT
        Subject: CN=6aa0353c-c5e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:eb:6d:9e:28:d4:69:6c:91:2a:bc:77:d0:01:
                    a6:b8:f7:42:03:47:9a:43:90:61:49:d6:0a:13:a6:
                    a6:00:19:1c:18:36:24:38:d4:1b:49:80:ee:93:9b:
                    86:f6:6d:ae:20:3c:2f:c5:e1:08:98:5a:51:66:ea:
                    ef:b2:01:92:a9:5f:c6:10:47:c0:43:52:4c:de:b6:
                    3f:0d:4b:30:b7:3f:55:56:69:aa:43:ec:a9:08:b1:
                    c5:7f:22:4a:63:cd:a6:38:68:53:55:1b:4f:a4:df:
                    18:28:02:d6:e5:9f:4f:90:d6:a8:95:af:19:58:34:
                    b1:65:bd:4a:b6:4f:dd:ee:6a:c9:ce:26:c0:a5:cd:
                    ee:05:f7:43:3c:b8:99:ed:4b:8a:62:91:0a:34:70:
                    3f:22:75:58:e0:86:c6:16:8a:ec:62:26:18:56:53:
                    f2:d1:ad:f9:f9:5e:eb:08:45:4c:1d:b2:dd:4c:16:
                    8c:14:4d:f2:83:86:46:4a:58:57:f6:52:06:5c:f9:
                    0d:55:78:bb:25:c5:f0:64:d6:a6:b7:66:92:3b:62:
                    42:8b:85:b0:6d:99:31:a2:7e:c4:ba:a4:4d:d2:72:
                    57:22:7e:fd:19:ee:1f:e6:3a:3b:bc:06:73:10:16:
                    5d:ab:fe:47:02:2b:2e:64:01:2b:d0:86:c0:82:4a:
                    11:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:6A:C8:6C:AC:65:76:6C:00:12:EC:AE:79:30:8F:49:6B:52:87:E8
            X509v3 Authority Key Identifier:
                keyid:AC:5D:F5:30:48:09:BB:78:3E:B9:62:12:69:58:A0:07:86:E8:F6:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36724C2/BFDAB754AB8811F183655414CF1D38B0/rF31MEgJu3g-uWISaVigB4bo9nw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rF31MEgJu3g-uWISaVigB4bo9nw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36724C2/BFDAB754AB8811F183655414CF1D38B0/DE2EF662ABA011F19AF8B4A5CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.140.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         46:42:e9:7d:dd:34:2e:5b:e5:a2:c0:2b:cf:9a:da:87:34:1c:
         5f:3d:15:03:92:58:73:62:9d:75:69:60:f6:e7:a3:3b:d0:e5:
         05:ca:1b:11:92:f6:af:81:42:de:aa:53:9d:6f:f9:a6:7d:4a:
         29:b5:a3:a5:50:82:18:4e:ab:5b:b2:1a:11:e7:c1:ba:8f:9c:
         64:a1:6a:70:ea:4b:7b:11:95:f5:c1:75:14:0e:85:e7:85:8d:
         5c:af:4b:e5:fe:26:c1:5f:34:e4:23:26:77:2c:88:fb:64:ed:
         85:52:e7:32:f4:a3:f6:03:56:79:6e:f8:26:ae:98:f9:89:3f:
         e8:f2:94:c0:51:94:62:8a:73:23:08:bb:19:50:8a:b0:45:86:
         ff:95:5f:c0:ba:ae:d3:4b:6b:ff:2a:52:17:03:30:d9:6b:8b:
         b1:c0:4e:37:15:2e:14:f5:8f:43:74:d8:0d:79:e3:1e:4d:2f:
         6b:6f:ae:a0:29:8f:bf:18:86:2a:57:1a:ca:d9:9a:9e:2c:bc:
         63:ac:ac:c7:74:73:0b:5d:f9:59:86:19:c4:9b:40:ce:ec:12:
         c8:51:81:a2:9d:76:26:e0:23:47:e3:57:e9:44:5e:13:db:81:
         51:bb:6e:1d:07:c2:49:d8:7a:20:7f:ef:b7:f1:1b:2c:4a:cf:
         44:a5:8a:51
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBBDANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY3
MjRDMkFGMTEwLwYDVQQFEyhBQzVERjUzMDQ4MDlCQjc4M0VCOTYyMTI2OTU4QTAw
Nzg2RThGNjdDMB4XDTI2MDkwODE2MTgwMFoXDTI3MDkwODE2MTgwMFowGDEWMBQG
A1UEAxMNNmFhMDM1M2MtYzVlNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKLrbZ4o1GlskSq8d9ABprj3QgNHmkOQYUnWChOmpgAZHBg2JDjUG0mA7pOb
hvZtriA8L8XhCJhaUWbq77IBkqlfxhBHwENSTN62Pw1LMLc/VVZpqkPsqQixxX8i
SmPNpjhoU1UbT6TfGCgC1uWfT5DWqJWvGVg0sWW9SrZP3e5qyc4mwKXN7gX3Qzy4
me1LimKRCjRwPyJ1WOCGxhaK7GImGFZT8tGt+fle6whFTB2y3UwWjBRN8oOGRkpY
V/ZSBlz5DVV4uyXF8GTWprdmkjtiQouFsG2ZMaJ+xLqkTdJyVyJ+/RnuH+Y6O7wG
cxAWXav+RwIrLmQBK9CGwIJKESECAwEAAaOCAqUwggKhMB0GA1UdDgQWBBSsashs
rGV2bAAS7K55MI9Ja1KH6DAfBgNVHSMEGDAWgBSsXfUwSAm7eD65YhJpWKAHhuj2
fDAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2NzI0QzIvQkZEQUI3NTRBQjg4MTFGMTgzNjU1NDE0Q0YxRDM4QjAvckYzMU1F
Z0p1M2ctdVdJU2FWaWdCNGJvOW53LmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvckYzMU1FZ0p1M2ctdVdJU2FWaWdCNGJvOW53LmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NzI0QzIvQkZEQUI3NTRBQjg4MTFGMTgzNjU1NDE0Q0Yx
RDM4QjAvREUyRUY2NjJBQkEwMTFGMTlBRjhCNEE1Q0UxRDM4QjAucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBmaMwDANBgkqhkiG9w0BAQsF
AAOCAQEARkLpfd00LlvlosArz5rahzQcXz0VA5JYc2KddWlg9uejO9DlBcobEZL2
r4FC3qpTnW/5pn1KKbWjpVCCGE6rW7IaEefBuo+cZKFqcOpLexGV9cF1FA6F54WN
XK9L5f4mwV805CMmdyyI+2TthVLnMvSj9gNWeW74Jq6Y+Yk/6PKUwFGUYopzIwi7
GVCKsEWG/5VfwLqu00tr/ypSFwMw2WuLscBONxUuFPWPQ3TYDXnjHk0va2+uoCmP
vxiGKlcaytmaniy8Y6ysx3RzC135WYYZxJtAzuwSyFGBop12JuAjR+NX6UReE9uB
UbtuHQfCSdh6IH/vt/EbLErPRKWKUQ==
-----END CERTIFICATE-----