Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3678120/2065EDE6ABE311F1BCFBDDACCE1D38B0/B150BA40ABE611F1A282F4C0CE1D38B0.roa
File:                     B150BA40ABE611F1A282F4C0CE1D38B0.roa (raw, json)
Hash identifier:          N+dAXbLJBG8rn1KXTP6prlFDogrJTuX/AgdM1sWu2Xs=
Subject key identifier:   64:47:A5:DD:EF:5D:B5:E7:69:49:36:8A:A7:11:E4:91:06:42:E7:C6
Certificate issuer:       /CN=F3678120AF/serialNumber=9433F1D5AFF2A4A3A484039CB04312FA4622D09F
Certificate serial:       02
Authority key identifier: 94:33:F1:D5:AF:F2:A4:A3:A4:84:03:9C:B0:43:12:FA:46:22:D0:9F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/lDPx1a_ypKOkhAOcsEMS-kYi0J8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3678120/2065EDE6ABE311F1BCFBDDACCE1D38B0/B150BA40ABE611F1A282F4C0CE1D38B0.roa
Signing time:             Wed 09 Sep 2026 00:37:53 +0000
ROA not before:           Wed 09 Sep 2026 00:00:49 +0000
ROA not after:            Sun 09 Sep 2029 00:00:49 +0000
asID:                     29606
IP address blocks:        102.202.20.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3678120/2065EDE6ABE311F1BCFBDDACCE1D38B0/lDPx1a_ypKOkhAOcsEMS-kYi0J8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3678120/2065EDE6ABE311F1BCFBDDACCE1D38B0/lDPx1a_ypKOkhAOcsEMS-kYi0J8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/lDPx1a_ypKOkhAOcsEMS-kYi0J8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 20 Sep 2026 00:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3678120AF, serialNumber=9433F1D5AFF2A4A3A484039CB04312FA4622D09F
        Validity
            Not Before: Sep  9 00:00:49 2026 GMT
            Not After : Sep  9 00:00:49 2029 GMT
        Subject: CN=6aa0aa61-6363
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ec:de:b2:2b:98:31:66:b6:07:6f:c6:13:95:
                    d9:6e:ad:31:2e:e1:f3:b5:18:84:7f:7a:b4:54:f4:
                    23:9b:a9:63:59:74:2e:a3:19:76:94:00:c4:94:7a:
                    3d:7d:7d:64:74:a0:0d:ad:e4:ab:8c:3c:13:57:e2:
                    3a:ba:39:70:4d:bc:d9:61:c9:e8:ca:fc:86:20:77:
                    19:67:a1:02:ef:72:80:68:15:a6:7f:37:7f:82:0d:
                    62:4a:73:cf:ac:fc:e2:bb:1b:3e:f8:11:fb:15:a0:
                    d9:76:3c:d0:03:bf:b4:86:6c:fd:e0:45:3a:ce:e1:
                    6a:c9:73:60:5d:e5:76:32:bf:20:bf:9e:5d:58:ea:
                    f0:d8:36:16:90:97:c5:4c:93:e2:f1:5c:a5:c9:1b:
                    f5:bc:3f:c8:82:d6:88:90:16:08:16:d7:96:c7:a6:
                    57:4e:3d:cc:13:48:bf:1d:0c:c3:50:49:32:ff:c4:
                    7a:7f:a1:6a:ea:59:33:89:d9:8a:58:1d:91:40:f7:
                    b3:80:9e:de:4e:60:00:47:a8:ad:3d:8e:98:a9:df:
                    df:d9:a6:fa:91:e4:43:5f:c3:15:39:7e:0b:05:34:
                    42:13:c5:2e:15:f9:11:3e:b7:06:39:29:9c:d2:46:
                    fa:ed:3f:75:95:6c:0e:3d:e5:2e:bd:6d:e0:c3:54:
                    97:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:47:A5:DD:EF:5D:B5:E7:69:49:36:8A:A7:11:E4:91:06:42:E7:C6
            X509v3 Authority Key Identifier:
                keyid:94:33:F1:D5:AF:F2:A4:A3:A4:84:03:9C:B0:43:12:FA:46:22:D0:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3678120/2065EDE6ABE311F1BCFBDDACCE1D38B0/lDPx1a_ypKOkhAOcsEMS-kYi0J8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lDPx1a_ypKOkhAOcsEMS-kYi0J8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3678120/2065EDE6ABE311F1BCFBDDACCE1D38B0/B150BA40ABE611F1A282F4C0CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.202.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         be:54:44:d7:54:20:dc:c2:12:20:b1:ae:e2:6a:61:04:a2:ce:
         a4:76:22:ba:b1:71:b5:2d:34:aa:d2:78:29:74:3a:f2:e6:a2:
         1d:52:e7:89:15:a8:70:4c:90:79:23:10:54:9a:7e:b9:10:9f:
         5c:11:6e:78:95:65:63:f7:9f:5b:0d:43:ce:04:7a:60:cd:b9:
         e0:08:2b:89:ae:df:f5:b8:1d:62:89:2c:22:e1:87:b1:64:9c:
         c1:94:e2:53:a6:6c:77:83:0f:fd:e0:64:59:9d:22:48:43:c0:
         e8:25:6a:52:43:a9:42:20:47:57:61:25:cc:49:20:64:a3:15:
         c9:e3:7c:69:51:11:4b:77:31:72:c1:6e:99:75:90:94:29:6d:
         71:60:89:1c:29:cf:d3:71:43:c2:e1:16:5e:4a:62:76:9d:7f:
         22:a6:db:15:ee:52:ca:fc:34:72:e0:e0:c3:7f:0c:61:08:d0:
         87:c0:a3:02:16:45:11:43:ec:23:52:33:f2:85:e9:18:d4:db:
         d6:cc:c5:e4:bc:a9:53:1d:85:cb:41:34:a9:77:59:cc:ff:81:
         2c:86:a0:35:bc:a7:b3:f0:42:73:0e:00:16:b8:5d:f7:0c:5a:
         1f:be:94:18:1f:d9:70:79:56:ff:47:93:4e:0e:88:4c:6e:05:
         07:f4:ee:a6
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY3
ODEyMEFGMTEwLwYDVQQFEyg5NDMzRjFENUFGRjJBNEEzQTQ4NDAzOUNCMDQzMTJG
QTQ2MjJEMDlGMB4XDTI2MDkwOTAwMDA0OVoXDTI5MDkwOTAwMDA0OVowGDEWMBQG
A1UEAxMNNmFhMGFhNjEtNjM2MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKDs3rIrmDFmtgdvxhOV2W6tMS7h87UYhH96tFT0I5upY1l0LqMZdpQAxJR6
PX19ZHSgDa3kq4w8E1fiOro5cE282WHJ6Mr8hiB3GWehAu9ygGgVpn83f4INYkpz
z6z84rsbPvgR+xWg2XY80AO/tIZs/eBFOs7haslzYF3ldjK/IL+eXVjq8Ng2FpCX
xUyT4vFcpckb9bw/yILWiJAWCBbXlsemV049zBNIvx0Mw1BJMv/Een+haupZM4nZ
ilgdkUD3s4Ce3k5gAEeorT2OmKnf39mm+pHkQ1/DFTl+CwU0QhPFLhX5ET63Bjkp
nNJG+u0/dZVsDj3lLr1t4MNUl7sCAwEAAaOCAqUwggKhMB0GA1UdDgQWBBRkR6Xd
712152lJNoqnEeSRBkLnxjAfBgNVHSMEGDAWgBSUM/HVr/Kko6SEA5ywQxL6RiLQ
nzAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2NzgxMjAvMjA2NUVERTZBQkUzMTFGMUJDRkJEREFDQ0UxRDM4QjAvbERQeDFh
X3lwS09raEFPY3NFTVMta1lpMEo4LmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvbERQeDFhX3lwS09raEFPY3NFTVMta1lpMEo4LmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NzgxMjAvMjA2NUVERTZBQkUzMTFGMUJDRkJEREFDQ0Ux
RDM4QjAvQjE1MEJBNDBBQkU2MTFGMUEyODJGNEMwQ0UxRDM4QjAucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGbKFDANBgkqhkiG9w0BAQsF
AAOCAQEAvlRE11Qg3MISILGu4mphBKLOpHYiurFxtS00qtJ4KXQ68uaiHVLniRWo
cEyQeSMQVJp+uRCfXBFueJVlY/efWw1DzgR6YM254Agria7f9bgdYoksIuGHsWSc
wZTiU6Zsd4MP/eBkWZ0iSEPA6CVqUkOpQiBHV2ElzEkgZKMVyeN8aVERS3cxcsFu
mXWQlCltcWCJHCnP03FDwuEWXkpidp1/IqbbFe5Syvw0cuDgw38MYQjQh8CjAhZF
EUPsI1Iz8oXpGNTb1szF5LypUx2Fy0E0qXdZzP+BLIagNbyns/BCcw4AFrhd9wxa
H76UGB/ZcHlW/0eTTg6ITG4FB/Tupg==
-----END CERTIFICATE-----