Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/11D9E230A6FE11F1B0DB6D10CF1D38B0.roa
File:                     11D9E230A6FE11F1B0DB6D10CF1D38B0.roa (raw, json)
Hash identifier:          6/irVHhKEv5obh3a2++kosmyus+YGBVdIepXUPRFvGo=
Subject key identifier:   D1:A0:EB:CE:8A:F0:7A:15:BF:E8:57:49:A7:5B:43:D6:E4:37:47:0D
Certificate issuer:       /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial:       19DE
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/11D9E230A6FE11F1B0DB6D10CF1D38B0.roa
Signing time:             Wed 02 Sep 2026 18:42:38 +0000
ROA not before:           Wed 02 Sep 2026 18:42:33 +0000
ROA not after:            Sat 02 Sep 2028 18:42:33 +0000
asID:                     402265
IP address blocks:        102.129.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 05 Sep 2026 00:07:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6622 (0x19de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
        Validity
            Not Before: Sep  2 18:42:33 2026 GMT
            Not After : Sep  2 18:42:33 2028 GMT
        Subject: CN=6a986e1e-5514
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:0b:2c:2e:38:89:01:b6:b4:b2:18:db:40:54:
                    95:d5:87:c5:58:0a:87:5c:70:dd:76:dd:b5:47:9b:
                    76:97:ae:33:66:f9:24:65:52:99:c6:e6:b1:da:23:
                    50:ce:d0:7f:8f:d1:6b:24:67:0c:ac:63:7d:ed:a8:
                    d3:dc:17:fd:fc:2f:82:44:20:e1:22:94:ae:3d:6d:
                    1c:f3:9f:6f:d7:92:5d:a7:6b:84:9d:e5:91:c0:5a:
                    74:43:95:2e:92:cc:28:50:af:eb:8a:3e:28:e9:fc:
                    fb:c8:13:ca:78:da:d1:0c:fb:fc:70:e6:45:07:78:
                    e3:b0:37:ca:46:8b:65:80:9c:c4:ab:dc:b7:8b:35:
                    4a:cc:02:07:0b:12:cb:74:c7:bf:1a:bb:b3:3e:fa:
                    ed:90:cb:ad:1c:69:2d:1a:d1:02:41:99:ce:3d:7d:
                    37:db:e3:6e:6a:4d:c1:d6:26:1d:dc:44:fc:8d:76:
                    fa:7c:0f:4b:1f:3b:a4:ea:e0:11:81:8d:20:ab:cb:
                    61:f9:25:09:ff:0f:b6:68:41:ed:3e:35:ff:68:07:
                    d1:3f:76:23:34:76:6c:7f:b6:2a:21:3a:2c:ae:cf:
                    72:92:f0:52:1a:6e:ca:7e:28:c1:20:d8:65:d3:61:
                    9d:8f:72:dd:d9:fb:18:9e:97:12:15:65:3c:74:12:
                    e7:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:A0:EB:CE:8A:F0:7A:15:BF:E8:57:49:A7:5B:43:D6:E4:37:47:0D
            X509v3 Authority Key Identifier:
                keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/11D9E230A6FE11F1B0DB6D10CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.129.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:bc:25:2f:d7:04:0c:fa:07:b2:88:f6:70:cb:96:36:59:b1:
         8d:94:cc:9b:cb:77:39:62:bf:fa:d1:a5:f8:a8:d3:86:76:eb:
         5b:80:ee:7c:36:0a:ad:cb:ff:83:c7:97:de:f8:14:b9:dc:3c:
         86:fc:18:4b:02:2a:56:dd:e5:b2:17:bd:1b:fe:a7:f9:17:03:
         84:a3:33:43:c7:02:ea:65:7c:90:51:53:74:df:41:fc:b1:1a:
         25:bd:59:03:f1:34:dd:75:00:66:35:b0:a9:f6:c1:72:ff:16:
         2f:06:e3:3a:4e:ea:a3:e9:12:53:8c:ed:fc:20:c3:9c:c4:b0:
         41:f7:d1:96:2e:79:62:05:99:eb:dc:f8:12:9f:c8:a0:37:0b:
         43:28:51:d7:06:48:c0:65:0c:e4:18:f1:42:2e:61:18:a8:24:
         8e:bb:79:77:8b:38:f7:13:36:cf:84:53:4e:3d:e4:6d:9f:af:
         e9:16:18:1a:07:8b:d3:8b:f4:b7:87:18:1f:1f:ac:38:89:c1:
         95:17:28:f2:5a:fc:1f:70:34:fc:74:af:7c:96:a6:41:3d:fb:
         8a:5a:10:0a:45:b5:81:4c:db:63:44:8e:63:94:86:1e:e8:74:
         bf:75:c3:1a:64:69:42:f7:27:db:68:8c:3a:e3:31:fe:38:b5:
         a4:d5:82:b1
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICGd4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0yNjA5MDIxODQyMzNaFw0yODA5MDIxODQyMzNaMBgxFjAU
BgNVBAMTDTZhOTg2ZTFlLTU1MTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQChCywuOIkBtrSyGNtAVJXVh8VYCodccN123bVHm3aXrjNm+SRlUpnG5rHa
I1DO0H+P0WskZwysY33tqNPcF/38L4JEIOEilK49bRzzn2/Xkl2na4Sd5ZHAWnRD
lS6SzChQr+uKPijp/PvIE8p42tEM+/xw5kUHeOOwN8pGi2WAnMSr3LeLNUrMAgcL
Est0x78au7M++u2Qy60caS0a0QJBmc49fTfb425qTcHWJh3cRPyNdvp8D0sfO6Tq
4BGBjSCry2H5JQn/D7ZoQe0+Nf9oB9E/diM0dmx/tiohOiyuz3KS8FIabsp+KMEg
2GXTYZ2Pct3Z+xielxIVZTx0EudVAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU0aDr
zorwehW/6FdJp1tD1uQ3Rw0wHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4LzExRDlFMjMwQTZGRTExRjFCMERCNkQxMENGMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmgbcwDQYJKoZIhvcNAQEL
BQADggEBAGW8JS/XBAz6B7KI9nDLljZZsY2UzJvLdzliv/rRpfio04Z261uA7nw2
Cq3L/4PHl974FLncPIb8GEsCKlbd5bIXvRv+p/kXA4SjM0PHAuplfJBRU3TfQfyx
GiW9WQPxNN11AGY1sKn2wXL/Fi8G4zpO6qPpElOM7fwgw5zEsEH30ZYueWIFmevc
+BKfyKA3C0MoUdcGSMBlDOQY8UIuYRioJI67eXeLOPcTNs+EU0495G2fr+kWGBoH
i9OL9LeHGB8frDiJwZUXKPJa/B9wNPx0r3yWpkE9+4paEApFtYFM22NEjmOUhh7o
dL91wxpkaUL3J9tojDrjMf44taTVgrE=
-----END CERTIFICATE-----