Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/4536EB60BE9011F1BCD3F8B7CE1D38B0.roa
File:                     4536EB60BE9011F1BCD3F8B7CE1D38B0.roa (raw, json)
Hash identifier:          4uZhiClg3RwSvPVSNgPwglQZSfL70vAiz+qJtn3P0Go=
Subject key identifier:   24:16:C4:D3:01:A9:6B:54:A3:A5:47:E9:B6:4B:07:05:1D:A3:1C:14
Certificate issuer:       /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial:       1A56
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/4536EB60BE9011F1BCD3F8B7CE1D38B0.roa
Signing time:             Fri 02 Oct 2026 18:37:07 +0000
ROA not before:           Fri 02 Oct 2026 18:37:03 +0000
ROA not after:            Mon 02 Oct 2028 18:37:03 +0000
asID:                     834
IP address blocks:        102.129.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 07 Oct 2026 00:07:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6742 (0x1a56)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
        Validity
            Not Before: Oct  2 18:37:03 2026 GMT
            Not After : Oct  2 18:37:03 2028 GMT
        Subject: CN=6abff9d3-652e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:10:f4:d6:f4:6d:01:8c:54:22:ac:96:a3:20:
                    4e:be:55:db:c7:e7:92:7f:28:b7:8a:d9:d5:2f:93:
                    32:b8:06:1f:bf:33:fe:1f:44:fd:21:2d:f9:16:cb:
                    58:41:48:44:e7:54:a1:5a:86:ba:8f:46:67:71:87:
                    a5:e5:1d:26:a9:a8:cf:7e:b1:89:8e:fd:de:b0:19:
                    44:c4:38:d7:c6:d5:28:00:bb:6d:a4:24:6c:69:0a:
                    84:4f:39:79:38:d2:49:2e:ba:06:f1:38:ce:27:ff:
                    af:56:41:48:6e:22:b9:a4:ae:50:f9:bd:86:80:ca:
                    4f:f0:a8:32:e0:aa:11:3c:ec:3a:b9:73:35:ac:07:
                    7f:45:cf:e5:dd:86:ef:91:ed:35:2a:21:3b:85:c0:
                    4d:cb:a1:60:48:3d:94:de:3c:fb:2a:49:39:8e:e5:
                    17:e0:ca:8e:79:92:8f:04:06:a1:f4:ce:eb:be:66:
                    8c:6b:ec:9f:dd:2a:45:32:5c:50:67:d5:a1:7f:ce:
                    fc:ed:9f:ee:e7:84:5b:2a:67:f6:46:9a:0e:55:37:
                    14:57:76:ef:d8:21:a2:06:4d:f1:5a:61:7b:c2:41:
                    fd:27:1a:67:56:2d:30:38:b1:a6:8e:f0:9a:d5:35:
                    a2:67:a0:7a:ed:27:04:0f:27:47:94:bf:db:9e:e5:
                    47:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:16:C4:D3:01:A9:6B:54:A3:A5:47:E9:B6:4B:07:05:1D:A3:1C:14
            X509v3 Authority Key Identifier:
                keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/4536EB60BE9011F1BCD3F8B7CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.129.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:74:8d:64:df:aa:72:d6:4d:6c:d7:8d:12:81:b5:e2:7b:56:
         29:af:ef:73:9f:7a:c1:85:9e:33:dd:40:98:93:b9:e9:34:14:
         8f:c6:6d:87:d8:bb:4f:e7:63:ff:07:80:e1:f6:a7:81:12:c6:
         7b:01:a8:22:70:5c:6a:d6:f3:ca:c5:b8:0f:69:ed:bd:6c:ad:
         41:1f:56:c2:58:7a:cc:70:e4:5c:9b:53:17:32:1b:a5:c8:73:
         bc:aa:79:2d:c3:6f:7d:f2:60:07:17:5d:c9:d5:0e:9a:f3:6a:
         0b:c0:6d:4b:33:d4:f6:1b:ea:c6:83:fb:c1:a4:31:fc:b4:fd:
         08:32:dd:c7:24:25:bb:25:2a:17:95:3a:27:90:e4:c6:f7:ed:
         fa:e1:3a:49:fc:86:5c:e2:29:ad:0e:c8:cc:12:44:63:ec:48:
         fe:72:69:92:41:12:36:55:52:a4:06:80:03:96:ab:a0:79:b7:
         c4:ea:5b:11:2d:5f:bb:1b:50:c4:b4:84:3b:b9:20:f8:42:8b:
         d2:97:2a:c1:7e:1a:f7:46:b2:85:80:6a:54:0c:48:c1:8f:5a:
         fa:90:47:2d:70:36:df:5a:c4:94:d4:59:f9:36:f3:51:f6:b8:
         e5:83:39:54:ca:04:ab:8f:25:a7:02:12:e5:06:04:d7:62:9c:
         22:36:5c:8a
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICGlYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0yNjEwMDIxODM3MDNaFw0yODEwMDIxODM3MDNaMBgxFjAU
BgNVBAMTDTZhYmZmOWQzLTY1MmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCsEPTW9G0BjFQirJajIE6+VdvH55J/KLeK2dUvkzK4Bh+/M/4fRP0hLfkW
y1hBSETnVKFahrqPRmdxh6XlHSapqM9+sYmO/d6wGUTEONfG1SgAu22kJGxpCoRP
OXk40kkuugbxOM4n/69WQUhuIrmkrlD5vYaAyk/wqDLgqhE87Dq5czWsB39Fz+Xd
hu+R7TUqITuFwE3LoWBIPZTePPsqSTmO5Rfgyo55ko8EBqH0zuu+Zoxr7J/dKkUy
XFBn1aF/zvztn+7nhFsqZ/ZGmg5VNxRXdu/YIaIGTfFaYXvCQf0nGmdWLTA4saaO
8JrVNaJnoHrtJwQPJ0eUv9ue5UdfAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUJBbE
0wGpa1SjpUfptksHBR2jHBQwHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4LzQ1MzZFQjYwQkU5MDExRjFCQ0QzRjhCN0NFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmgeEwDQYJKoZIhvcNAQEL
BQADggEBAGt0jWTfqnLWTWzXjRKBteJ7Vimv73OfesGFnjPdQJiTuek0FI/GbYfY
u0/nY/8HgOH2p4ESxnsBqCJwXGrW88rFuA9p7b1srUEfVsJYesxw5FybUxcyG6XI
c7yqeS3Db33yYAcXXcnVDprzagvAbUsz1PYb6saD+8GkMfy0/Qgy3cckJbslKheV
OieQ5Mb37frhOkn8hlziKa0OyMwSRGPsSP5yaZJBEjZVUqQGgAOWq6B5t8TqWxEt
X7sbUMS0hDu5IPhCi9KXKsF+GvdGsoWAalQMSMGPWvqQRy1wNt9axJTUWfk281H2
uOWDOVTKBKuPJacCEuUGBNdinCI2XIo=
-----END CERTIFICATE-----