Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/49E24588CC5511F1BDC45EB4CE1D38B0.roa
File:                     49E24588CC5511F1BDC45EB4CE1D38B0.roa (raw, json)
Hash identifier:          BXAVd0bRmEXdnEws3tv5fFMGlnh5j+lzpz1tQFKZKc8=
Subject key identifier:   58:0E:C1:F1:58:DB:20:84:C4:E0:4A:A7:E2:10:47:A2:D7:AD:BF:3E
Certificate issuer:       /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial:       1A9C
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/49E24588CC5511F1BDC45EB4CE1D38B0.roa
Signing time:             Tue 20 Oct 2026 07:10:11 +0000
ROA not before:           Tue 20 Oct 2026 07:10:06 +0000
ROA not after:            Fri 20 Oct 2028 07:10:06 +0000
asID:                     402309
IP address blocks:        102.129.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 23 Oct 2026 01:19:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6812 (0x1a9c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
        Validity
            Not Before: Oct 20 07:10:06 2026 GMT
            Not After : Oct 20 07:10:06 2028 GMT
        Subject: CN=6ad713d3-c049
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:22:16:54:05:de:9d:bd:fa:7f:72:b4:ba:16:
                    54:d4:be:15:13:6c:5b:87:b9:5d:f2:d5:4c:fe:14:
                    2a:0c:5b:3b:9d:20:15:e2:7f:6e:93:d5:5c:ec:68:
                    2e:de:4f:e2:e0:73:30:07:78:10:46:93:27:8c:8a:
                    b4:47:63:2e:41:d3:8b:68:bd:0b:7e:97:1b:f7:a7:
                    16:85:19:89:99:df:d2:8b:15:68:3e:e0:26:b6:ca:
                    ec:09:d6:04:29:29:5a:08:da:61:98:d8:e1:6a:66:
                    d2:c9:3e:52:1e:e4:22:88:83:b7:55:35:36:bf:5b:
                    9f:93:eb:2c:1c:55:1d:db:38:6d:24:3e:13:0c:76:
                    3a:f8:5b:69:9d:8c:5c:02:da:f9:1f:de:29:65:12:
                    60:1c:b2:10:21:ee:84:ba:26:50:05:eb:8a:93:b6:
                    77:1e:03:5f:e4:00:f0:46:5f:46:b0:e7:d4:7a:5f:
                    27:f5:1e:a2:c3:4b:22:21:81:17:5a:51:23:bd:b1:
                    80:61:db:3f:c3:fa:9e:93:08:c9:a6:79:d1:4b:6c:
                    ac:31:43:bf:09:7c:f1:db:90:32:a2:36:e0:f5:c3:
                    b9:a5:24:9b:22:7f:a1:27:e0:02:50:61:c4:75:7d:
                    b3:e2:1c:73:b8:26:4c:a7:e4:d1:35:a7:5b:61:06:
                    13:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:0E:C1:F1:58:DB:20:84:C4:E0:4A:A7:E2:10:47:A2:D7:AD:BF:3E
            X509v3 Authority Key Identifier:
                keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/49E24588CC5511F1BDC45EB4CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.129.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:d9:52:2f:a5:d9:d9:49:92:6f:fb:68:e0:0c:3d:a3:c4:63:
         25:77:2c:4c:42:d9:4c:a4:c9:7a:f7:e3:ac:8d:b4:9c:d1:7c:
         21:1b:d9:1a:10:2c:0d:f0:68:85:6c:42:03:db:a5:23:0c:48:
         bc:a8:e5:0f:11:14:c3:6b:43:85:e5:f2:ef:58:51:bf:e3:d8:
         f2:9b:c1:0b:a5:bc:e9:7f:c6:3d:2d:80:a3:a4:73:cf:34:2e:
         23:84:47:1d:f2:96:cb:d1:cd:93:b3:12:40:2b:0f:ff:0a:6f:
         69:15:a2:c8:b4:0c:ee:db:48:7f:71:39:87:14:bd:0d:dc:c4:
         fd:1c:90:d2:09:d9:7f:7f:da:c4:0b:8e:b2:60:61:70:62:93:
         19:1b:49:7f:6e:2a:f4:da:5f:5a:75:5b:fa:81:c8:1e:21:19:
         b6:dd:32:41:42:0f:8f:f0:9c:2d:a2:c4:9e:b7:66:9e:3b:4b:
         d9:b2:c0:70:6d:7c:a9:d9:79:4f:1c:09:df:3d:95:24:ef:91:
         07:e2:af:74:78:db:43:eb:d1:3c:f6:11:07:9f:35:54:0a:bc:
         9d:4c:3e:e8:a2:30:a3:48:f7:2b:da:34:86:91:60:2e:aa:e0:
         e8:14:16:b1:9e:9f:12:ff:9d:97:e8:dc:da:23:32:35:13:19:
         1a:2d:f5:40
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICGpwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0yNjEwMjAwNzEwMDZaFw0yODEwMjAwNzEwMDZaMBgxFjAU
BgNVBAMTDTZhZDcxM2QzLWMwNDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC+IhZUBd6dvfp/crS6FlTUvhUTbFuHuV3y1Uz+FCoMWzudIBXif26T1Vzs
aC7eT+LgczAHeBBGkyeMirRHYy5B04tovQt+lxv3pxaFGYmZ39KLFWg+4Ca2yuwJ
1gQpKVoI2mGY2OFqZtLJPlIe5CKIg7dVNTa/W5+T6ywcVR3bOG0kPhMMdjr4W2md
jFwC2vkf3illEmAcshAh7oS6JlAF64qTtnceA1/kAPBGX0aw59R6Xyf1HqLDSyIh
gRdaUSO9sYBh2z/D+p6TCMmmedFLbKwxQ78JfPHbkDKiNuD1w7mlJJsif6En4AJQ
YcR1fbPiHHO4Jkyn5NE1p1thBhNVAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUWA7B
8VjbIITE4Eqn4hBHotetvz4wHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4LzQ5RTI0NTg4Q0M1NTExRjFCREM0NUVCNENFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmgekwDQYJKoZIhvcNAQEL
BQADggEBAAbZUi+l2dlJkm/7aOAMPaPEYyV3LExC2UykyXr346yNtJzRfCEb2RoQ
LA3waIVsQgPbpSMMSLyo5Q8RFMNrQ4Xl8u9YUb/j2PKbwQulvOl/xj0tgKOkc880
LiOERx3ylsvRzZOzEkArD/8Kb2kVosi0DO7bSH9xOYcUvQ3cxP0ckNIJ2X9/2sQL
jrJgYXBikxkbSX9uKvTaX1p1W/qByB4hGbbdMkFCD4/wnC2ixJ63Zp47S9mywHBt
fKnZeU8cCd89lSTvkQfir3R420Pr0Tz2EQefNVQKvJ1MPuiiMKNI9yvaNIaRYC6q
4OgUFrGenxL/nZfo3NojMjUTGRot9UA=
-----END CERTIFICATE-----