Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/8B41DD06BD9411F1B9D3FAD3CE1D38B0.roa
File:                     8B41DD06BD9411F1B9D3FAD3CE1D38B0.roa (raw, json)
Hash identifier:          wnOZTLWhs/7y2dV5PrZ4M9lHKJoVLAqRQts2A4Ub+Pk=
Subject key identifier:   C4:42:8B:DE:BA:6E:56:7D:E0:58:D3:33:25:F8:16:2C:13:72:92:EE
Certificate issuer:       /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial:       1A41
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/8B41DD06BD9411F1B9D3FAD3CE1D38B0.roa
Signing time:             Thu 01 Oct 2026 12:35:12 +0000
ROA not before:           Thu 01 Oct 2026 12:35:08 +0000
ROA not after:            Sun 01 Oct 2028 12:35:08 +0000
asID:                     212238
IP address blocks:        102.165.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 05 Oct 2026 00:08:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6721 (0x1a41)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
        Validity
            Not Before: Oct  1 12:35:08 2026 GMT
            Not After : Oct  1 12:35:08 2028 GMT
        Subject: CN=6abe5380-91bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:6e:e8:5d:a0:71:f6:80:3b:54:64:9c:97:97:
                    62:3b:b0:c4:b1:55:f4:47:26:69:26:ce:4a:79:8a:
                    19:c6:e7:ed:11:bd:d8:39:f0:3d:bd:20:6a:72:9e:
                    19:c5:9b:c4:1b:a1:b6:c4:87:e9:53:1b:23:26:70:
                    12:51:2a:c2:e2:4e:1a:7b:c1:03:c4:be:6b:fa:d6:
                    84:27:19:00:4d:c7:24:8d:7a:bc:21:c0:68:de:89:
                    b9:56:ff:e6:b5:0e:69:f6:bc:eb:02:b1:0f:57:da:
                    18:90:fa:44:dd:9c:38:e4:2c:78:76:54:e7:43:da:
                    e2:0e:9b:f5:8f:8d:fb:86:79:cb:bb:e6:e2:7a:7e:
                    a4:1e:5f:f1:95:7e:c3:7c:0e:1c:6a:05:a4:79:bf:
                    8e:2a:d5:f4:1f:7f:c6:17:af:f7:10:b3:f6:9d:3c:
                    73:f1:56:2f:10:d3:82:49:22:48:84:8f:d7:53:17:
                    a6:8d:f1:64:ca:0e:6c:47:39:0d:28:de:40:52:52:
                    c0:b4:bf:3e:4a:c7:2b:08:ab:ca:24:6c:56:ba:7e:
                    e4:f3:3e:60:bf:19:56:db:d5:83:46:fb:b2:e1:d3:
                    01:97:06:f5:9e:f9:11:f8:35:ab:16:91:cc:e2:d2:
                    e6:56:a5:8c:38:41:7e:23:0a:24:4e:ff:cc:70:94:
                    c4:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:42:8B:DE:BA:6E:56:7D:E0:58:D3:33:25:F8:16:2C:13:72:92:EE
            X509v3 Authority Key Identifier:
                keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/8B41DD06BD9411F1B9D3FAD3CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.165.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:09:60:53:a5:1f:5c:47:06:9d:ee:a0:e8:40:70:00:f6:e4:
         f3:98:d2:8f:db:1e:e0:2d:12:00:a1:8e:3f:cb:83:0e:ce:bb:
         7c:7e:30:b9:ae:9c:ec:38:00:1c:df:42:cc:b9:26:d5:49:02:
         16:77:5b:ad:d7:a7:47:f5:8b:d4:a1:2c:3f:6d:35:ef:6e:f2:
         59:a0:97:e7:5e:88:52:b1:f8:87:15:46:cb:f9:92:63:e1:9f:
         5f:eb:e8:b2:e1:59:93:8a:ce:cb:dd:fa:5c:bc:bb:04:ee:07:
         13:b3:54:9f:9d:e3:ea:c5:1d:93:77:c3:70:cf:58:a9:f6:8c:
         83:37:0c:8e:06:9c:5c:79:67:c7:b1:fd:00:08:b7:65:73:64:
         19:06:ee:e0:33:a3:32:63:57:9a:ba:35:28:50:04:ba:9a:9c:
         39:bd:c7:52:c9:ba:cb:ce:68:84:48:6d:28:ce:9d:6c:1b:33:
         d6:9e:24:00:12:41:e9:3d:f4:b3:0d:f1:56:3d:8b:34:5a:ba:
         75:36:f6:af:3f:d8:1f:ac:d2:56:27:18:c9:82:ab:53:dd:87:
         93:cb:b0:43:c1:cc:9d:fa:86:02:5e:f3:be:97:20:3c:ed:42:
         c4:62:93:13:16:00:f3:72:72:2a:42:77:a6:40:1a:aa:be:f8:
         87:a2:ff:01
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICGkEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0yNjEwMDExMjM1MDhaFw0yODEwMDExMjM1MDhaMBgxFjAU
BgNVBAMTDTZhYmU1MzgwLTkxYmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDlbuhdoHH2gDtUZJyXl2I7sMSxVfRHJmkmzkp5ihnG5+0Rvdg58D29IGpy
nhnFm8QbobbEh+lTGyMmcBJRKsLiThp7wQPEvmv61oQnGQBNxySNerwhwGjeiblW
/+a1Dmn2vOsCsQ9X2hiQ+kTdnDjkLHh2VOdD2uIOm/WPjfuGecu75uJ6fqQeX/GV
fsN8DhxqBaR5v44q1fQff8YXr/cQs/adPHPxVi8Q04JJIkiEj9dTF6aN8WTKDmxH
OQ0o3kBSUsC0vz5KxysIq8okbFa6fuTzPmC/GVbb1YNG+7Lh0wGXBvWe+RH4NasW
kczi0uZWpYw4QX4jCiRO/8xwlMQzAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUxEKL
3rpuVn3gWNMzJfgWLBNyku4wHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4LzhCNDFERDA2QkQ5NDExRjFCOUQzRkFEM0NFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmpRUwDQYJKoZIhvcNAQEL
BQADggEBAIoJYFOlH1xHBp3uoOhAcAD25POY0o/bHuAtEgChjj/Lgw7Ou3x+MLmu
nOw4ABzfQsy5JtVJAhZ3W63Xp0f1i9ShLD9tNe9u8lmgl+deiFKx+IcVRsv5kmPh
n1/r6LLhWZOKzsvd+ly8uwTuBxOzVJ+d4+rFHZN3w3DPWKn2jIM3DI4GnFx5Z8ex
/QAIt2VzZBkG7uAzozJjV5q6NShQBLqanDm9x1LJusvOaIRIbSjOnWwbM9aeJAAS
Qek99LMN8VY9izRaunU29q8/2B+s0lYnGMmCq1Pdh5PLsEPBzJ36hgJe876XIDzt
QsRikxMWAPNycipCd6ZAGqq++Iei/wE=
-----END CERTIFICATE-----