Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/AC6069B8BD8E11F182005CB0CE1D38B0.roa
File:                     AC6069B8BD8E11F182005CB0CE1D38B0.roa (raw, json)
Hash identifier:          qOOPVFAStXs4ZO7WYEvFIUyLn//B9aOxdoA/3lRCPyc=
Subject key identifier:   B4:B7:94:AC:70:8D:A5:B1:A1:44:19:6D:16:5E:D9:02:BC:5E:E0:75
Certificate issuer:       /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial:       1A33
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/AC6069B8BD8E11F182005CB0CE1D38B0.roa
Signing time:             Thu 01 Oct 2026 11:53:10 +0000
ROA not before:           Thu 01 Oct 2026 11:53:06 +0000
ROA not after:            Sun 01 Oct 2028 11:53:06 +0000
asID:                     834
IP address blocks:        102.129.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 04 Oct 2026 15:54:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6707 (0x1a33)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
        Validity
            Not Before: Oct  1 11:53:06 2026 GMT
            Not After : Oct  1 11:53:06 2028 GMT
        Subject: CN=6abe49a6-3381
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ad:08:30:97:19:4f:18:0a:b6:90:3f:2a:6d:
                    83:87:dd:ae:cd:2e:9e:79:cf:be:17:be:3d:e5:76:
                    7d:3e:4d:61:dc:bb:26:1e:46:98:7a:d2:82:57:5a:
                    ee:f9:d2:de:5b:d2:af:82:eb:1f:28:54:8e:ea:eb:
                    5f:7f:16:2b:04:8b:eb:45:b5:94:4d:06:94:7d:0c:
                    22:68:60:f9:fe:0f:83:79:70:59:b2:1f:9f:81:60:
                    78:cb:8a:80:f0:db:3b:56:0c:5f:99:bb:fe:f8:dc:
                    08:37:d1:c9:05:84:84:60:f6:b8:bd:57:b1:55:45:
                    d9:d4:8e:6f:8e:78:c0:30:78:ce:85:0f:a4:d9:36:
                    49:fa:15:b1:34:28:2a:f2:c9:18:13:2b:a3:d4:bd:
                    18:8c:3e:ec:6b:77:14:a1:b6:f7:21:6d:88:e2:1f:
                    40:41:0a:dc:ee:87:d3:54:d4:c0:6a:d4:04:6e:c7:
                    6a:3a:8f:7d:70:31:ee:10:b7:a9:52:83:23:40:af:
                    25:d0:63:f2:86:8c:32:9b:27:c7:42:ff:13:b4:59:
                    8c:4a:62:5a:90:cf:65:23:9e:d2:89:cd:35:90:6f:
                    67:2e:98:2b:d6:05:72:34:79:20:12:00:b8:4c:21:
                    90:b0:69:cb:2c:3f:1e:71:41:4b:80:16:b4:16:16:
                    41:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:B7:94:AC:70:8D:A5:B1:A1:44:19:6D:16:5E:D9:02:BC:5E:E0:75
            X509v3 Authority Key Identifier:
                keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/AC6069B8BD8E11F182005CB0CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.129.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d5:a8:53:d0:26:3b:fd:18:e3:41:f1:97:cb:38:5d:54:f9:d5:
         24:4a:7a:a4:47:55:9c:53:c6:39:37:28:30:3a:cc:31:f8:70:
         84:ff:7e:4b:d4:7c:ac:1e:1c:86:f1:af:d4:81:bd:46:27:b2:
         ee:d1:86:ba:5d:97:ca:18:97:ff:55:48:78:7e:ad:94:7f:13:
         a8:e2:91:53:74:c0:fd:3f:70:df:a9:c3:3d:e5:aa:57:57:87:
         95:75:b2:c5:03:34:49:0c:3c:a8:3d:e2:8b:19:a0:10:2e:d9:
         8c:9e:0f:9a:c4:ed:55:3c:41:53:b1:57:50:8f:2b:19:5f:d0:
         6c:91:ab:ed:e4:2c:70:74:43:86:9e:af:6f:11:2c:f2:c8:5d:
         64:b0:b8:1c:4b:24:1e:e3:e4:20:d7:ed:25:f4:c4:c5:ef:1b:
         74:af:95:af:0d:33:46:9b:15:f3:18:ba:ec:a8:bf:7d:4a:3a:
         13:68:1c:a6:dc:62:02:df:e8:ca:7c:4c:91:74:12:66:6f:bf:
         93:76:b9:aa:c5:dc:49:6e:b2:ed:ad:bb:a8:df:a3:80:e0:8f:
         cd:99:5e:c9:b1:b2:e5:eb:c9:35:dc:e3:10:e3:96:49:e8:47:
         f0:cd:92:de:0c:75:24:21:7a:89:9a:e1:6f:bf:40:66:eb:f7:
         eb:58:b1:4b
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICGjMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0yNjEwMDExMTUzMDZaFw0yODEwMDExMTUzMDZaMBgxFjAU
BgNVBAMTDTZhYmU0OWE2LTMzODEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC6rQgwlxlPGAq2kD8qbYOH3a7NLp55z74Xvj3ldn0+TWHcuyYeRph60oJX
Wu750t5b0q+C6x8oVI7q619/FisEi+tFtZRNBpR9DCJoYPn+D4N5cFmyH5+BYHjL
ioDw2ztWDF+Zu/743Ag30ckFhIRg9ri9V7FVRdnUjm+OeMAweM6FD6TZNkn6FbE0
KCryyRgTK6PUvRiMPuxrdxShtvchbYjiH0BBCtzuh9NU1MBq1ARux2o6j31wMe4Q
t6lSgyNAryXQY/KGjDKbJ8dC/xO0WYxKYlqQz2UjntKJzTWQb2cumCvWBXI0eSAS
ALhMIZCwacssPx5xQUuAFrQWFkGlAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUtLeU
rHCNpbGhRBltFl7ZArxe4HUwHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4L0FDNjA2OUI4QkQ4RTExRjE4MjAwNUNCMENFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmgY4wDQYJKoZIhvcNAQEL
BQADggEBANWoU9AmO/0Y40Hxl8s4XVT51SRKeqRHVZxTxjk3KDA6zDH4cIT/fkvU
fKweHIbxr9SBvUYnsu7Rhrpdl8oYl/9VSHh+rZR/E6jikVN0wP0/cN+pwz3lqldX
h5V1ssUDNEkMPKg94osZoBAu2YyeD5rE7VU8QVOxV1CPKxlf0GyRq+3kLHB0Q4ae
r28RLPLIXWSwuBxLJB7j5CDX7SX0xMXvG3Svla8NM0abFfMYuuyov31KOhNoHKbc
YgLf6Mp8TJF0EmZvv5N2uarF3Elusu2tu6jfo4Dgj82ZXsmxsuXryTXc4xDjlkno
R/DNkt4MdSQheoma4W+/QGbr9+tYsUs=
-----END CERTIFICATE-----