Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/B6FD7F8ABD9011F1B75EC3BBCE1D38B0.roa
File:                     B6FD7F8ABD9011F1B75EC3BBCE1D38B0.roa (raw, json)
Hash identifier:          qpQ/dl8sa/jqc5/JyjpzQ/eRbJ6wI/TsVg895HRQV+0=
Subject key identifier:   FE:D6:E3:82:9F:65:06:71:77:A8:BC:22:64:F5:C0:68:CA:9C:3D:35
Certificate issuer:       /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial:       1A36
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/B6FD7F8ABD9011F1B75EC3BBCE1D38B0.roa
Signing time:             Thu 01 Oct 2026 12:07:47 +0000
ROA not before:           Thu 01 Oct 2026 12:07:43 +0000
ROA not after:            Sun 01 Oct 2028 12:07:43 +0000
asID:                     834
IP address blocks:        102.129.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 05 Oct 2026 00:08:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6710 (0x1a36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
        Validity
            Not Before: Oct  1 12:07:43 2026 GMT
            Not After : Oct  1 12:07:43 2028 GMT
        Subject: CN=6abe4d13-2c49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:d1:11:c6:24:cd:64:4f:e6:8b:98:87:ca:cd:
                    f9:21:f9:1b:ac:10:6e:77:38:a9:ea:5a:c1:56:62:
                    a1:75:11:e8:67:b3:fa:3a:72:2a:f3:7d:75:b4:ca:
                    72:9f:99:44:48:ad:ce:6e:d2:50:84:6f:da:5e:5b:
                    38:98:d1:68:3d:57:6b:c7:98:65:08:29:9a:46:28:
                    7d:f7:14:c4:98:29:d4:37:31:c0:4a:aa:e9:7e:76:
                    f4:9f:17:69:16:24:9f:8a:a6:ad:c8:4c:a1:ea:39:
                    35:81:17:27:84:d7:88:5f:bd:0f:c9:0f:6c:e8:45:
                    b4:da:96:a2:46:3b:f8:4b:c0:15:5f:c4:a7:08:ec:
                    12:0b:2d:72:3c:9b:b1:26:71:4a:c5:24:d2:9b:3e:
                    ac:5f:ab:17:87:62:d7:81:bc:04:56:d4:ae:89:e4:
                    bd:03:cb:8d:51:b0:67:0d:c1:d8:70:d1:51:99:ec:
                    38:80:a0:65:e7:84:fc:08:49:72:de:74:ac:90:02:
                    0d:78:a7:9f:a5:58:9e:c2:22:c3:5e:b2:7a:68:c1:
                    64:0f:3f:8c:17:21:aa:a3:1b:d1:03:d4:88:3f:ed:
                    a0:74:2e:4f:a9:a8:23:b4:f6:e8:84:f9:c9:4c:95:
                    70:af:39:fd:63:ea:2f:8a:38:48:cb:45:e9:87:d6:
                    f9:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:D6:E3:82:9F:65:06:71:77:A8:BC:22:64:F5:C0:68:CA:9C:3D:35
            X509v3 Authority Key Identifier:
                keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/B6FD7F8ABD9011F1B75EC3BBCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.129.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:bd:19:84:e8:10:c3:83:a0:82:7d:c4:b9:a7:de:e0:e9:7b:
         16:b8:5f:e9:98:92:f4:32:81:0c:57:16:08:ef:a0:58:43:33:
         0e:41:04:1a:0a:6c:41:6e:81:1a:fc:d0:77:31:8b:45:7d:e2:
         9f:84:ec:d1:ea:34:20:f8:fe:8f:b5:e4:2b:a1:dc:ed:5e:ad:
         25:9a:a8:fa:43:17:52:dc:6e:1f:43:27:8b:51:51:55:31:bf:
         34:63:3d:94:c5:0f:47:10:47:cc:83:21:9f:af:0c:93:87:62:
         4c:cb:7e:82:04:78:21:81:cb:44:58:cf:ff:cb:08:1a:aa:64:
         3a:bf:a7:ed:c4:87:f1:0c:75:14:e8:60:e1:d5:88:9e:c2:7e:
         c5:87:86:c7:49:27:22:03:e6:8f:40:3b:dc:f2:f1:71:17:41:
         6b:0e:ed:19:64:a9:86:5c:ce:26:dd:dd:d0:02:c0:33:a8:58:
         84:e8:87:77:fe:c9:41:80:97:ca:8c:26:f1:52:0f:b2:ba:36:
         01:8e:ff:74:f9:0d:05:cb:bb:97:6d:3d:4e:ca:af:62:99:25:
         7e:c2:c4:0a:87:54:fd:fa:08:e6:73:59:c5:d4:d3:36:64:29:
         10:24:36:b9:3c:7f:4b:c8:5b:e2:a0:3e:81:a0:d9:e5:de:19:
         8e:ea:c7:38
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICGjYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0yNjEwMDExMjA3NDNaFw0yODEwMDExMjA3NDNaMBgxFjAU
BgNVBAMTDTZhYmU0ZDEzLTJjNDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDZ0RHGJM1kT+aLmIfKzfkh+RusEG53OKnqWsFWYqF1Eehns/o6cirzfXW0
ynKfmURIrc5u0lCEb9peWziY0Wg9V2vHmGUIKZpGKH33FMSYKdQ3McBKqul+dvSf
F2kWJJ+Kpq3ITKHqOTWBFyeE14hfvQ/JD2zoRbTalqJGO/hLwBVfxKcI7BILLXI8
m7EmcUrFJNKbPqxfqxeHYteBvARW1K6J5L0Dy41RsGcNwdhw0VGZ7DiAoGXnhPwI
SXLedKyQAg14p5+lWJ7CIsNesnpowWQPP4wXIaqjG9ED1Ig/7aB0Lk+pqCO09uiE
+clMlXCvOf1j6i+KOEjLRemH1vlDAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU/tbj
gp9lBnF3qLwiZPXAaMqcPTUwHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4L0I2RkQ3RjhBQkQ5MDExRjFCNzVFQzNCQkNFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmgeswDQYJKoZIhvcNAQEL
BQADggEBAAa9GYToEMODoIJ9xLmn3uDpexa4X+mYkvQygQxXFgjvoFhDMw5BBBoK
bEFugRr80Hcxi0V94p+E7NHqNCD4/o+15Cuh3O1erSWaqPpDF1Lcbh9DJ4tRUVUx
vzRjPZTFD0cQR8yDIZ+vDJOHYkzLfoIEeCGBy0RYz//LCBqqZDq/p+3Eh/EMdRTo
YOHViJ7CfsWHhsdJJyID5o9AO9zy8XEXQWsO7RlkqYZczibd3dACwDOoWIToh3f+
yUGAl8qMJvFSD7K6NgGO/3T5DQXLu5dtPU7Kr2KZJX7CxAqHVP36COZzWcXU0zZk
KRAkNrk8f0vIW+KgPoGg2eXeGY7qxzg=
-----END CERTIFICATE-----