Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/B7FCBF7ECFA911F1BF8615A6CE1D38B0.roa
File:                     B7FCBF7ECFA911F1BF8615A6CE1D38B0.roa (raw, json)
Hash identifier:          dC3iUFV8LccQ2y5aTUJZ0t+8oPre73kwvr40WEM/cjY=
Subject key identifier:   C3:05:EB:94:63:FB:49:41:F1:58:A9:AA:D4:17:37:A3:DC:3D:B9:B9
Certificate issuer:       /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial:       1AA9
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/B7FCBF7ECFA911F1BF8615A6CE1D38B0.roa
Signing time:             Sat 24 Oct 2026 12:52:07 +0000
ROA not before:           Sat 24 Oct 2026 12:52:01 +0000
ROA not after:            Tue 24 Oct 2028 12:52:01 +0000
asID:                     834
IP address blocks:        102.129.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 00:08:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6825 (0x1aa9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
        Validity
            Not Before: Oct 24 12:52:01 2026 GMT
            Not After : Oct 24 12:52:01 2028 GMT
        Subject: CN=6adca9f7-8533
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:29:70:cf:e3:e3:72:b7:d6:55:9d:02:bc:88:
                    50:c3:64:13:bf:60:c7:f0:b0:ca:16:08:e6:2f:56:
                    25:28:c1:3e:c0:a1:5f:5a:d8:15:44:aa:8b:7c:08:
                    a8:58:13:37:96:d9:ef:dd:db:19:92:dc:7d:e7:70:
                    87:57:37:81:d7:ef:fe:c4:e7:22:38:02:13:e4:0e:
                    f1:81:0b:f8:3f:58:c3:48:4f:1c:20:90:24:33:6a:
                    92:15:8b:7e:69:ac:59:af:7a:c8:52:c9:2d:78:ed:
                    4a:f6:36:c6:af:36:6b:f4:3d:a2:c4:f6:fb:55:ce:
                    62:b6:e2:57:a5:82:0d:cb:2d:81:f9:be:eb:53:e0:
                    b8:20:9d:09:d3:27:2d:ea:13:7d:6a:03:86:c3:13:
                    32:da:93:71:0d:c2:a5:28:8b:91:e5:aa:ee:89:cd:
                    a4:6d:32:18:bc:48:ad:b5:b4:d7:62:f6:19:35:ce:
                    5e:96:20:92:91:b5:b3:ec:6a:02:72:d1:cb:5b:8e:
                    f7:36:b4:e1:19:08:f6:4a:3d:d9:d7:a6:8c:b3:e6:
                    04:53:94:37:78:c2:e6:32:fa:e8:48:ee:f7:b0:0f:
                    09:3f:05:8e:14:05:12:e4:ad:ac:8a:d6:77:91:c8:
                    ca:f6:c2:ee:96:22:29:79:1e:cb:fa:ad:dc:e1:36:
                    e7:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:05:EB:94:63:FB:49:41:F1:58:A9:AA:D4:17:37:A3:DC:3D:B9:B9
            X509v3 Authority Key Identifier:
                keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/B7FCBF7ECFA911F1BF8615A6CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.129.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c4:92:7b:42:3c:23:ff:a3:2e:f6:89:d3:45:dd:b7:66:3c:66:
         60:13:e3:73:db:ec:8b:a3:97:eb:3a:e1:6e:22:57:2e:be:b9:
         04:d8:c5:ea:d8:38:6e:ea:df:6c:ab:10:89:ae:b9:ea:82:66:
         06:d3:ff:7a:1b:63:e6:39:ef:bb:d7:0e:dd:9c:f8:ce:5e:f5:
         20:67:ac:e4:71:31:f8:6e:a5:92:6d:ef:d5:f8:5a:40:3b:68:
         a5:42:82:a1:54:c6:89:56:b9:1b:07:aa:26:64:7f:20:db:ed:
         c8:84:5e:55:31:d7:97:2f:90:fc:8e:2c:0e:58:eb:f8:d8:6e:
         70:87:7f:dc:f6:2c:8d:34:de:24:46:6b:8c:56:e2:6f:a7:7b:
         b8:f4:8f:d0:a3:cf:4d:ca:a7:70:e1:30:eb:6c:76:b0:c4:c8:
         11:7f:1b:0d:75:23:f0:db:07:75:fa:0f:b2:39:40:21:c9:4c:
         46:d8:0c:3d:1d:95:c6:74:eb:14:e2:49:bc:f1:da:42:7a:b3:
         82:26:00:51:8e:81:97:96:a6:f4:25:aa:5b:7c:d9:b0:03:70:
         a2:06:fe:03:39:5a:3a:41:d1:26:a0:f6:7e:0a:a4:ee:d0:45:
         2e:cf:f2:85:ea:aa:42:1e:86:b7:60:81:f7:af:17:dc:3d:f6:
         a8:16:f3:ae
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICGqkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0yNjEwMjQxMjUyMDFaFw0yODEwMjQxMjUyMDFaMBgxFjAU
BgNVBAMTDTZhZGNhOWY3LTg1MzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDEKXDP4+Nyt9ZVnQK8iFDDZBO/YMfwsMoWCOYvViUowT7AoV9a2BVEqot8
CKhYEzeW2e/d2xmS3H3ncIdXN4HX7/7E5yI4AhPkDvGBC/g/WMNITxwgkCQzapIV
i35prFmveshSyS147Ur2NsavNmv0PaLE9vtVzmK24lelgg3LLYH5vutT4LggnQnT
Jy3qE31qA4bDEzLak3ENwqUoi5Hlqu6JzaRtMhi8SK21tNdi9hk1zl6WIJKRtbPs
agJy0ctbjvc2tOEZCPZKPdnXpoyz5gRTlDd4wuYy+uhI7vewDwk/BY4UBRLkrayK
1neRyMr2wu6WIil5Hsv6rdzhNudFAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUwwXr
lGP7SUHxWKmq1Bc3o9w9ubkwHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4L0I3RkNCRjdFQ0ZBOTExRjFCRjg2MTVBNkNFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmgfwwDQYJKoZIhvcNAQEL
BQADggEBAMSSe0I8I/+jLvaJ00Xdt2Y8ZmAT43Pb7Iujl+s64W4iVy6+uQTYxerY
OG7q32yrEImuueqCZgbT/3obY+Y577vXDt2c+M5e9SBnrORxMfhupZJt79X4WkA7
aKVCgqFUxolWuRsHqiZkfyDb7ciEXlUx15cvkPyOLA5Y6/jYbnCHf9z2LI003iRG
a4xW4m+ne7j0j9Cjz03Kp3DhMOtsdrDEyBF/Gw11I/DbB3X6D7I5QCHJTEbYDD0d
lcZ06xTiSbzx2kJ6s4ImAFGOgZeWpvQlqlt82bADcKIG/gM5WjpB0Sag9n4KpO7Q
RS7P8oXqqkIehrdggfevF9w99qgW864=
-----END CERTIFICATE-----