Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36217DF/54BDBB24E93811EF998A6679762E951A/49863F0CB41511F191BEB2E0CE1D38B0.roa
File:                     49863F0CB41511F191BEB2E0CE1D38B0.roa (raw, json)
Hash identifier:          3KaLgkxRIv9mKIz2T3rdWSyIuo9dJomjhxFuksEB0U4=
Subject key identifier:   A1:95:D5:EE:EE:08:AC:20:57:E5:7F:28:C7:E1:9D:A8:D3:39:12:8E
Certificate issuer:       /CN=F36217DFAF/serialNumber=384F6A3D0C8A91C5F2DF37A11F5A7B9C525BEE16
Certificate serial:       0260
Authority key identifier: 38:4F:6A:3D:0C:8A:91:C5:F2:DF:37:A1:1F:5A:7B:9C:52:5B:EE:16
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/OE9qPQyKkcXy3zehH1p7nFJb7hY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36217DF/54BDBB24E93811EF998A6679762E951A/49863F0CB41511F191BEB2E0CE1D38B0.roa
Signing time:             Sat 19 Sep 2026 10:31:35 +0000
ROA not before:           Sat 19 Sep 2026 10:31:31 +0000
ROA not after:            Wed 19 Sep 2035 10:31:31 +0000
asID:                     8881
IP address blocks:        102.134.28.0/24 maxlen: 24
                          102.134.29.0/24 maxlen: 24
                          102.134.30.0/24 maxlen: 24
                          102.134.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36217DF/54BDBB24E93811EF998A6679762E951A/OE9qPQyKkcXy3zehH1p7nFJb7hY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36217DF/54BDBB24E93811EF998A6679762E951A/OE9qPQyKkcXy3zehH1p7nFJb7hY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/OE9qPQyKkcXy3zehH1p7nFJb7hY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 22 Sep 2026 00:07:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 608 (0x260)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36217DFAF, serialNumber=384F6A3D0C8A91C5F2DF37A11F5A7B9C525BEE16
        Validity
            Not Before: Sep 19 10:31:31 2026 GMT
            Not After : Sep 19 10:31:31 2035 GMT
        Subject: CN=6aae6487-3f83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ef:53:e5:e3:19:7b:3a:1d:fe:18:c2:c5:39:
                    4f:cc:10:6b:96:49:d1:49:cb:09:f3:bc:81:4c:a5:
                    79:f6:c0:45:60:a9:e4:73:9a:37:2d:98:f6:28:67:
                    3f:19:f4:ae:1c:7f:7e:30:b7:d9:9f:79:ed:eb:5a:
                    49:fe:6d:41:09:68:d2:33:e5:64:e8:ca:eb:6c:25:
                    15:fb:c3:f9:06:49:b6:9b:73:38:02:ef:44:53:22:
                    ea:4d:52:a5:a4:ba:2a:0f:b5:0f:5a:fb:e2:57:1a:
                    ea:e1:a5:12:ef:fd:8f:be:25:f3:80:fd:9c:0b:df:
                    61:87:81:f1:d5:2e:a4:5d:70:44:eb:a7:91:0a:86:
                    46:1e:74:4e:12:f5:e0:38:46:ce:69:72:51:8a:42:
                    95:e3:61:1d:c8:90:c6:c2:8a:8c:77:1b:37:86:e4:
                    78:2b:3f:da:5f:89:a7:82:b7:02:27:7f:bf:e8:d5:
                    b2:03:5b:55:ff:65:08:1a:4f:ca:ac:f0:14:66:e7:
                    ca:25:c7:df:3b:9d:51:58:fa:a0:61:a7:4b:09:85:
                    8e:ef:1f:31:e2:70:24:41:90:6e:4b:8b:d3:5e:fe:
                    1c:05:c1:72:a8:47:77:77:e5:af:d7:9a:c9:0c:f1:
                    24:9b:ef:1f:5e:50:a8:c5:10:a8:b4:ca:17:ba:55:
                    ac:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:95:D5:EE:EE:08:AC:20:57:E5:7F:28:C7:E1:9D:A8:D3:39:12:8E
            X509v3 Authority Key Identifier:
                keyid:38:4F:6A:3D:0C:8A:91:C5:F2:DF:37:A1:1F:5A:7B:9C:52:5B:EE:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36217DF/54BDBB24E93811EF998A6679762E951A/OE9qPQyKkcXy3zehH1p7nFJb7hY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OE9qPQyKkcXy3zehH1p7nFJb7hY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36217DF/54BDBB24E93811EF998A6679762E951A/49863F0CB41511F191BEB2E0CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.134.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         52:22:89:09:82:51:43:2f:cc:50:47:af:17:83:b9:20:00:c0:
         54:14:e9:1d:4c:c7:a5:a5:db:e8:30:1d:7f:a8:e1:44:e1:05:
         ea:9a:9b:20:fd:39:d8:af:ab:ce:e9:53:65:36:fb:55:32:ac:
         e1:50:15:b8:5e:9d:c5:4c:42:af:ed:6f:cd:63:33:94:6a:30:
         ec:79:f0:80:d1:2d:5b:51:94:c7:5a:bd:94:52:65:9a:91:3b:
         fb:56:2a:d0:4f:13:0f:31:b5:a7:eb:23:dd:ac:5b:f9:cc:cc:
         c9:3c:e0:ac:82:11:25:4f:5c:70:26:64:11:72:83:9c:b1:e5:
         17:56:1e:75:54:78:5d:8f:ad:2b:09:80:a7:2d:d1:24:f4:79:
         97:9d:12:74:58:94:fd:09:ba:2e:d9:aa:b6:9c:fc:ce:66:10:
         c1:f9:2c:48:70:59:2d:63:99:d2:be:75:fd:e1:eb:35:81:0b:
         08:f9:62:78:4d:3d:26:dc:40:af:02:8c:0b:1a:02:ed:24:e9:
         64:33:22:62:f1:e9:5c:bb:ec:d8:af:61:1f:69:a4:c8:0a:6f:
         c2:75:03:16:b8:3e:e9:3b:c1:92:ba:69:9a:76:8e:28:b4:5d:
         f9:9a:21:d2:99:f1:01:ec:2b:9f:4f:fc:7d:40:59:f6:d1:8f:
         0c:2e:ee:7f
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICAmAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MjE3REZBRjExMC8GA1UEBRMoMzg0RjZBM0QwQzhBOTFDNUYyREYzN0ExMUY1QTdC
OUM1MjVCRUUxNjAeFw0yNjA5MTkxMDMxMzFaFw0zNTA5MTkxMDMxMzFaMBgxFjAU
BgNVBAMTDTZhYWU2NDg3LTNmODMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCc71Pl4xl7Oh3+GMLFOU/MEGuWSdFJywnzvIFMpXn2wEVgqeRzmjctmPYo
Zz8Z9K4cf34wt9mfee3rWkn+bUEJaNIz5WToyutsJRX7w/kGSbabczgC70RTIupN
UqWkuioPtQ9a++JXGurhpRLv/Y++JfOA/ZwL32GHgfHVLqRdcETrp5EKhkYedE4S
9eA4Rs5pclGKQpXjYR3IkMbCiox3GzeG5HgrP9pfiaeCtwInf7/o1bIDW1X/ZQga
T8qs8BRm58olx987nVFY+qBhp0sJhY7vHzHicCRBkG5Li9Ne/hwFwXKoR3d35a/X
mskM8SSb7x9eUKjFEKi0yhe6VaxVAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUoZXV
7u4IrCBX5X8ox+GdqNM5Eo4wHwYDVR0jBBgwFoAUOE9qPQyKkcXy3zehH1p7nFJb
7hYwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjIxN0RGLzU0QkRCQjI0RTkzODExRUY5OThBNjY3OTc2MkU5NTFBL09FOXFQ
UXlLa2NYeTN6ZWhIMXA3bkZKYjdoWS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL09FOXFQUXlLa2NYeTN6ZWhIMXA3bkZKYjdoWS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjIxN0RGLzU0QkRCQjI0RTkzODExRUY5OThBNjY3OTc2
MkU5NTFBLzQ5ODYzRjBDQjQxNTExRjE5MUJFQjJFMENFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJmhhwwDQYJKoZIhvcNAQEL
BQADggEBAFIiiQmCUUMvzFBHrxeDuSAAwFQU6R1Mx6Wl2+gwHX+o4UThBeqamyD9
Odivq87pU2U2+1UyrOFQFbhencVMQq/tb81jM5RqMOx58IDRLVtRlMdavZRSZZqR
O/tWKtBPEw8xtafrI92sW/nMzMk84KyCESVPXHAmZBFyg5yx5RdWHnVUeF2PrSsJ
gKct0ST0eZedEnRYlP0Jui7Zqrac/M5mEMH5LEhwWS1jmdK+df3h6zWBCwj5YnhN
PSbcQK8CjAsaAu0k6WQzImLx6Vy77NivYR9ppMgKb8J1Axa4Puk7wZK6aZp2jii0
XfmaIdKZ8QHsK59P/H1AWfbRjwwu7n8=
-----END CERTIFICATE-----