Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36232DE/EDEE9450D2EF11EDA5921BB9F1222468/79332DB2B47111F1A0C7E5AACE1D38B0.roa
File:                     79332DB2B47111F1A0C7E5AACE1D38B0.roa (raw, json)
Hash identifier:          V+qF8Bs+f3rYvFL4MowkNDzEgkH+q/QCdxPuGsficzw=
Subject key identifier:   6A:53:B9:88:A8:3E:47:2E:59:F8:3C:D8:7C:CD:35:7F:2D:45:01:02
Certificate issuer:       /CN=F36232DEAF/serialNumber=1080ACBECDCA1604B666C08B90BDDBEE585D2CF9
Certificate serial:       0522
Authority key identifier: 10:80:AC:BE:CD:CA:16:04:B6:66:C0:8B:90:BD:DB:EE:58:5D:2C:F9
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/EICsvs3KFgS2ZsCLkL3b7lhdLPk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36232DE/EDEE9450D2EF11EDA5921BB9F1222468/79332DB2B47111F1A0C7E5AACE1D38B0.roa
Signing time:             Sat 19 Sep 2026 21:31:29 +0000
ROA not before:           Sat 19 Sep 2026 21:31:24 +0000
ROA not after:            Tue 19 Sep 2028 21:31:24 +0000
asID:                     328539
IP address blocks:        102.209.252.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36232DE/EDEE9450D2EF11EDA5921BB9F1222468/EICsvs3KFgS2ZsCLkL3b7lhdLPk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36232DE/EDEE9450D2EF11EDA5921BB9F1222468/EICsvs3KFgS2ZsCLkL3b7lhdLPk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/EICsvs3KFgS2ZsCLkL3b7lhdLPk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1314 (0x522)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36232DEAF, serialNumber=1080ACBECDCA1604B666C08B90BDDBEE585D2CF9
        Validity
            Not Before: Sep 19 21:31:24 2026 GMT
            Not After : Sep 19 21:31:24 2028 GMT
        Subject: CN=6aaeff30-d117
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:38:c7:a1:eb:ce:b8:e9:cb:d7:69:02:35:5a:
                    f9:82:ce:83:a8:c7:32:90:5a:a5:db:f9:85:86:84:
                    c5:67:ab:26:cf:41:7b:5e:e1:e2:7d:8d:3d:cb:cd:
                    9a:1f:af:06:de:70:d1:80:4a:01:7f:6c:8e:a8:51:
                    1a:ce:ef:f5:45:79:12:cc:8c:7c:36:4d:d8:0d:95:
                    cf:1e:d2:a7:cb:ec:07:0a:02:b8:24:bb:d5:c2:69:
                    33:e9:3d:c0:e2:01:71:74:82:c6:72:53:c6:a2:f8:
                    26:7b:28:77:8f:99:ea:0b:c2:f1:be:47:98:77:73:
                    73:e0:47:96:90:b8:b4:69:c0:13:31:70:d2:ca:40:
                    0e:14:f2:9b:b4:72:75:e7:38:eb:23:f7:b8:ba:99:
                    5a:94:c7:ac:35:93:3d:e7:52:53:29:3a:56:95:0e:
                    24:f9:35:fa:5e:c0:b0:b9:68:bf:7e:0e:cd:c9:80:
                    c1:2a:ba:a0:4b:19:90:a7:12:95:04:35:c5:70:da:
                    61:b4:9b:b4:de:f0:31:a8:3e:bb:1c:9d:6d:91:e7:
                    e5:8c:9e:e0:0f:48:4b:b9:23:a3:11:e0:40:69:e8:
                    6f:c9:80:05:bd:fb:7b:d6:30:fd:0f:ab:7f:64:3a:
                    2a:0a:55:48:1f:a1:d4:f5:c3:4d:57:cc:15:e9:bb:
                    02:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:53:B9:88:A8:3E:47:2E:59:F8:3C:D8:7C:CD:35:7F:2D:45:01:02
            X509v3 Authority Key Identifier:
                keyid:10:80:AC:BE:CD:CA:16:04:B6:66:C0:8B:90:BD:DB:EE:58:5D:2C:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36232DE/EDEE9450D2EF11EDA5921BB9F1222468/EICsvs3KFgS2ZsCLkL3b7lhdLPk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/EICsvs3KFgS2ZsCLkL3b7lhdLPk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36232DE/EDEE9450D2EF11EDA5921BB9F1222468/79332DB2B47111F1A0C7E5AACE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.209.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3a:2f:57:62:50:a9:0d:d3:5c:36:96:72:ce:da:4f:6c:41:cb:
         e4:a6:df:11:ce:58:d5:b0:9f:69:15:c9:1d:0c:e1:a8:89:94:
         78:0d:c3:9e:d6:0e:ca:b6:f5:51:3a:6e:48:91:ce:d0:62:35:
         b5:36:87:95:6a:12:dd:8a:47:a2:a8:49:22:b4:e6:ea:2c:04:
         59:c2:ad:16:f4:dd:a7:54:c2:1c:c7:ca:62:6f:34:05:39:bd:
         ce:50:1d:4a:3a:fb:dd:9b:22:3e:2c:ca:86:86:de:47:8d:55:
         9e:e8:11:73:95:76:78:4c:7e:d6:2e:fb:57:a2:48:93:58:50:
         ec:0b:fa:eb:34:3a:66:c2:7e:88:f5:f9:74:ab:43:a0:22:b8:
         25:64:fc:b9:17:34:73:b8:db:f4:cb:1f:f4:cc:77:26:a2:ed:
         89:74:83:49:66:38:e7:57:2c:0c:0e:51:4a:a6:65:5f:bf:fb:
         04:d7:4e:fd:4e:e8:cc:47:0a:d1:b6:40:3b:21:ec:06:f3:4b:
         56:c9:7a:c6:d8:1f:20:96:fa:c8:6e:82:96:cb:aa:6c:29:4c:
         31:55:a1:52:62:06:9f:46:a2:9b:b9:26:0f:2a:c4:46:a1:0f:
         3c:c5:e1:bd:6b:2a:3f:30:a0:ce:4a:c6:9c:56:7d:e5:92:10:
         34:35:23:eb
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBSIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MjMyREVBRjExMC8GA1UEBRMoMTA4MEFDQkVDRENBMTYwNEI2NjZDMDhCOTBCRERC
RUU1ODVEMkNGOTAeFw0yNjA5MTkyMTMxMjRaFw0yODA5MTkyMTMxMjRaMBgxFjAU
BgNVBAMTDTZhYWVmZjMwLWQxMTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC7OMeh68646cvXaQI1WvmCzoOoxzKQWqXb+YWGhMVnqybPQXte4eJ9jT3L
zZofrwbecNGASgF/bI6oURrO7/VFeRLMjHw2TdgNlc8e0qfL7AcKArgku9XCaTPp
PcDiAXF0gsZyU8ai+CZ7KHePmeoLwvG+R5h3c3PgR5aQuLRpwBMxcNLKQA4U8pu0
cnXnOOsj97i6mVqUx6w1kz3nUlMpOlaVDiT5NfpewLC5aL9+Ds3JgMEquqBLGZCn
EpUENcVw2mG0m7Te8DGoPrscnW2R5+WMnuAPSEu5I6MR4EBp6G/JgAW9+3vWMP0P
q39kOioKVUgfodT1w01XzBXpuwKHAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUalO5
iKg+Ry5Z+DzYfM01fy1FAQIwHwYDVR0jBBgwFoAUEICsvs3KFgS2ZsCLkL3b7lhd
LPkwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjIzMkRFL0VERUU5NDUwRDJFRjExRURBNTkyMUJCOUYxMjIyNDY4L0VJQ3N2
czNLRmdTMlpzQ0xrTDNiN2xoZExQay5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0VJQ3N2czNLRmdTMlpzQ0xrTDNiN2xoZExQay5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjIzMkRFL0VERUU5NDUwRDJFRjExRURBNTkyMUJCOUYx
MjIyNDY4Lzc5MzMyREIyQjQ3MTExRjFBMEM3RTVBQUNFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJm0fwwDQYJKoZIhvcNAQEL
BQADggEBADovV2JQqQ3TXDaWcs7aT2xBy+Sm3xHOWNWwn2kVyR0M4aiJlHgNw57W
Dsq29VE6bkiRztBiNbU2h5VqEt2KR6KoSSK05uosBFnCrRb03adUwhzHymJvNAU5
vc5QHUo6+92bIj4syoaG3keNVZ7oEXOVdnhMftYu+1eiSJNYUOwL+us0OmbCfoj1
+XSrQ6AiuCVk/LkXNHO42/TLH/TMdyai7Yl0g0lmOOdXLAwOUUqmZV+/+wTXTv1O
6MxHCtG2QDsh7AbzS1bJesbYHyCW+shugpbLqmwpTDFVoVJiBp9Gopu5Jg8qxEah
DzzF4b1rKj8woM5KxpxWfeWSEDQ1I+s=
-----END CERTIFICATE-----