Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36232DE/EDEE9450D2EF11EDA5921BB9F1222468/86281B2AB36F11F1B87A2DEDCE1D38B0.roa
File:                     86281B2AB36F11F1B87A2DEDCE1D38B0.roa (raw, json)
Hash identifier:          cbXPI0FUv0xCXJS63OK4UgyAStuoTapolhCTnDvwKAM=
Subject key identifier:   AF:68:18:BC:46:BC:E0:D8:9B:55:09:96:A8:08:9F:07:4D:C4:2B:61
Certificate issuer:       /CN=F36232DEAF/serialNumber=1080ACBECDCA1604B666C08B90BDDBEE585D2CF9
Certificate serial:       051F
Authority key identifier: 10:80:AC:BE:CD:CA:16:04:B6:66:C0:8B:90:BD:DB:EE:58:5D:2C:F9
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/EICsvs3KFgS2ZsCLkL3b7lhdLPk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36232DE/EDEE9450D2EF11EDA5921BB9F1222468/86281B2AB36F11F1B87A2DEDCE1D38B0.roa
Signing time:             Fri 18 Sep 2026 14:45:00 +0000
ROA not before:           Fri 18 Sep 2026 14:44:56 +0000
ROA not after:            Mon 18 Sep 2028 14:44:56 +0000
asID:                     328539
IP address blocks:        102.38.0.0/19 maxlen: 24
                          102.213.228.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36232DE/EDEE9450D2EF11EDA5921BB9F1222468/EICsvs3KFgS2ZsCLkL3b7lhdLPk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36232DE/EDEE9450D2EF11EDA5921BB9F1222468/EICsvs3KFgS2ZsCLkL3b7lhdLPk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/EICsvs3KFgS2ZsCLkL3b7lhdLPk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 03:21:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1311 (0x51f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36232DEAF, serialNumber=1080ACBECDCA1604B666C08B90BDDBEE585D2CF9
        Validity
            Not Before: Sep 18 14:44:56 2026 GMT
            Not After : Sep 18 14:44:56 2028 GMT
        Subject: CN=6aad4e6c-ff69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:1d:bd:9d:c1:c9:55:66:e8:f8:ec:c8:99:ca:
                    24:52:ed:59:c8:dd:fb:f5:ca:e9:07:3e:5b:c3:89:
                    dd:33:8f:95:45:fe:b9:6d:f8:8f:68:bb:4e:04:d5:
                    be:83:9e:24:8b:de:90:ff:98:53:8b:54:77:de:bb:
                    df:aa:aa:98:d4:8f:e1:44:15:f7:cc:d0:2d:65:d7:
                    53:c3:f1:2c:b8:4c:10:4a:4a:bb:ad:94:10:27:2a:
                    bf:17:48:52:7b:ab:fa:95:1a:53:67:db:3a:8d:a1:
                    59:5f:4d:82:53:8c:69:f0:58:98:6a:f4:64:c2:e6:
                    39:2f:f6:0b:50:7f:ba:94:50:a3:fe:97:19:3d:98:
                    fb:50:62:f2:63:c3:68:5a:f1:01:f7:5d:a5:42:be:
                    9d:5f:a6:9a:d2:f8:2c:f7:6b:b1:9f:e5:d7:2a:e7:
                    ae:2c:03:4c:a1:ca:91:f6:98:7a:af:6b:65:d5:fa:
                    68:fc:20:00:c6:f6:b1:97:14:3f:d0:68:de:bb:5d:
                    1a:7d:12:26:30:09:9c:04:19:db:5e:af:c5:2b:ad:
                    eb:89:b9:30:74:2c:f9:8e:8d:a7:ef:fd:af:30:cd:
                    1d:c1:89:9b:16:15:63:b6:2d:54:11:b8:6d:85:1c:
                    a9:70:bc:eb:75:9a:68:9d:f3:02:81:56:ad:d0:1c:
                    8f:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:68:18:BC:46:BC:E0:D8:9B:55:09:96:A8:08:9F:07:4D:C4:2B:61
            X509v3 Authority Key Identifier:
                keyid:10:80:AC:BE:CD:CA:16:04:B6:66:C0:8B:90:BD:DB:EE:58:5D:2C:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36232DE/EDEE9450D2EF11EDA5921BB9F1222468/EICsvs3KFgS2ZsCLkL3b7lhdLPk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/EICsvs3KFgS2ZsCLkL3b7lhdLPk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36232DE/EDEE9450D2EF11EDA5921BB9F1222468/86281B2AB36F11F1B87A2DEDCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.38.0.0/19
                  102.213.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         76:eb:e3:fe:56:6b:8a:30:68:bc:cb:d7:ad:11:c0:7c:1a:98:
         9e:84:4b:01:a8:04:81:63:1c:3a:ea:60:31:7f:e7:cf:4f:33:
         91:4e:ca:fe:9b:c4:89:5c:85:e1:b5:55:4b:4b:09:82:10:fe:
         3d:0b:fa:62:af:37:1f:42:03:7b:79:8e:22:d1:6f:dc:96:63:
         46:96:f4:25:e0:35:39:47:00:7b:d3:32:2d:40:15:12:5b:17:
         e9:40:44:19:a5:d3:68:fa:75:14:ec:99:2a:fa:ac:31:4b:18:
         b6:1c:46:52:ce:6a:b9:27:13:49:19:bf:2e:c2:94:c2:54:7c:
         74:ff:32:5b:df:ea:eb:ab:af:47:12:ee:80:43:9d:df:0b:02:
         fc:a9:96:d0:05:c4:41:81:03:09:f8:be:a3:0e:83:5f:32:6c:
         b1:90:3e:c7:bf:a9:08:0b:96:c2:eb:98:36:bb:52:ab:f4:ba:
         49:bc:40:7b:cc:e5:8b:f4:07:71:78:7d:9d:2b:9a:99:65:d1:
         eb:9e:1e:b3:d7:0b:a1:13:64:97:11:36:c2:7d:e8:c1:05:d6:
         b8:d4:b9:64:e4:59:de:1a:36:34:f9:fc:95:82:05:08:22:76:
         ea:3c:87:33:54:e3:f3:ee:cd:d1:20:41:59:e7:0c:27:89:20:
         cf:0c:c3:b0
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgICBR8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MjMyREVBRjExMC8GA1UEBRMoMTA4MEFDQkVDRENBMTYwNEI2NjZDMDhCOTBCRERC
RUU1ODVEMkNGOTAeFw0yNjA5MTgxNDQ0NTZaFw0yODA5MTgxNDQ0NTZaMBgxFjAU
BgNVBAMTDTZhYWQ0ZTZjLWZmNjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDeHb2dwclVZuj47MiZyiRS7VnI3fv1yukHPlvDid0zj5VF/rlt+I9ou04E
1b6DniSL3pD/mFOLVHfeu9+qqpjUj+FEFffM0C1l11PD8Sy4TBBKSrutlBAnKr8X
SFJ7q/qVGlNn2zqNoVlfTYJTjGnwWJhq9GTC5jkv9gtQf7qUUKP+lxk9mPtQYvJj
w2ha8QH3XaVCvp1fpprS+Cz3a7Gf5dcq564sA0yhypH2mHqva2XV+mj8IADG9rGX
FD/QaN67XRp9EiYwCZwEGdter8UrreuJuTB0LPmOjafv/a8wzR3BiZsWFWO2LVQR
uG2FHKlwvOt1mmid8wKBVq3QHI+/AgMBAAGjggKrMIICpzAdBgNVHQ4EFgQUr2gY
vEa84NibVQmWqAifB03EK2EwHwYDVR0jBBgwFoAUEICsvs3KFgS2ZsCLkL3b7lhd
LPkwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjIzMkRFL0VERUU5NDUwRDJFRjExRURBNTkyMUJCOUYxMjIyNDY4L0VJQ3N2
czNLRmdTMlpzQ0xrTDNiN2xoZExQay5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0VJQ3N2czNLRmdTMlpzQ0xrTDNiN2xoZExQay5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjIzMkRFL0VERUU5NDUwRDJFRjExRURBNTkyMUJCOUYx
MjIyNDY4Lzg2MjgxQjJBQjM2RjExRjFCODdBMkRFRENFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBAVmJgADBAJm1eQwDQYJKoZI
hvcNAQELBQADggEBAHbr4/5Wa4owaLzL160RwHwamJ6ESwGoBIFjHDrqYDF/589P
M5FOyv6bxIlcheG1VUtLCYIQ/j0L+mKvNx9CA3t5jiLRb9yWY0aW9CXgNTlHAHvT
Mi1AFRJbF+lARBml02j6dRTsmSr6rDFLGLYcRlLOarknE0kZvy7ClMJUfHT/Mlvf
6uurr0cS7oBDnd8LAvypltAFxEGBAwn4vqMOg18ybLGQPse/qQgLlsLrmDa7Uqv0
ukm8QHvM5Yv0B3F4fZ0rmpll0eueHrPXC6ETZJcRNsJ96MEF1rjUuWTkWd4aNjT5
/JWCBQgiduo8hzNU4/PuzdEgQVnnDCeJIM8Mw7A=
-----END CERTIFICATE-----