Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3634F1B/A133C32A299511F0B2F717B2DAE4EC9C/9A811C4CA87611F18EBA3FFDCE1D38B0.roa
File:                     9A811C4CA87611F18EBA3FFDCE1D38B0.roa (raw, json)
Hash identifier:          Q1yCsbO/4tb2uOcA3OtCZWlXERe+h8BChe2+rgdheZk=
Subject key identifier:   C4:6C:09:3D:4F:FA:22:E6:48:84:55:0D:45:58:6B:61:FC:18:01:D6
Certificate issuer:       /CN=F3634F1BAF/serialNumber=49B4D619095D9432AF6460853E147BEF5D1C48B0
Certificate serial:       0216
Authority key identifier: 49:B4:D6:19:09:5D:94:32:AF:64:60:85:3E:14:7B:EF:5D:1C:48:B0
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SbTWGQldlDKvZGCFPhR7710cSLA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3634F1B/A133C32A299511F0B2F717B2DAE4EC9C/9A811C4CA87611F18EBA3FFDCE1D38B0.roa
Signing time:             Fri 04 Sep 2026 15:37:58 +0000
ROA not before:           Fri 04 Sep 2026 15:37:54 +0000
ROA not after:            Thu 04 Sep 2036 15:37:54 +0000
asID:                     328939
IP address blocks:        102.218.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3634F1B/A133C32A299511F0B2F717B2DAE4EC9C/SbTWGQldlDKvZGCFPhR7710cSLA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3634F1B/A133C32A299511F0B2F717B2DAE4EC9C/SbTWGQldlDKvZGCFPhR7710cSLA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/SbTWGQldlDKvZGCFPhR7710cSLA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 534 (0x216)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3634F1BAF, serialNumber=49B4D619095D9432AF6460853E147BEF5D1C48B0
        Validity
            Not Before: Sep  4 15:37:54 2026 GMT
            Not After : Sep  4 15:37:54 2036 GMT
        Subject: CN=6a9ae5d6-fa61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:03:f7:e7:de:e0:cf:04:a5:76:00:e2:33:52:
                    b5:66:c7:8f:d7:cc:a6:ea:66:ad:7a:86:51:21:1d:
                    e7:da:f8:e9:01:53:4b:d8:9b:9a:ca:ee:e2:a4:d4:
                    0e:35:7f:7a:6f:85:72:e3:82:ac:bb:54:9b:cb:38:
                    4b:ab:4f:84:b5:8b:4f:6c:66:68:b3:6f:07:8d:a9:
                    10:d3:4e:f5:f5:47:33:aa:69:ff:0a:0c:59:8f:5f:
                    2e:c2:b9:ac:15:20:c1:b5:46:4f:d6:d0:97:38:2a:
                    1d:03:44:93:ed:f1:16:3c:92:51:44:e6:a1:89:0c:
                    19:47:52:fa:e8:e7:02:42:72:2c:8d:f2:ec:75:bc:
                    04:ba:0f:43:86:6c:a8:2d:d8:84:02:25:d5:46:08:
                    e4:a8:8e:aa:1b:a8:a1:31:c2:04:10:bd:b5:f6:9f:
                    38:c5:0e:05:c0:48:df:61:66:71:ef:2c:0f:cc:e3:
                    cd:bd:0d:a6:d7:b2:4b:77:bb:78:a5:a5:6b:80:c9:
                    2d:e9:e8:eb:12:57:1a:82:5b:e5:e9:78:de:0e:0f:
                    d2:d3:cb:d0:60:09:0c:57:31:cc:19:5d:d4:e1:4d:
                    7f:99:c6:8a:1b:66:7f:4c:49:d9:b8:ae:be:fd:c2:
                    3b:52:b0:50:e9:28:9f:62:c7:c9:b0:17:3b:8b:4c:
                    91:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:6C:09:3D:4F:FA:22:E6:48:84:55:0D:45:58:6B:61:FC:18:01:D6
            X509v3 Authority Key Identifier:
                keyid:49:B4:D6:19:09:5D:94:32:AF:64:60:85:3E:14:7B:EF:5D:1C:48:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3634F1B/A133C32A299511F0B2F717B2DAE4EC9C/SbTWGQldlDKvZGCFPhR7710cSLA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SbTWGQldlDKvZGCFPhR7710cSLA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3634F1B/A133C32A299511F0B2F717B2DAE4EC9C/9A811C4CA87611F18EBA3FFDCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.218.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d0:ca:da:dd:72:6d:c2:4d:45:bf:68:d3:15:ea:59:9e:e2:c7:
         ce:f6:27:a7:4c:df:01:ee:95:a9:37:8f:cf:f7:a2:0f:ed:3c:
         1c:f0:94:08:93:cb:0b:e0:7b:53:ab:2c:21:89:19:49:ff:6c:
         a3:cd:6a:97:2e:af:e0:01:85:e2:c5:de:ff:56:bc:b7:fe:0e:
         58:a8:47:33:9d:f0:66:da:07:dd:ea:1a:73:e5:f3:bb:9e:2c:
         c8:ff:e0:68:a0:de:52:c9:dd:fc:3a:87:b6:88:a7:d8:9d:dc:
         6b:66:3f:ed:af:26:cb:de:97:a2:26:0d:fe:1a:41:0f:d7:60:
         22:30:6e:87:7b:3e:f0:f3:2a:51:3c:ff:61:e3:cb:86:1d:96:
         a5:76:24:fe:8c:08:39:f5:94:5a:59:c1:52:bd:2e:ec:b7:59:
         cb:8d:5a:99:63:df:64:5f:c8:0a:23:8e:63:65:6f:a9:ba:93:
         d4:b9:bc:72:58:71:ff:d5:07:6c:e4:da:83:7c:33:ed:62:c7:
         96:3c:89:2d:ea:77:76:78:bf:6d:47:38:68:02:f1:2b:4c:3b:
         ac:f9:44:dc:2b:1d:25:4d:b8:69:de:41:50:e0:e8:07:87:4d:
         34:5f:44:2e:8a:fb:84:36:a8:3c:c7:1d:14:cd:88:6f:4b:fb:
         51:36:01:4b
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICAhYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MzRGMUJBRjExMC8GA1UEBRMoNDlCNEQ2MTkwOTVEOTQzMkFGNjQ2MDg1M0UxNDdC
RUY1RDFDNDhCMDAeFw0yNjA5MDQxNTM3NTRaFw0zNjA5MDQxNTM3NTRaMBgxFjAU
BgNVBAMTDTZhOWFlNWQ2LWZhNjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDeA/fn3uDPBKV2AOIzUrVmx4/XzKbqZq16hlEhHefa+OkBU0vYm5rK7uKk
1A41f3pvhXLjgqy7VJvLOEurT4S1i09sZmizbweNqRDTTvX1RzOqaf8KDFmPXy7C
uawVIMG1Rk/W0Jc4Kh0DRJPt8RY8klFE5qGJDBlHUvro5wJCciyN8ux1vAS6D0OG
bKgt2IQCJdVGCOSojqobqKExwgQQvbX2nzjFDgXASN9hZnHvLA/M4829DabXskt3
u3ilpWuAyS3p6OsSVxqCW+XpeN4OD9LTy9BgCQxXMcwZXdThTX+ZxoobZn9MSdm4
rr79wjtSsFDpKJ9ix8mwFzuLTJFnAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUxGwJ
PU/6IuZIhFUNRVhrYfwYAdYwHwYDVR0jBBgwFoAUSbTWGQldlDKvZGCFPhR7710c
SLAwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjM0RjFCL0ExMzNDMzJBMjk5NTExRjBCMkY3MTdCMkRBRTRFQzlDL1NiVFdH
UWxkbERLdlpHQ0ZQaFI3NzEwY1NMQS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NiVFdHUWxkbERLdlpHQ0ZQaFI3NzEwY1NMQS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjM0RjFCL0ExMzNDMzJBMjk5NTExRjBCMkY3MTdCMkRB
RTRFQzlDLzlBODExQzRDQTg3NjExRjE4RUJBM0ZGRENFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABm2lowDQYJKoZIhvcNAQEL
BQADggEBANDK2t1ybcJNRb9o0xXqWZ7ix872J6dM3wHulak3j8/3og/tPBzwlAiT
ywvge1OrLCGJGUn/bKPNapcur+ABheLF3v9WvLf+DlioRzOd8GbaB93qGnPl87ue
LMj/4Gig3lLJ3fw6h7aIp9id3GtmP+2vJsvel6ImDf4aQQ/XYCIwbod7PvDzKlE8
/2Hjy4YdlqV2JP6MCDn1lFpZwVK9Luy3WcuNWplj32RfyAojjmNlb6m6k9S5vHJY
cf/VB2zk2oN8M+1ix5Y8iS3qd3Z4v21HOGgC8StMO6z5RNwrHSVNuGneQVDg6AeH
TTRfRC6K+4Q2qDzHHRTNiG9L+1E2AUs=
-----END CERTIFICATE-----