Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3635607/08C590D2850111F1AB43C5F3CE1D38B0/C2AA97E2A06B11F182F27DD0CE1D38B0.roa
File:                     C2AA97E2A06B11F182F27DD0CE1D38B0.roa (raw, json)
Hash identifier:          GlOJq1fHsZ4GV6zQbXoqRpS1FHo5bcCFG99tr74pK6o=
Subject key identifier:   03:D5:37:36:2F:18:D1:96:3F:96:FB:A8:C7:CF:8C:C4:18:77:6F:E4
Certificate issuer:       /CN=F3635607AF/serialNumber=BD5E8BACFC46684D4DEAA68A230DAE4185589DAD
Certificate serial:       2F
Authority key identifier: BD:5E:8B:AC:FC:46:68:4D:4D:EA:A6:8A:23:0D:AE:41:85:58:9D:AD
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/vV6LrPxGaE1N6qaKIw2uQYVYna0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3635607/08C590D2850111F1AB43C5F3CE1D38B0/C2AA97E2A06B11F182F27DD0CE1D38B0.roa
Signing time:             Tue 25 Aug 2026 10:00:12 +0000
ROA not before:           Tue 25 Aug 2026 10:00:08 +0000
ROA not after:            Wed 31 Dec 2036 10:00:08 +0000
asID:                     14618
IP address blocks:        102.201.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3635607/08C590D2850111F1AB43C5F3CE1D38B0/vV6LrPxGaE1N6qaKIw2uQYVYna0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3635607/08C590D2850111F1AB43C5F3CE1D38B0/vV6LrPxGaE1N6qaKIw2uQYVYna0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/vV6LrPxGaE1N6qaKIw2uQYVYna0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 22 Sep 2026 00:07:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 47 (0x2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3635607AF, serialNumber=BD5E8BACFC46684D4DEAA68A230DAE4185589DAD
        Validity
            Not Before: Aug 25 10:00:08 2026 GMT
            Not After : Dec 31 10:00:08 2036 GMT
        Subject: CN=6a8d67ab-c37c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:6d:e8:6a:f6:b8:28:4b:0a:28:1a:79:23:c2:
                    4e:cd:24:e3:8b:22:10:bc:40:0c:2b:a8:bf:a3:b1:
                    c3:47:dd:ff:e0:fe:76:2d:fb:03:d9:a3:14:c9:85:
                    28:47:80:b5:00:f9:d6:33:4e:23:cc:2f:21:c9:18:
                    7f:10:8e:f6:19:e3:e8:b8:d8:a4:e6:17:b1:d7:95:
                    aa:5b:4f:77:db:34:96:cf:f8:70:73:14:a3:3a:0b:
                    c3:0f:57:4e:e6:18:77:b1:be:a7:31:2f:81:38:f8:
                    e1:b3:e8:70:f2:38:21:61:cf:96:59:c9:39:ab:8c:
                    e0:1f:be:04:cd:b3:c7:59:e9:f2:8e:f9:3e:d3:73:
                    b4:75:2f:4f:9c:d5:6a:30:4e:d1:78:c1:f2:8b:58:
                    a8:33:b9:c7:4d:83:c0:d0:8c:8e:c3:af:1b:0f:17:
                    2b:29:fe:3b:a6:d2:24:a4:21:c2:07:9f:a8:d6:78:
                    bc:67:64:8c:68:d7:4d:66:83:b8:84:9d:c0:f5:2c:
                    dd:5a:36:7d:a7:cf:d5:eb:28:2c:df:7a:14:96:0a:
                    c9:21:44:27:33:cf:b4:13:11:dc:dc:d0:e1:7a:57:
                    77:4a:3b:a1:d3:4c:85:b6:7e:13:9a:a8:c4:03:51:
                    0d:bc:5d:9e:78:86:1c:04:ed:3e:f3:4a:2c:a8:68:
                    3e:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:D5:37:36:2F:18:D1:96:3F:96:FB:A8:C7:CF:8C:C4:18:77:6F:E4
            X509v3 Authority Key Identifier:
                keyid:BD:5E:8B:AC:FC:46:68:4D:4D:EA:A6:8A:23:0D:AE:41:85:58:9D:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3635607/08C590D2850111F1AB43C5F3CE1D38B0/vV6LrPxGaE1N6qaKIw2uQYVYna0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/vV6LrPxGaE1N6qaKIw2uQYVYna0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3635607/08C590D2850111F1AB43C5F3CE1D38B0/C2AA97E2A06B11F182F27DD0CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.201.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:f0:00:55:e0:35:9e:b4:42:2a:49:a8:2a:7a:0c:0d:c3:f0:
         78:e5:73:46:af:c3:14:1a:16:86:ff:06:f3:ab:b0:d6:0d:0a:
         d6:67:5c:fc:77:d5:23:05:ad:88:09:78:08:61:37:83:2e:dd:
         05:cf:b4:03:f8:7d:2f:5e:c0:61:4c:35:82:31:67:e4:c1:6e:
         02:17:10:1d:65:af:36:cc:9e:15:55:b2:6b:f2:6a:f9:c8:ad:
         8d:a5:a2:01:20:68:86:af:41:1f:07:ee:76:64:fe:e3:57:6b:
         20:cf:c1:ee:bf:73:55:1f:c1:79:87:d0:c7:ab:8b:2f:e7:ea:
         e3:ea:39:8c:a5:fe:b4:20:38:6d:f6:32:76:0d:24:7f:e2:07:
         7b:1b:42:3f:ff:61:5e:0a:da:ca:28:46:dd:55:1e:ee:c4:70:
         ec:2c:1e:29:9b:4a:15:04:5f:ab:ef:c7:54:5b:d5:5c:3e:85:
         86:38:54:15:31:96:ca:6a:0b:0a:8f:35:eb:45:dc:d4:0b:9c:
         e9:12:ef:b3:9b:cb:4c:b5:b3:e2:61:95:02:71:47:b4:91:13:
         aa:22:6b:88:76:f7:e9:f4:aa:7a:8f:7e:58:ec:93:b9:5d:e1:
         73:f4:39:0f:35:02:77:a4:07:01:ed:2f:e9:a4:5a:77:55:d2:
         cb:f2:d8:60
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBLzANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzYz
NTYwN0FGMTEwLwYDVQQFEyhCRDVFOEJBQ0ZDNDY2ODRENERFQUE2OEEyMzBEQUU0
MTg1NTg5REFEMB4XDTI2MDgyNTEwMDAwOFoXDTM2MTIzMTEwMDAwOFowGDEWMBQG
A1UEAxMNNmE4ZDY3YWItYzM3YzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAM9t6Gr2uChLCigaeSPCTs0k44siELxADCuov6Oxw0fd/+D+di37A9mjFMmF
KEeAtQD51jNOI8wvIckYfxCO9hnj6LjYpOYXsdeVqltPd9s0ls/4cHMUozoLww9X
TuYYd7G+pzEvgTj44bPocPI4IWHPllnJOauM4B++BM2zx1np8o75PtNztHUvT5zV
ajBO0XjB8otYqDO5x02DwNCMjsOvGw8XKyn+O6bSJKQhwgefqNZ4vGdkjGjXTWaD
uISdwPUs3Vo2fafP1esoLN96FJYKySFEJzPPtBMR3NzQ4XpXd0o7odNMhbZ+E5qo
xANRDbxdnniGHATtPvNKLKhoPp8CAwEAAaOCAqUwggKhMB0GA1UdDgQWBBQD1Tc2
LxjRlj+W+6jHz4zEGHdv5DAfBgNVHSMEGDAWgBS9Xous/EZoTU3qpoojDa5BhVid
rTAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2MzU2MDcvMDhDNTkwRDI4NTAxMTFGMUFCNDNDNUYzQ0UxRDM4QjAvdlY2THJQ
eEdhRTFONnFhS0l3MnVRWVZZbmEwLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvdlY2THJQeEdhRTFONnFhS0l3MnVRWVZZbmEwLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MzU2MDcvMDhDNTkwRDI4NTAxMTFGMUFCNDNDNUYzQ0Ux
RDM4QjAvQzJBQTk3RTJBMDZCMTFGMTgyRjI3REQwQ0UxRDM4QjAucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGbJ9DANBgkqhkiG9w0BAQsF
AAOCAQEAOfAAVeA1nrRCKkmoKnoMDcPweOVzRq/DFBoWhv8G86uw1g0K1mdc/HfV
IwWtiAl4CGE3gy7dBc+0A/h9L17AYUw1gjFn5MFuAhcQHWWvNsyeFVWya/Jq+cit
jaWiASBohq9BHwfudmT+41drIM/B7r9zVR/BeYfQx6uLL+fq4+o5jKX+tCA4bfYy
dg0kf+IHextCP/9hXgrayihG3VUe7sRw7CweKZtKFQRfq+/HVFvVXD6FhjhUFTGW
ymoLCo8160Xc1Auc6RLvs5vLTLWz4mGVAnFHtJETqiJriHb36fSqeo9+WOyTuV3h
c/Q5DzUCd6QHAe0v6aRad1XSy/LYYA==
-----END CERTIFICATE-----