Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/21129F90B19311F1B9ABB6B7CE1D38B0.roa
File:                     21129F90B19311F1B9ABB6B7CE1D38B0.roa (raw, json)
Hash identifier:          VhI4usp4njPZ2423cVJ+lDfaDZyz+DQsqqtxkpzWw9k=
Subject key identifier:   8C:4F:D5:F0:1A:EA:00:40:2F:A8:A7:28:A0:C4:17:03:C9:32:7A:69
Certificate issuer:       /CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Certificate serial:       0A35
Authority key identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/21129F90B19311F1B9ABB6B7CE1D38B0.roa
Signing time:             Wed 16 Sep 2026 05:54:50 +0000
ROA not before:           Wed 16 Sep 2026 05:54:47 +0000
ROA not after:            Fri 16 Oct 2026 05:54:47 +0000
asID:                     0
IP address blocks:        102.177.160.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 02:03:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2613 (0xa35)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367DFA4AF, serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
        Validity
            Not Before: Sep 16 05:54:47 2026 GMT
            Not After : Oct 16 05:54:47 2026 GMT
        Subject: CN=6aaa2f2a-eae2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:8d:50:ad:11:84:73:30:bc:c4:71:70:c3:c2:
                    1a:fd:9d:f3:0d:a8:66:d6:e9:82:aa:be:5f:4d:c2:
                    8f:a1:6d:cb:37:0d:2a:20:04:df:92:d2:e3:25:2f:
                    e9:ac:59:8f:8d:0f:fe:69:f8:a9:02:df:71:01:07:
                    41:65:c8:5a:28:f7:62:f6:28:fc:db:1b:97:91:0c:
                    04:db:e1:a5:38:b1:09:d7:4a:ea:0f:ed:ae:a7:41:
                    51:92:80:16:36:64:29:79:16:7c:41:d8:e2:97:bb:
                    99:d4:da:32:78:31:cc:de:f8:bf:c7:a4:c9:d8:b3:
                    89:09:63:a3:57:5b:ae:6d:da:37:dd:21:ca:3a:a0:
                    7b:bf:67:0b:f7:ce:f2:af:66:bf:37:68:2d:0e:cd:
                    cf:56:9d:28:6a:3d:12:f6:02:10:c2:99:2b:02:21:
                    17:47:32:03:d1:4b:d1:05:a6:dd:a1:09:0f:2a:6a:
                    1d:09:e4:80:60:2e:c2:8d:a0:fe:dc:b7:6a:81:d8:
                    83:f3:fd:31:35:65:d7:85:21:e4:b9:98:21:9b:ba:
                    6f:63:13:2e:c2:d9:73:b6:7b:c9:75:d2:47:15:d0:
                    70:1a:fd:a3:d0:38:d6:05:9d:53:51:f6:92:35:50:
                    17:de:2b:ed:3c:10:48:ad:69:ba:a3:ff:db:66:e1:
                    50:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:4F:D5:F0:1A:EA:00:40:2F:A8:A7:28:A0:C4:17:03:C9:32:7A:69
            X509v3 Authority Key Identifier:
                keyid:97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/21129F90B19311F1B9ABB6B7CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.177.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         25:d6:31:c1:ab:72:2f:74:09:b2:09:4d:39:6d:6d:63:ea:e5:
         86:6d:a3:13:3f:c9:ef:e8:33:3d:b4:d7:14:28:4e:d0:7f:5c:
         71:9e:3b:d1:07:74:a9:73:69:26:b4:ff:d2:57:d6:f7:d0:cf:
         30:ac:08:5e:8d:83:af:a5:5e:97:43:e1:98:09:54:02:2a:0b:
         e1:66:e9:b5:ed:0e:0d:e4:2c:03:43:1a:16:90:42:82:ab:cd:
         d9:15:53:90:02:19:5e:12:9a:13:28:9c:95:fc:cc:36:68:65:
         7a:cd:27:39:50:d6:35:cd:8b:4f:05:c2:7c:01:13:4d:c4:14:
         56:31:12:1a:83:ba:d6:a9:16:e8:9e:95:97:7d:18:fc:93:90:
         75:e6:c8:f1:65:e7:9e:30:8f:31:b0:32:01:93:45:c0:8a:55:
         0b:5e:49:85:b7:29:ba:d8:f5:5c:f5:a3:7e:54:ea:0d:3b:a8:
         70:86:5b:aa:ab:7a:f1:a5:fc:24:52:73:3a:6e:9a:2c:11:d9:
         f0:e1:ec:46:73:3d:ac:10:5e:c7:53:4d:60:57:83:c4:b2:0c:
         81:1b:a5:f1:98:96:6b:eb:3a:91:fe:d5:74:77:5e:55:a4:30:
         6b:91:90:c9:9e:cb:24:33:23:fd:eb:1e:2a:45:50:74:2b:1e:
         25:d8:38:7d
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCjUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
N0RGQTRBRjExMC8GA1UEBRMoOTdDOTBFMjUyMTJEODg3Q0Y5RTFERTZGRERGNTUx
QkE4MTJGQTEzOTAeFw0yNjA5MTYwNTU0NDdaFw0yNjEwMTYwNTU0NDdaMBgxFjAU
BgNVBAMTDTZhYWEyZjJhLWVhZTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQD7jVCtEYRzMLzEcXDDwhr9nfMNqGbW6YKqvl9Nwo+hbcs3DSogBN+S0uMl
L+msWY+ND/5p+KkC33EBB0FlyFoo92L2KPzbG5eRDATb4aU4sQnXSuoP7a6nQVGS
gBY2ZCl5FnxB2OKXu5nU2jJ4Mcze+L/HpMnYs4kJY6NXW65t2jfdIco6oHu/Zwv3
zvKvZr83aC0Ozc9WnShqPRL2AhDCmSsCIRdHMgPRS9EFpt2hCQ8qah0J5IBgLsKN
oP7ct2qB2IPz/TE1ZdeFIeS5mCGbum9jEy7C2XO2e8l10kcV0HAa/aPQONYFnVNR
9pI1UBfeK+08EEitabqj/9tm4VAFAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUjE/V
8BrqAEAvqKcooMQXA8kyemkwHwYDVR0jBBgwFoAUl8kOJSEtiHz54d5v3fVRuoEv
oTkwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjdERkE0LzA4QjhEODIwOTNBQzExRUJCMUQyQTgzMkY4QUVBMjI4L2w4a09K
U0V0aUh6NTRkNXYzZlZSdW9Fdm9Uay5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2w4a09KU0V0aUh6NTRkNXYzZlZSdW9Fdm9Uay5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjdERkE0LzA4QjhEODIwOTNBQzExRUJCMUQyQTgzMkY4
QUVBMjI4LzIxMTI5RjkwQjE5MzExRjFCOUFCQjZCN0NFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBARmsaAwDQYJKoZIhvcNAQEL
BQADggEBACXWMcGrci90CbIJTTltbWPq5YZtoxM/ye/oMz201xQoTtB/XHGeO9EH
dKlzaSa0/9JX1vfQzzCsCF6Ng6+lXpdD4ZgJVAIqC+Fm6bXtDg3kLANDGhaQQoKr
zdkVU5ACGV4SmhMonJX8zDZoZXrNJzlQ1jXNi08FwnwBE03EFFYxEhqDutapFuie
lZd9GPyTkHXmyPFl554wjzGwMgGTRcCKVQteSYW3KbrY9Vz1o35U6g07qHCGW6qr
evGl/CRSczpumiwR2fDh7EZzPawQXsdTTWBXg8SyDIEbpfGYlmvrOpH+1XR3XlWk
MGuRkMmeyyQzI/3rHipFUHQrHiXYOH0=
-----END CERTIFICATE-----