Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369D48A/C4097DD038D611ECA501247DD8A014CE/6AE6E2A0899511F1836059E9CE1D38B0.roa
File:                     6AE6E2A0899511F1836059E9CE1D38B0.roa (raw, json)
Hash identifier:          Ke0DyeeNvPUu3/HySu88mHg8fSTxD3OWYshhFWO+3pE=
Subject key identifier:   B8:26:F3:13:07:1C:BF:22:9D:20:25:8D:46:30:78:A3:05:7F:C5:F1
Certificate issuer:       /CN=F369D48AAF/serialNumber=BBFF25240B207F9BACC5CB954A62309ABBA5365D
Certificate serial:       06F9
Authority key identifier: BB:FF:25:24:0B:20:7F:9B:AC:C5:CB:95:4A:62:30:9A:BB:A5:36:5D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/u_8lJAsgf5usxcuVSmIwmrulNl0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369D48A/C4097DD038D611ECA501247DD8A014CE/6AE6E2A0899511F1836059E9CE1D38B0.roa
Signing time:             Mon 27 Jul 2026 08:30:26 +0000
ROA not before:           Mon 27 Jul 2026 08:30:22 +0000
ROA not after:            Wed 31 Dec 2036 08:30:22 +0000
asID:                     328961
IP address blocks:        102.202.24.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369D48A/C4097DD038D611ECA501247DD8A014CE/u_8lJAsgf5usxcuVSmIwmrulNl0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369D48A/C4097DD038D611ECA501247DD8A014CE/u_8lJAsgf5usxcuVSmIwmrulNl0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/u_8lJAsgf5usxcuVSmIwmrulNl0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 30 Jul 2026 02:31:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1785 (0x6f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369D48AAF, serialNumber=BBFF25240B207F9BACC5CB954A62309ABBA5365D
        Validity
            Not Before: Jul 27 08:30:22 2026 GMT
            Not After : Dec 31 08:30:22 2036 GMT
        Subject: CN=6a671722-751c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:a4:34:b1:df:f0:4b:f5:f8:8b:99:8b:f0:77:
                    4b:a0:c0:b7:77:a5:c0:16:a1:f8:54:6d:fc:91:46:
                    ac:5c:dd:cd:bd:c8:b3:ea:bf:be:ad:63:7d:17:35:
                    b2:62:f4:c9:1a:79:07:1a:86:f9:b8:5a:70:a3:21:
                    8c:ce:3a:f7:25:f2:d9:a9:e7:60:55:07:e9:e7:49:
                    5c:27:b8:b0:09:4d:c9:e0:6c:d3:35:9e:83:18:79:
                    bd:88:1e:e6:f1:9a:34:48:54:c4:66:c4:82:9d:15:
                    c8:49:c6:ed:a4:90:26:cd:33:a4:2e:8d:f5:29:2f:
                    40:e1:45:a8:03:9e:1b:9a:c6:c4:35:25:dc:74:cf:
                    48:ab:c7:c4:d4:4e:01:47:ab:e5:a1:19:31:c8:da:
                    2d:ee:46:b8:04:09:24:f1:b0:e2:73:f7:5b:f5:5b:
                    2e:21:07:dd:07:f2:ae:d1:46:c5:97:55:40:ef:af:
                    a1:6b:1c:3c:00:85:07:ba:7e:f2:33:e6:1c:2b:f8:
                    ce:15:92:b6:e0:69:96:07:02:dc:ac:5d:e7:05:e9:
                    2e:40:f9:84:89:28:dd:56:32:f4:af:96:55:bc:4a:
                    13:5d:eb:a0:9c:e6:ec:b4:c2:5b:ba:9c:77:db:00:
                    17:ca:f9:20:67:25:1c:40:df:d5:ac:4b:12:09:e5:
                    3e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:26:F3:13:07:1C:BF:22:9D:20:25:8D:46:30:78:A3:05:7F:C5:F1
            X509v3 Authority Key Identifier:
                keyid:BB:FF:25:24:0B:20:7F:9B:AC:C5:CB:95:4A:62:30:9A:BB:A5:36:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369D48A/C4097DD038D611ECA501247DD8A014CE/u_8lJAsgf5usxcuVSmIwmrulNl0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/u_8lJAsgf5usxcuVSmIwmrulNl0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369D48A/C4097DD038D611ECA501247DD8A014CE/6AE6E2A0899511F1836059E9CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.202.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3a:27:85:55:e0:0b:d9:6f:1d:52:38:8c:59:e2:75:b8:3b:d6:
         87:19:50:a2:dd:6b:42:68:ca:10:89:48:fd:49:49:ff:03:bc:
         70:a6:2b:c7:9b:7c:a2:78:4a:ac:e9:a3:f2:5a:38:8f:bc:61:
         58:6c:86:00:e4:e7:8f:0a:28:e2:d4:17:a5:79:6b:10:f6:97:
         1f:ad:18:e7:1a:b1:e0:e6:c0:21:db:0a:ec:67:eb:6f:86:0c:
         fc:8f:79:c9:65:7d:e6:c3:af:fb:19:60:8a:da:58:e0:e1:ed:
         8e:9a:b4:0e:67:ac:d8:37:3a:0f:82:5d:77:aa:18:9f:5b:11:
         ee:d5:46:f3:43:11:58:f4:b8:fd:fc:ae:5e:d3:72:16:ee:04:
         3a:74:48:3d:a0:90:18:e3:36:ea:c6:6a:cb:36:32:17:dc:b8:
         ad:c8:07:78:9f:94:89:7f:f9:00:e2:e0:77:d4:5a:91:a9:30:
         4c:cd:19:db:69:a2:e0:67:06:b6:5c:58:2a:16:52:77:f5:f3:
         7e:99:99:5a:e2:15:c6:6d:f2:1d:c7:21:3b:4a:87:da:33:d4:
         e3:9d:98:74:21:2d:1a:ba:59:f2:20:01:44:bb:ef:a6:3d:86:
         bd:48:66:b6:36:60:8a:32:23:86:f5:47:0c:6b:45:d1:7d:c8:
         3b:96:7d:d8
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBvkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OUQ0OEFBRjExMC8GA1UEBRMoQkJGRjI1MjQwQjIwN0Y5QkFDQzVDQjk1NEE2MjMw
OUFCQkE1MzY1RDAeFw0yNjA3MjcwODMwMjJaFw0zNjEyMzEwODMwMjJaMBgxFjAU
BgNVBAMTDTZhNjcxNzIyLTc1MWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDXpDSx3/BL9fiLmYvwd0ugwLd3pcAWofhUbfyRRqxc3c29yLPqv76tY30X
NbJi9MkaeQcahvm4WnCjIYzOOvcl8tmp52BVB+nnSVwnuLAJTcngbNM1noMYeb2I
HubxmjRIVMRmxIKdFchJxu2kkCbNM6QujfUpL0DhRagDnhuaxsQ1Jdx0z0irx8TU
TgFHq+WhGTHI2i3uRrgECSTxsOJz91v1Wy4hB90H8q7RRsWXVUDvr6FrHDwAhQe6
fvIz5hwr+M4VkrbgaZYHAtysXecF6S5A+YSJKN1WMvSvllW8ShNd66Cc5uy0wlu6
nHfbABfK+SBnJRxA39WsSxIJ5T75AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUuCbz
EwccvyKdICWNRjB4owV/xfEwHwYDVR0jBBgwFoAUu/8lJAsgf5usxcuVSmIwmrul
Nl0wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjlENDhBL0M0MDk3REQwMzhENjExRUNBNTAxMjQ3REQ4QTAxNENFL3VfOGxK
QXNnZjV1c3hjdVZTbUl3bXJ1bE5sMC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3VfOGxKQXNnZjV1c3hjdVZTbUl3bXJ1bE5sMC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjlENDhBL0M0MDk3REQwMzhENjExRUNBNTAxMjQ3REQ4
QTAxNENFLzZBRTZFMkEwODk5NTExRjE4MzYwNTlFOUNFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJmyhgwDQYJKoZIhvcNAQEL
BQADggEBADonhVXgC9lvHVI4jFnidbg71ocZUKLda0JoyhCJSP1JSf8DvHCmK8eb
fKJ4Sqzpo/JaOI+8YVhshgDk548KKOLUF6V5axD2lx+tGOcaseDmwCHbCuxn62+G
DPyPecllfebDr/sZYIraWODh7Y6atA5nrNg3Og+CXXeqGJ9bEe7VRvNDEVj0uP38
rl7TchbuBDp0SD2gkBjjNurGass2MhfcuK3IB3iflIl/+QDi4HfUWpGpMEzNGdtp
ouBnBrZcWCoWUnf1836ZmVriFcZt8h3HITtKh9oz1OOdmHQhLRq6WfIgAUS776Y9
hr1IZrY2YIoyI4b1RwxrRdF9yDuWfdg=
-----END CERTIFICATE-----
Generated at Tue Jul 28 23:25:29 2026 by rpki-client