Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F369D6F1/8A5AD036BE3A11F1AD13CB15CF1D38B0/E960B0D8BE4311F18F0CE1D0CE1D38B0.roa
File:                     E960B0D8BE4311F18F0CE1D0CE1D38B0.roa (raw, json)
Hash identifier:          tirPu9eaqbqzpKKRZphPTtGNvhDMD9dDeBi//jNK7ao=
Subject key identifier:   2D:E6:A2:E3:FB:BC:29:EC:48:9A:D8:0B:42:5A:6D:13:88:A2:7B:8D
Certificate issuer:       /CN=F369D6F1AF/serialNumber=412E7F9F6A17737452C678346D8190EEDE988AB4
Certificate serial:       02
Authority key identifier: 41:2E:7F:9F:6A:17:73:74:52:C6:78:34:6D:81:90:EE:DE:98:8A:B4
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/QS5_n2oXc3RSxng0bYGQ7t6YirQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369D6F1/8A5AD036BE3A11F1AD13CB15CF1D38B0/E960B0D8BE4311F18F0CE1D0CE1D38B0.roa
Signing time:             Fri 02 Oct 2026 09:30:31 +0000
ROA not before:           Fri 02 Oct 2026 09:30:28 +0000
ROA not after:            Fri 01 Oct 2027 09:30:28 +0000
asID:                     37529
IP address blocks:        102.164.248.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369D6F1/8A5AD036BE3A11F1AD13CB15CF1D38B0/QS5_n2oXc3RSxng0bYGQ7t6YirQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369D6F1/8A5AD036BE3A11F1AD13CB15CF1D38B0/QS5_n2oXc3RSxng0bYGQ7t6YirQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/QS5_n2oXc3RSxng0bYGQ7t6YirQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369D6F1AF, serialNumber=412E7F9F6A17737452C678346D8190EEDE988AB4
        Validity
            Not Before: Oct  2 09:30:28 2026 GMT
            Not After : Oct  1 09:30:28 2027 GMT
        Subject: CN=6abf79b7-788c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:a4:16:e9:18:df:fd:82:ac:1b:c7:4e:c6:b9:
                    c9:95:89:17:a4:05:91:8b:de:50:24:83:6d:ba:b4:
                    0a:fa:aa:41:9c:57:6e:57:e4:cb:b2:c7:e2:04:d1:
                    64:60:53:51:63:ae:9a:f7:62:d0:7f:41:3b:30:40:
                    9d:fb:04:57:df:34:e0:03:6c:d2:88:b1:5f:ca:90:
                    21:73:db:96:50:fd:18:63:9f:a7:ce:3a:5e:ad:cb:
                    04:89:7b:6b:f3:b8:f5:07:c4:e1:da:20:9a:a2:ad:
                    c1:56:79:c9:ed:72:7d:a5:88:8f:24:28:89:ea:14:
                    df:10:30:22:84:c3:a9:b2:a8:22:c1:8c:d2:b1:d5:
                    59:11:39:50:4b:d7:92:c6:7b:cb:16:54:84:f5:23:
                    e6:58:cf:4a:6c:a7:16:46:fa:ff:0b:a8:db:93:1f:
                    9f:b1:cd:0f:71:b2:9f:ad:e1:56:d9:01:e8:85:5e:
                    2a:6a:98:b5:0c:fe:4a:9d:48:8e:14:11:c8:8f:b3:
                    89:35:4f:6b:80:02:74:29:85:a6:38:58:bc:a2:40:
                    d3:74:9f:41:de:4a:82:59:fc:56:17:37:e7:78:9e:
                    09:9d:c9:eb:3e:5c:20:e3:49:56:d9:d6:34:41:3f:
                    fb:14:d4:dc:69:46:c6:84:38:46:03:a6:8f:87:57:
                    d9:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:E6:A2:E3:FB:BC:29:EC:48:9A:D8:0B:42:5A:6D:13:88:A2:7B:8D
            X509v3 Authority Key Identifier:
                keyid:41:2E:7F:9F:6A:17:73:74:52:C6:78:34:6D:81:90:EE:DE:98:8A:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369D6F1/8A5AD036BE3A11F1AD13CB15CF1D38B0/QS5_n2oXc3RSxng0bYGQ7t6YirQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QS5_n2oXc3RSxng0bYGQ7t6YirQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369D6F1/8A5AD036BE3A11F1AD13CB15CF1D38B0/E960B0D8BE4311F18F0CE1D0CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.164.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1b:5a:14:b9:22:01:e8:1c:aa:06:af:d0:97:6c:fc:f3:bb:bc:
         36:95:af:39:11:f6:ff:4a:f7:8b:25:8d:47:60:a0:03:8c:c9:
         e4:57:b6:53:69:ba:8c:91:fd:57:ad:59:d6:d3:85:6c:09:bb:
         a2:6c:84:08:78:17:11:ac:2b:e3:a1:e3:c9:e7:75:3f:d9:f0:
         05:b7:58:a3:71:2b:7e:f0:e2:fc:b6:e3:5d:b1:a4:fa:d2:2d:
         4a:42:b9:3c:72:50:69:4a:1b:87:ff:4a:e3:6c:a8:bb:8c:76:
         53:91:6f:60:e7:c7:92:9b:3c:e1:54:27:07:f6:b4:11:08:b8:
         af:29:30:6e:ea:3a:0b:c8:56:bc:9f:d6:4f:b2:fe:ce:5a:ec:
         2a:c2:35:a9:13:61:7e:2b:fc:b5:01:c7:6c:3e:1d:ff:f2:19:
         55:9e:90:c8:b4:63:28:35:96:0d:97:59:db:5b:3f:91:b7:9e:
         2f:99:65:c6:78:b9:c1:6d:f1:5e:2c:a1:9f:51:45:f0:1d:f3:
         5e:cd:89:75:cc:2c:b3:b5:69:9b:c0:a6:f0:8d:c7:e9:c4:27:
         12:cc:27:38:4d:1e:aa:34:83:c3:c0:f6:74:43:70:17:e4:c6:
         b8:b0:e5:be:b2:0a:05:c0:fb:33:3d:3d:90:0c:63:ba:14:77:
         50:8d:79:52
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY5
RDZGMUFGMTEwLwYDVQQFEyg0MTJFN0Y5RjZBMTc3Mzc0NTJDNjc4MzQ2RDgxOTBF
RURFOTg4QUI0MB4XDTI2MTAwMjA5MzAyOFoXDTI3MTAwMTA5MzAyOFowGDEWMBQG
A1UEAxMNNmFiZjc5YjctNzg4YzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANKkFukY3/2CrBvHTsa5yZWJF6QFkYveUCSDbbq0CvqqQZxXblfky7LH4gTR
ZGBTUWOumvdi0H9BOzBAnfsEV9804ANs0oixX8qQIXPbllD9GGOfp846Xq3LBIl7
a/O49QfE4dogmqKtwVZ5ye1yfaWIjyQoieoU3xAwIoTDqbKoIsGM0rHVWRE5UEvX
ksZ7yxZUhPUj5ljPSmynFkb6/wuo25Mfn7HND3Gyn63hVtkB6IVeKmqYtQz+Sp1I
jhQRyI+ziTVPa4ACdCmFpjhYvKJA03SfQd5Kgln8Vhc353ieCZ3J6z5cIONJVtnW
NEE/+xTU3GlGxoQ4RgOmj4dX2XMCAwEAAaOCAqUwggKhMB0GA1UdDgQWBBQt5qLj
+7wp7Eia2AtCWm0TiKJ7jTAfBgNVHSMEGDAWgBRBLn+fahdzdFLGeDRtgZDu3piK
tDAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2OUQ2RjEvOEE1QUQwMzZCRTNBMTFGMUFEMTNDQjE1Q0YxRDM4QjAvUVM1X24y
b1hjM1JTeG5nMGJZR1E3dDZZaXJRLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvUVM1X24yb1hjM1JTeG5nMGJZR1E3dDZZaXJRLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2OUQ2RjEvOEE1QUQwMzZCRTNBMTFGMUFEMTNDQjE1Q0Yx
RDM4QjAvRTk2MEIwRDhCRTQzMTFGMThGMENFMUQwQ0UxRDM4QjAucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmak+DANBgkqhkiG9w0BAQsF
AAOCAQEAG1oUuSIB6ByqBq/Ql2z887u8NpWvORH2/0r3iyWNR2CgA4zJ5Fe2U2m6
jJH9V61Z1tOFbAm7omyECHgXEawr46Hjyed1P9nwBbdYo3ErfvDi/LbjXbGk+tIt
SkK5PHJQaUobh/9K42you4x2U5FvYOfHkps84VQnB/a0EQi4rykwbuo6C8hWvJ/W
T7L+zlrsKsI1qRNhfiv8tQHHbD4d//IZVZ6QyLRjKDWWDZdZ21s/kbeeL5llxni5
wW3xXiyhn1FF8B3zXs2Jdcwss7Vpm8Cm8I3H6cQnEswnOE0eqjSDw8D2dENwF+TG
uLDlvrIKBcD7Mz09kAxjuhR3UI15Ug==
-----END CERTIFICATE-----