Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A1982/2F0CD68E45D211F0B09667D4DAE4EC9C/D87AD8E69C7111F19CDB70F7CE1D38B0.roa
File:                     D87AD8E69C7111F19CDB70F7CE1D38B0.roa (raw, json)
Hash identifier:          WoxmRBNYxtlklGhzUk4A1A/VNqHlUjBfPcsPhHsejnY=
Subject key identifier:   6B:87:19:3C:F9:30:4C:47:9A:42:79:3F:47:86:F6:C4:EC:32:38:3C
Certificate issuer:       /CN=F36A1982AF/serialNumber=98DFF156BA5D3B11FAA6CD017A8BF654251DEBC7
Certificate serial:       01BF
Authority key identifier: 98:DF:F1:56:BA:5D:3B:11:FA:A6:CD:01:7A:8B:F6:54:25:1D:EB:C7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/mN_xVrpdOxH6ps0Beov2VCUd68c.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A1982/2F0CD68E45D211F0B09667D4DAE4EC9C/D87AD8E69C7111F19CDB70F7CE1D38B0.roa
Signing time:             Thu 20 Aug 2026 08:33:41 +0000
ROA not before:           Thu 20 Aug 2026 08:33:37 +0000
ROA not after:            Tue 20 Aug 2030 08:33:37 +0000
asID:                     37236
IP address blocks:        102.209.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A1982/2F0CD68E45D211F0B09667D4DAE4EC9C/mN_xVrpdOxH6ps0Beov2VCUd68c.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A1982/2F0CD68E45D211F0B09667D4DAE4EC9C/mN_xVrpdOxH6ps0Beov2VCUd68c.mft
                          rsync://rpki.afrinic.net/repository/afrinic/mN_xVrpdOxH6ps0Beov2VCUd68c.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 04:54:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 447 (0x1bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A1982AF, serialNumber=98DFF156BA5D3B11FAA6CD017A8BF654251DEBC7
        Validity
            Not Before: Aug 20 08:33:37 2026 GMT
            Not After : Aug 20 08:33:37 2030 GMT
        Subject: CN=6a86bbe4-5881
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:b6:33:3c:d0:40:e0:30:73:96:0f:47:85:a4:
                    e6:2b:00:91:f8:a2:49:f1:75:d8:25:7f:2f:41:24:
                    33:3c:f7:38:39:98:24:81:7d:24:5e:62:29:7f:21:
                    f1:a7:70:8a:16:c6:ff:b1:0f:d3:95:85:2b:d1:3e:
                    e1:aa:5b:f1:a2:5d:1a:a6:bf:b6:d5:3b:bf:85:23:
                    ec:96:0d:b2:87:8e:d2:bd:a3:cc:11:f3:8d:26:57:
                    a5:d7:b2:c2:cd:2f:fb:f1:61:3b:5e:72:b9:d9:c7:
                    d4:9f:23:6d:db:94:b3:4a:88:7b:73:a4:ec:90:a6:
                    5e:23:36:9f:c0:4e:a8:36:56:09:5d:54:b1:03:99:
                    9d:43:9d:b9:d6:bd:c5:28:39:3c:76:a3:73:87:4c:
                    ca:d1:d9:8c:23:a7:14:f3:1e:82:fc:1f:bc:d9:19:
                    b4:19:e0:0f:03:bf:51:c3:35:de:ca:b1:31:5a:35:
                    fe:a0:87:0d:57:f6:b6:22:e0:1f:a8:36:f5:2e:45:
                    8a:ce:9b:21:2e:ce:3d:86:1a:33:11:59:1c:12:9d:
                    f9:a8:79:ca:0e:91:62:4a:c0:0f:57:56:14:ee:41:
                    ec:90:67:58:33:fe:18:6d:05:e5:12:ac:4d:6f:35:
                    08:c6:fb:dd:4c:2e:1c:bd:c4:e8:2c:20:35:77:d9:
                    17:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:87:19:3C:F9:30:4C:47:9A:42:79:3F:47:86:F6:C4:EC:32:38:3C
            X509v3 Authority Key Identifier:
                keyid:98:DF:F1:56:BA:5D:3B:11:FA:A6:CD:01:7A:8B:F6:54:25:1D:EB:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A1982/2F0CD68E45D211F0B09667D4DAE4EC9C/mN_xVrpdOxH6ps0Beov2VCUd68c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/mN_xVrpdOxH6ps0Beov2VCUd68c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A1982/2F0CD68E45D211F0B09667D4DAE4EC9C/D87AD8E69C7111F19CDB70F7CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.209.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:ab:c4:5f:35:03:62:0b:15:6b:09:a0:e7:d5:2e:55:05:d3:
         93:2a:54:35:7a:0b:1b:f5:fd:9f:f6:82:8f:a6:90:27:82:f2:
         ad:06:5a:d2:41:95:e1:60:43:c4:6e:2e:e3:05:a5:c9:ac:a0:
         53:da:35:05:b1:d1:31:7d:5f:8d:44:28:ed:8e:82:a7:79:3e:
         23:44:65:71:ae:1c:4f:ae:bd:f1:6a:80:ff:d4:8e:0a:87:7d:
         82:b5:a1:17:fe:fd:4e:82:13:32:17:23:c2:9a:64:45:9a:f5:
         41:e9:09:c0:a0:07:bb:36:71:d3:cc:74:f0:5c:18:7a:3b:64:
         1e:a2:dd:da:66:f5:b2:7d:4e:83:43:68:5e:d5:53:54:72:cf:
         02:41:50:90:c9:62:30:1a:f3:6d:aa:d8:4f:2b:bd:95:5f:36:
         26:76:8f:8b:2a:9e:f8:d9:f9:87:c7:a1:cd:8f:86:01:19:41:
         50:95:3a:b0:8b:6a:0c:1b:6c:ef:5e:83:fd:e0:76:f7:06:14:
         17:34:04:b5:39:79:57:4f:3c:38:ac:2e:51:39:e7:5d:0a:d3:
         e7:31:6f:f9:12:5e:0b:f8:05:6b:d6:93:3c:aa:e8:8e:ea:ba:
         c0:d8:2a:e2:04:f6:2e:90:61:df:16:67:a9:d8:d3:3b:41:86:
         59:d0:4d:d6
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICAb8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QTE5ODJBRjExMC8GA1UEBRMoOThERkYxNTZCQTVEM0IxMUZBQTZDRDAxN0E4QkY2
NTQyNTFERUJDNzAeFw0yNjA4MjAwODMzMzdaFw0zMDA4MjAwODMzMzdaMBgxFjAU
BgNVBAMTDTZhODZiYmU0LTU4ODEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCatjM80EDgMHOWD0eFpOYrAJH4oknxddglfy9BJDM89zg5mCSBfSReYil/
IfGncIoWxv+xD9OVhSvRPuGqW/GiXRqmv7bVO7+FI+yWDbKHjtK9o8wR840mV6XX
ssLNL/vxYTtecrnZx9SfI23blLNKiHtzpOyQpl4jNp/ATqg2VgldVLEDmZ1DnbnW
vcUoOTx2o3OHTMrR2YwjpxTzHoL8H7zZGbQZ4A8Dv1HDNd7KsTFaNf6ghw1X9rYi
4B+oNvUuRYrOmyEuzj2GGjMRWRwSnfmoecoOkWJKwA9XVhTuQeyQZ1gz/hhtBeUS
rE1vNQjG+91MLhy9xOgsIDV32RdJAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUa4cZ
PPkwTEeaQnk/R4b2xOwyODwwHwYDVR0jBBgwFoAUmN/xVrpdOxH6ps0Beov2VCUd
68cwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkExOTgyLzJGMENENjhFNDVEMjExRjBCMDk2NjdENERBRTRFQzlDL21OX3hW
cnBkT3hINnBzMEJlb3YyVkNVZDY4Yy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL21OX3hWcnBkT3hINnBzMEJlb3YyVkNVZDY4Yy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkExOTgyLzJGMENENjhFNDVEMjExRjBCMDk2NjdENERB
RTRFQzlDL0Q4N0FEOEU2OUM3MTExRjE5Q0RCNzBGN0NFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABm0cMwDQYJKoZIhvcNAQEL
BQADggEBAAqrxF81A2ILFWsJoOfVLlUF05MqVDV6Cxv1/Z/2go+mkCeC8q0GWtJB
leFgQ8RuLuMFpcmsoFPaNQWx0TF9X41EKO2Ogqd5PiNEZXGuHE+uvfFqgP/UjgqH
fYK1oRf+/U6CEzIXI8KaZEWa9UHpCcCgB7s2cdPMdPBcGHo7ZB6i3dpm9bJ9ToND
aF7VU1RyzwJBUJDJYjAa822q2E8rvZVfNiZ2j4sqnvjZ+YfHoc2PhgEZQVCVOrCL
agwbbO9eg/3gdvcGFBc0BLU5eVdPPDisLlE5510K0+cxb/kSXgv4BWvWkzyq6I7q
usDYKuIE9i6QYd8WZ6nY0ztBhlnQTdY=
-----END CERTIFICATE-----