Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/26FF2E94B5E111F1BE92CD11CF1D38B0.roa
File:                     26FF2E94B5E111F1BE92CD11CF1D38B0.roa (raw, json)
Hash identifier:          EJcKwlOFNZBYCTUL7p867mjqHFfBM9UivRDcvJ6Czp0=
Subject key identifier:   36:2C:DE:74:F6:91:E8:BC:C7:F6:81:7D:6C:A6:6D:D4:54:DA:7B:53
Certificate issuer:       /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial:       1A20
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/26FF2E94B5E111F1BE92CD11CF1D38B0.roa
Signing time:             Mon 21 Sep 2026 17:23:25 +0000
ROA not before:           Mon 21 Sep 2026 17:23:21 +0000
ROA not after:            Thu 21 Sep 2028 17:23:21 +0000
asID:                     834
IP address blocks:        102.129.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6688 (0x1a20)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
        Validity
            Not Before: Sep 21 17:23:21 2026 GMT
            Not After : Sep 21 17:23:21 2028 GMT
        Subject: CN=6ab1680d-34ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:2a:c2:e4:0a:fe:24:89:7c:81:b2:28:1a:f5:
                    9d:b3:89:fd:74:a9:04:61:f0:d2:b2:a4:00:ec:9c:
                    03:71:8e:93:ec:99:81:8b:e8:44:df:cb:64:70:c2:
                    bb:d8:a6:da:21:3e:ce:b9:90:a3:c2:c6:ab:a9:12:
                    59:6a:4d:b5:00:f7:2f:f5:98:b4:80:2d:5a:c9:45:
                    c1:a4:91:6c:97:7a:70:dd:a1:c2:4c:fc:10:3e:71:
                    ff:15:28:1a:08:ba:e8:ba:11:26:41:22:18:d4:d8:
                    79:2b:c7:5d:cd:cb:5a:32:07:dc:86:e3:9f:8c:7b:
                    76:f6:7d:56:96:c3:2f:bd:67:6c:19:a9:19:dc:d2:
                    24:d8:e9:16:0c:6a:0f:ea:5d:9c:84:70:4a:46:9a:
                    5c:b7:97:e5:e8:97:c0:00:fd:14:44:f5:dd:09:05:
                    04:eb:a2:32:3e:53:43:76:ae:bf:56:58:1c:06:dd:
                    97:36:98:72:7f:c1:0d:01:d8:1e:21:d3:93:c8:d8:
                    df:66:04:81:eb:b2:b7:32:9d:f4:4d:9b:b2:9d:c9:
                    fc:5b:74:7f:2b:22:94:2b:0b:49:9c:b3:23:32:b3:
                    d1:18:4f:2d:7b:ac:e0:d3:ec:03:32:48:17:e3:cf:
                    c1:91:11:74:b0:8d:9c:42:70:1f:ac:f3:60:7a:d9:
                    66:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:2C:DE:74:F6:91:E8:BC:C7:F6:81:7D:6C:A6:6D:D4:54:DA:7B:53
            X509v3 Authority Key Identifier:
                keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/26FF2E94B5E111F1BE92CD11CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.129.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:5a:ad:7f:19:84:b6:c5:30:49:cf:90:b9:1e:da:7e:ca:d0:
         b6:c7:4e:72:03:bb:4e:b9:b0:64:6d:9f:8e:21:ce:43:7d:e4:
         e9:0e:7f:42:4f:b5:eb:f5:59:08:5d:a4:74:3a:2d:3e:b9:b9:
         92:6d:c3:15:b2:d0:b0:2e:25:3e:b7:2e:a8:db:20:58:c0:ad:
         c3:80:7e:50:50:cb:20:dc:d7:0b:2e:9d:4f:3f:fd:4e:2f:5b:
         7d:65:00:01:52:70:e7:21:e9:e5:b1:a2:90:8e:bd:32:79:08:
         9c:cf:05:e8:4c:f5:27:dc:c9:14:3f:f4:c7:02:33:9f:15:2a:
         27:5a:f1:75:eb:25:bd:4a:5b:63:81:9c:56:da:0e:6c:cd:97:
         b5:46:54:a6:31:76:1b:33:d6:cb:23:6b:9b:43:32:fa:09:14:
         ef:10:7a:e1:61:ff:ee:c1:da:78:bb:56:a6:ed:aa:f1:ed:b2:
         df:cb:80:f9:66:ea:94:47:ae:89:89:5b:e9:68:9e:82:a6:80:
         9b:89:db:63:74:52:0a:d4:31:ed:92:c2:eb:11:a0:8c:73:7b:
         b8:fd:37:92:d7:b3:f7:34:40:69:18:c6:63:9a:1b:49:79:ae:
         85:82:f2:37:0c:90:bf:88:97:c4:14:be:e5:cc:14:56:8b:54:
         0f:b6:7a:67
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICGiAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0yNjA5MjExNzIzMjFaFw0yODA5MjExNzIzMjFaMBgxFjAU
BgNVBAMTDTZhYjE2ODBkLTM0YWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCwKsLkCv4kiXyBsiga9Z2zif10qQRh8NKypADsnANxjpPsmYGL6ETfy2Rw
wrvYptohPs65kKPCxqupEllqTbUA9y/1mLSALVrJRcGkkWyXenDdocJM/BA+cf8V
KBoIuui6ESZBIhjU2Hkrx13Ny1oyB9yG45+Me3b2fVaWwy+9Z2wZqRnc0iTY6RYM
ag/qXZyEcEpGmly3l+Xol8AA/RRE9d0JBQTrojI+U0N2rr9WWBwG3Zc2mHJ/wQ0B
2B4h05PI2N9mBIHrsrcynfRNm7KdyfxbdH8rIpQrC0mcsyMys9EYTy17rODT7AMy
SBfjz8GREXSwjZxCcB+s82B62WbVAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUNize
dPaR6LzH9oF9bKZt1FTae1MwHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4LzI2RkYyRTk0QjVFMTExRjFCRTkyQ0QxMUNGMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmgcIwDQYJKoZIhvcNAQEL
BQADggEBAFharX8ZhLbFMEnPkLke2n7K0LbHTnIDu065sGRtn44hzkN95OkOf0JP
tev1WQhdpHQ6LT65uZJtwxWy0LAuJT63LqjbIFjArcOAflBQyyDc1wsunU8//U4v
W31lAAFScOch6eWxopCOvTJ5CJzPBehM9SfcyRQ/9McCM58VKida8XXrJb1KW2OB
nFbaDmzNl7VGVKYxdhsz1ssja5tDMvoJFO8QeuFh/+7B2ni7VqbtqvHtst/LgPlm
6pRHromJW+lonoKmgJuJ22N0UgrUMe2SwusRoIxze7j9N5LXs/c0QGkYxmOaG0l5
roWC8jcMkL+Il8QUvuXMFFaLVA+2emc=
-----END CERTIFICATE-----