Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36EC7CE/82014A10989911E9B7396A33F8AEA228/4AEF13BE963D11F193B912D2CE1D38B0.roa
File:                     4AEF13BE963D11F193B912D2CE1D38B0.roa (raw, json)
Hash identifier:          Bz08Ul12aPFmnFeKKATupuMupMgsuN47O/3D94SpZWE=
Subject key identifier:   11:77:15:F2:43:46:E9:6A:99:BE:C1:E2:F7:C1:32:F5:48:91:40:D5
Certificate issuer:       /CN=F36EC7CEAF/serialNumber=0E040ABF4F945F30D77DA28BBF028B6AC49D042C
Certificate serial:       0A8F
Authority key identifier: 0E:04:0A:BF:4F:94:5F:30:D7:7D:A2:8B:BF:02:8B:6A:C4:9D:04:2C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/DgQKv0-UXzDXfaKLvwKLasSdBCw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36EC7CE/82014A10989911E9B7396A33F8AEA228/4AEF13BE963D11F193B912D2CE1D38B0.roa
Signing time:             Wed 12 Aug 2026 11:02:22 +0000
ROA not before:           Wed 12 Aug 2026 11:02:17 +0000
ROA not after:            Tue 12 Aug 2036 11:02:17 +0000
asID:                     327795
IP address blocks:        102.202.136.0/24 maxlen: 24
                          102.202.137.0/24 maxlen: 24
                          102.202.138.0/24 maxlen: 24
                          102.202.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36EC7CE/82014A10989911E9B7396A33F8AEA228/DgQKv0-UXzDXfaKLvwKLasSdBCw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36EC7CE/82014A10989911E9B7396A33F8AEA228/DgQKv0-UXzDXfaKLvwKLasSdBCw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/DgQKv0-UXzDXfaKLvwKLasSdBCw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2703 (0xa8f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36EC7CEAF, serialNumber=0E040ABF4F945F30D77DA28BBF028B6AC49D042C
        Validity
            Not Before: Aug 12 11:02:17 2026 GMT
            Not After : Aug 12 11:02:17 2036 GMT
        Subject: CN=6a7c52be-51f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:1f:72:f1:49:03:72:be:03:e0:34:e5:8a:d4:
                    19:90:84:c8:be:6e:2b:d8:f7:09:0f:a4:2c:95:0b:
                    08:88:5f:f6:e1:36:8a:72:c0:3c:16:73:5c:c3:9d:
                    16:3b:59:44:9f:72:64:e2:a9:24:6d:93:06:79:cd:
                    9a:fc:18:3a:4f:de:b0:a9:75:fd:01:63:ad:eb:c5:
                    32:db:d0:a2:59:9b:8d:34:2b:86:72:31:a2:2b:f0:
                    c5:b3:d0:46:f9:20:27:a8:1e:2b:8d:a0:be:59:5d:
                    d6:a1:96:69:d9:0c:d2:ce:bc:76:3a:5d:66:99:64:
                    72:12:02:89:88:83:d3:27:d6:44:20:fd:66:2c:5e:
                    a4:3d:80:ad:12:74:18:f1:d8:5e:9f:10:ab:df:f8:
                    cc:cd:43:65:b8:05:7e:8f:0a:97:13:71:b1:f3:7e:
                    ba:7d:9d:1b:10:b0:97:95:81:40:57:7f:b1:a0:32:
                    45:6e:2d:e5:2d:a8:44:df:59:4b:7f:a7:71:ea:29:
                    79:65:ce:bf:4d:4d:eb:c5:cd:68:65:22:2c:2a:df:
                    d2:0e:8c:5d:73:ba:95:c8:88:c5:a5:b3:0f:55:08:
                    6c:9c:46:5a:fd:00:05:d0:02:08:11:4a:fc:b2:0f:
                    49:ea:07:16:56:67:66:55:db:d6:30:19:4f:7a:77:
                    39:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:77:15:F2:43:46:E9:6A:99:BE:C1:E2:F7:C1:32:F5:48:91:40:D5
            X509v3 Authority Key Identifier:
                keyid:0E:04:0A:BF:4F:94:5F:30:D7:7D:A2:8B:BF:02:8B:6A:C4:9D:04:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36EC7CE/82014A10989911E9B7396A33F8AEA228/DgQKv0-UXzDXfaKLvwKLasSdBCw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/DgQKv0-UXzDXfaKLvwKLasSdBCw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EC7CE/82014A10989911E9B7396A33F8AEA228/4AEF13BE963D11F193B912D2CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.202.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         98:0a:51:9e:b1:99:e5:56:40:f8:bd:76:bf:ee:3e:5d:b2:bc:
         76:c5:09:30:ed:81:d3:c8:f7:8a:81:53:51:95:ed:2b:da:72:
         77:d8:33:5b:11:e3:8a:f8:8b:5c:f4:af:dd:4a:bb:9d:d9:2a:
         f0:5d:1d:58:62:ff:e0:a3:09:e6:19:3e:ad:5f:ff:5e:d4:08:
         4a:b1:54:2d:e1:de:77:2d:17:a4:b7:3d:95:16:dd:dd:e7:2a:
         3f:5d:33:bd:9d:08:80:e6:40:8f:f9:c3:57:e6:95:04:72:13:
         84:d0:06:e0:33:7a:bd:79:d5:4f:51:5e:68:a0:94:ab:8d:cf:
         11:b3:22:2d:3b:73:0b:67:c3:fa:0e:20:be:10:92:65:57:54:
         8a:54:be:08:04:e2:ee:dc:69:96:75:33:7e:7a:7f:9d:fd:49:
         c8:1e:d1:99:10:4d:15:b1:d4:43:e2:59:85:7a:50:c3:37:dc:
         d4:3f:45:7e:63:24:42:f1:e7:81:54:28:f3:22:a4:70:09:18:
         30:52:de:01:4a:24:7e:e5:ec:f7:db:d4:21:a5:d0:8c:42:90:
         81:55:2e:2c:f3:c8:5b:e1:89:51:f5:51:29:8c:74:66:6a:66:
         80:c4:f0:c8:72:cd:98:68:50:bb:ad:3a:61:3c:7b:c8:aa:58:
         31:fb:66:12
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCo8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RUM3Q0VBRjExMC8GA1UEBRMoMEUwNDBBQkY0Rjk0NUYzMEQ3N0RBMjhCQkYwMjhC
NkFDNDlEMDQyQzAeFw0yNjA4MTIxMTAyMTdaFw0zNjA4MTIxMTAyMTdaMBgxFjAU
BgNVBAMTDTZhN2M1MmJlLTUxZjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC8H3LxSQNyvgPgNOWK1BmQhMi+bivY9wkPpCyVCwiIX/bhNopywDwWc1zD
nRY7WUSfcmTiqSRtkwZ5zZr8GDpP3rCpdf0BY63rxTLb0KJZm400K4ZyMaIr8MWz
0Eb5ICeoHiuNoL5ZXdahlmnZDNLOvHY6XWaZZHISAomIg9Mn1kQg/WYsXqQ9gK0S
dBjx2F6fEKvf+MzNQ2W4BX6PCpcTcbHzfrp9nRsQsJeVgUBXf7GgMkVuLeUtqETf
WUt/p3HqKXllzr9NTevFzWhlIiwq39IOjF1zupXIiMWlsw9VCGycRlr9AAXQAggR
SvyyD0nqBxZWZ2ZV29YwGU96dzmTAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUEXcV
8kNG6WqZvsHi98Ey9UiRQNUwHwYDVR0jBBgwFoAUDgQKv0+UXzDXfaKLvwKLasSd
BCwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkVDN0NFLzgyMDE0QTEwOTg5OTExRTlCNzM5NkEzM0Y4QUVBMjI4L0RnUUt2
MC1VWHpEWGZhS0x2d0tMYXNTZEJDdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0RnUUt2MC1VWHpEWGZhS0x2d0tMYXNTZEJDdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkVDN0NFLzgyMDE0QTEwOTg5OTExRTlCNzM5NkEzM0Y4
QUVBMjI4LzRBRUYxM0JFOTYzRDExRjE5M0I5MTJEMkNFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJmyogwDQYJKoZIhvcNAQEL
BQADggEBAJgKUZ6xmeVWQPi9dr/uPl2yvHbFCTDtgdPI94qBU1GV7SvacnfYM1sR
44r4i1z0r91Ku53ZKvBdHVhi/+CjCeYZPq1f/17UCEqxVC3h3nctF6S3PZUW3d3n
Kj9dM72dCIDmQI/5w1fmlQRyE4TQBuAzer151U9RXmiglKuNzxGzIi07cwtnw/oO
IL4QkmVXVIpUvggE4u7caZZ1M356f539Scge0ZkQTRWx1EPiWYV6UMM33NQ/RX5j
JELx54FUKPMipHAJGDBS3gFKJH7l7Pfb1CGl0IxCkIFVLizzyFvhiVH1USmMdGZq
ZoDE8MhyzZhoULutOmE8e8iqWDH7ZhI=
-----END CERTIFICATE-----