Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36303B6/AECF18CAC3BA11F198314B10CF1D38B0/08C2EABAD9B811F18BA362D8CE1D38B0.roa
File:                     08C2EABAD9B811F18BA362D8CE1D38B0.roa (raw, json)
Hash identifier:          HnBZNOc3uedDlgcj3nmOPrBtYlFln9TnWrFmztlzHr8=
Subject key identifier:   FD:3B:3B:1A:1A:32:4F:96:95:7E:7D:89:7E:A1:16:D5:B0:4F:22:BE
Certificate issuer:       /CN=F36303B6AF/serialNumber=42BDA6FF50731DA757876349BD0DDF8A6A380D51
Certificate serial:       28
Authority key identifier: 42:BD:A6:FF:50:73:1D:A7:57:87:63:49:BD:0D:DF:8A:6A:38:0D:51
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Qr2m_1BzHadXh2NJvQ3fimo4DVE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36303B6/AECF18CAC3BA11F198314B10CF1D38B0/08C2EABAD9B811F18BA362D8CE1D38B0.roa
Signing time:             Fri 06 Nov 2026 07:59:47 +0000
ROA not before:           Fri 06 Nov 2026 07:59:43 +0000
ROA not after:            Wed 31 Dec 2036 07:59:43 +0000
asID:                     37037
IP address blocks:        102.206.29.0/24 maxlen: 24 (superfluous maxlen)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36303B6/AECF18CAC3BA11F198314B10CF1D38B0/Qr2m_1BzHadXh2NJvQ3fimo4DVE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36303B6/AECF18CAC3BA11F198314B10CF1D38B0/Qr2m_1BzHadXh2NJvQ3fimo4DVE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Qr2m_1BzHadXh2NJvQ3fimo4DVE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 16 Nov 2026 00:08:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 40 (0x28)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36303B6AF, serialNumber=42BDA6FF50731DA757876349BD0DDF8A6A380D51
        Validity
            Not Before: Nov  6 07:59:43 2026 GMT
            Not After : Dec 31 07:59:43 2036 GMT
        Subject: CN=6aed88f3-063e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:57:ae:38:eb:3f:56:e6:8f:52:3e:c7:b5:c7:
                    96:50:1e:a8:a3:0e:2d:72:8a:b4:0d:70:60:d5:6d:
                    74:57:a1:68:35:19:42:cd:02:b9:58:c9:af:59:9b:
                    05:ae:e0:76:64:8b:a3:66:48:44:45:2f:c1:b3:33:
                    5f:86:6c:26:d1:fc:87:ec:dd:45:06:c6:88:d2:3d:
                    1f:42:09:b8:77:5e:20:88:34:9a:bd:ea:c7:cf:ee:
                    9b:02:a2:fd:84:02:be:4e:a7:ca:c8:8d:99:ef:f1:
                    48:bc:5b:20:09:ea:50:6a:49:16:4c:be:ad:0e:53:
                    f9:32:b7:ff:df:84:d2:dd:dd:40:dd:77:7e:9c:4d:
                    76:82:c4:b8:b2:39:77:a7:00:3d:af:79:17:90:62:
                    9f:34:61:5f:85:6e:21:df:b7:af:0d:1d:88:fa:fa:
                    f5:c1:38:a8:5d:f5:78:0b:3c:d7:f5:16:ab:be:08:
                    b9:d7:4d:13:31:15:ff:2f:6b:f9:44:27:d5:a8:de:
                    55:d4:18:cb:51:dc:37:84:e0:84:95:8f:42:d7:c7:
                    4a:16:ca:49:1d:4a:fd:ce:d6:67:ad:33:36:01:08:
                    fb:75:95:cb:c4:99:67:20:09:88:0c:52:35:33:27:
                    dc:b3:ec:11:c9:6a:70:39:a9:e6:39:e7:98:fc:0e:
                    7d:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:3B:3B:1A:1A:32:4F:96:95:7E:7D:89:7E:A1:16:D5:B0:4F:22:BE
            X509v3 Authority Key Identifier:
                keyid:42:BD:A6:FF:50:73:1D:A7:57:87:63:49:BD:0D:DF:8A:6A:38:0D:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36303B6/AECF18CAC3BA11F198314B10CF1D38B0/Qr2m_1BzHadXh2NJvQ3fimo4DVE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Qr2m_1BzHadXh2NJvQ3fimo4DVE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36303B6/AECF18CAC3BA11F198314B10CF1D38B0/08C2EABAD9B811F18BA362D8CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.206.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:ae:8a:9d:6f:3a:ed:6c:73:4d:a3:50:09:01:84:27:6e:26:
         6f:ca:cd:0e:55:fe:af:b1:50:32:a2:75:ba:09:f1:74:3f:d7:
         80:cd:9f:f6:4d:6b:38:92:45:7b:26:70:57:6e:2f:83:63:48:
         34:8f:d0:78:65:1a:2f:50:6e:1c:83:1b:8b:7b:68:d8:ff:82:
         67:38:e9:91:a0:d8:01:cc:a2:d4:a6:63:c6:d6:a8:a3:ac:d7:
         e7:87:e5:8d:18:7b:6b:ce:65:ff:0d:4b:5c:74:59:84:e0:45:
         5d:75:5b:05:6b:e3:ba:1f:9b:dc:92:51:28:43:eb:6b:a3:d8:
         d3:30:3b:4b:a3:95:8c:8f:63:c9:f3:d4:34:b8:57:22:46:93:
         17:a7:03:02:90:c2:96:87:ba:81:2c:3b:3f:cc:e7:ca:4c:9d:
         bd:d5:31:3a:26:ce:9c:70:a1:74:30:9c:e1:64:2f:be:5c:b0:
         08:a6:c1:ca:5b:c8:c9:38:f9:66:82:aa:50:08:6b:83:3e:58:
         51:a1:70:d0:7e:04:7a:d5:9c:f9:50:c9:ea:f3:6d:97:23:b5:
         0a:17:ab:4a:59:a9:47:11:ad:3b:b5:b4:c5:c3:9c:c6:e8:b0:
         ab:62:70:bb:73:ce:56:61:0c:2b:81:de:92:82:64:d0:5b:b8:
         68:73:e8:33
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBKDANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzYz
MDNCNkFGMTEwLwYDVQQFEyg0MkJEQTZGRjUwNzMxREE3NTc4NzYzNDlCRDBEREY4
QTZBMzgwRDUxMB4XDTI2MTEwNjA3NTk0M1oXDTM2MTIzMTA3NTk0M1owGDEWMBQG
A1UEAxMNNmFlZDg4ZjMtMDYzZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAM5XrjjrP1bmj1I+x7XHllAeqKMOLXKKtA1wYNVtdFehaDUZQs0CuVjJr1mb
Ba7gdmSLo2ZIREUvwbMzX4ZsJtH8h+zdRQbGiNI9H0IJuHdeIIg0mr3qx8/umwKi
/YQCvk6nysiNme/xSLxbIAnqUGpJFky+rQ5T+TK3/9+E0t3dQN13fpxNdoLEuLI5
d6cAPa95F5BinzRhX4VuId+3rw0diPr69cE4qF31eAs81/UWq74IuddNEzEV/y9r
+UQn1ajeVdQYy1HcN4TghJWPQtfHShbKSR1K/c7WZ60zNgEI+3WVy8SZZyAJiAxS
NTMn3LPsEclqcDmp5jnnmPwOfTUCAwEAAaOCAqUwggKhMB0GA1UdDgQWBBT9Ozsa
GjJPlpV+fYl+oRbVsE8ivjAfBgNVHSMEGDAWgBRCvab/UHMdp1eHY0m9Dd+KajgN
UTAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2MzAzQjYvQUVDRjE4Q0FDM0JBMTFGMTk4MzE0QjEwQ0YxRDM4QjAvUXIybV8x
QnpIYWRYaDJOSnZRM2ZpbW80RFZFLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvUXIybV8xQnpIYWRYaDJOSnZRM2ZpbW80RFZFLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MzAzQjYvQUVDRjE4Q0FDM0JBMTFGMTk4MzE0QjEwQ0Yx
RDM4QjAvMDhDMkVBQkFEOUI4MTFGMThCQTM2MkQ4Q0UxRDM4QjAucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGbOHTANBgkqhkiG9w0BAQsF
AAOCAQEACa6KnW867WxzTaNQCQGEJ24mb8rNDlX+r7FQMqJ1ugnxdD/XgM2f9k1r
OJJFeyZwV24vg2NINI/QeGUaL1BuHIMbi3to2P+CZzjpkaDYAcyi1KZjxtaoo6zX
54fljRh7a85l/w1LXHRZhOBFXXVbBWvjuh+b3JJRKEPra6PY0zA7S6OVjI9jyfPU
NLhXIkaTF6cDApDCloe6gSw7P8znykydvdUxOibOnHChdDCc4WQvvlywCKbBylvI
yTj5ZoKqUAhrgz5YUaFw0H4EetWc+VDJ6vNtlyO1CherSlmpRxGtO7W0xcOcxuiw
q2Jwu3POVmEMK4HekoJk0Fu4aHPoMw==
-----END CERTIFICATE-----