Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36303B6/AECF18CAC3BA11F198314B10CF1D38B0/D9C3BA46D9B711F18CBC3DD8CE1D38B0.roa
File:                     D9C3BA46D9B711F18CBC3DD8CE1D38B0.roa (raw, json)
Hash identifier:          6/VjH5DzF0b2K7oIs/16apoG8UKlyiL/G8le11t2hts=
Subject key identifier:   66:12:E6:F2:00:98:D3:B4:CE:7C:BC:E1:1B:B6:CB:19:18:6D:43:8D
Certificate issuer:       /CN=F36303B6AF/serialNumber=42BDA6FF50731DA757876349BD0DDF8A6A380D51
Certificate serial:       26
Authority key identifier: 42:BD:A6:FF:50:73:1D:A7:57:87:63:49:BD:0D:DF:8A:6A:38:0D:51
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Qr2m_1BzHadXh2NJvQ3fimo4DVE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36303B6/AECF18CAC3BA11F198314B10CF1D38B0/D9C3BA46D9B711F18CBC3DD8CE1D38B0.roa
Signing time:             Fri 06 Nov 2026 07:58:28 +0000
ROA not before:           Fri 06 Nov 2026 07:58:24 +0000
ROA not after:            Wed 31 Dec 2036 07:58:24 +0000
asID:                     37037
IP address blocks:        102.206.28.0/24 maxlen: 24 (superfluous maxlen)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36303B6/AECF18CAC3BA11F198314B10CF1D38B0/Qr2m_1BzHadXh2NJvQ3fimo4DVE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36303B6/AECF18CAC3BA11F198314B10CF1D38B0/Qr2m_1BzHadXh2NJvQ3fimo4DVE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Qr2m_1BzHadXh2NJvQ3fimo4DVE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 17 Nov 2026 00:08:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 38 (0x26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36303B6AF, serialNumber=42BDA6FF50731DA757876349BD0DDF8A6A380D51
        Validity
            Not Before: Nov  6 07:58:24 2026 GMT
            Not After : Dec 31 07:58:24 2036 GMT
        Subject: CN=6aed88a4-0bb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:24:81:90:66:14:ea:b3:73:00:9f:8e:fe:e8:
                    d8:9a:30:2f:d6:6f:6f:d3:d7:a1:6f:6a:a1:1c:0f:
                    8b:15:38:1d:9c:a6:75:24:ad:9e:3c:99:e6:8c:58:
                    aa:d3:6d:b8:c5:7b:41:e7:8e:0b:d3:28:e7:5d:a6:
                    13:27:78:6f:88:55:36:c6:06:1f:cc:9b:3d:9b:90:
                    bb:02:e3:5d:1b:33:d8:a6:c9:87:33:8e:75:61:e0:
                    c6:0f:f5:99:72:56:a8:29:0b:db:23:1a:ad:ef:32:
                    54:18:41:a9:db:b4:43:5c:a1:5a:df:51:de:74:9c:
                    b2:87:f8:49:a5:7d:77:c2:8e:41:74:b9:6d:4f:60:
                    d9:c7:cf:e7:f6:9c:31:ae:b3:5d:e4:33:77:95:5c:
                    81:c8:20:e4:18:41:f3:f6:2a:88:1d:ce:01:37:b3:
                    30:8f:18:fe:e0:bc:e2:2a:cd:25:2a:43:e9:9e:0f:
                    72:de:50:1b:04:fd:f6:56:7b:84:54:22:0d:71:45:
                    f8:cf:17:d3:1e:e0:a7:8d:cc:56:ae:c1:7f:07:5f:
                    15:2d:4c:03:55:41:ca:fb:6e:9d:e3:5c:95:72:eb:
                    7f:6c:2b:1d:07:f7:f6:6b:61:7d:06:33:0d:49:3f:
                    28:0b:51:75:14:b3:02:46:a7:de:df:bb:02:ce:f3:
                    d4:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:12:E6:F2:00:98:D3:B4:CE:7C:BC:E1:1B:B6:CB:19:18:6D:43:8D
            X509v3 Authority Key Identifier:
                keyid:42:BD:A6:FF:50:73:1D:A7:57:87:63:49:BD:0D:DF:8A:6A:38:0D:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36303B6/AECF18CAC3BA11F198314B10CF1D38B0/Qr2m_1BzHadXh2NJvQ3fimo4DVE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Qr2m_1BzHadXh2NJvQ3fimo4DVE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36303B6/AECF18CAC3BA11F198314B10CF1D38B0/D9C3BA46D9B711F18CBC3DD8CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.206.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:0e:10:26:c6:78:57:bb:ba:c3:c4:df:96:2f:ef:55:2b:be:
         a7:b6:fa:be:6b:1c:44:ff:e9:92:5a:4f:9c:69:a9:db:20:52:
         5b:de:af:1c:3a:2f:58:b5:45:0f:b9:7c:99:b4:09:76:5a:62:
         5f:21:d4:f9:bf:6e:53:b8:0c:46:c6:f9:e1:a8:54:28:3d:96:
         49:5a:84:a4:19:57:cc:af:ce:94:74:86:b3:96:d8:32:02:06:
         70:2d:97:df:0e:1e:49:ef:ba:99:b9:16:b9:a9:33:34:a7:fe:
         f4:25:3e:b0:18:b1:88:a5:6d:9a:85:0a:2b:7d:79:74:65:a3:
         03:88:3a:27:a7:4d:2b:03:ca:52:f0:bf:0e:7e:7a:96:06:d3:
         e7:d0:11:87:e8:e2:72:3e:ff:be:d0:3b:81:70:fa:06:60:ba:
         14:5e:fb:59:0d:c1:ec:6e:3f:3e:e6:4f:a6:dc:3f:2b:d6:17:
         be:78:d2:80:b9:1b:50:81:ff:7c:b9:f5:6f:b8:05:ed:9c:57:
         a2:f6:e7:67:0c:bc:06:72:29:a2:91:ac:89:7a:c9:0a:25:d9:
         d8:a8:24:c6:21:1d:20:ba:23:71:01:93:bc:37:51:52:89:78:
         11:22:6f:cd:96:ff:41:51:4d:c4:d6:ff:71:82:00:19:82:fd:
         9b:de:82:5d
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBJjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzYz
MDNCNkFGMTEwLwYDVQQFEyg0MkJEQTZGRjUwNzMxREE3NTc4NzYzNDlCRDBEREY4
QTZBMzgwRDUxMB4XDTI2MTEwNjA3NTgyNFoXDTM2MTIzMTA3NTgyNFowGDEWMBQG
A1UEAxMNNmFlZDg4YTQtMGJiMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAPwkgZBmFOqzcwCfjv7o2JowL9Zvb9PXoW9qoRwPixU4HZymdSStnjyZ5oxY
qtNtuMV7QeeOC9Mo512mEyd4b4hVNsYGH8ybPZuQuwLjXRsz2KbJhzOOdWHgxg/1
mXJWqCkL2yMare8yVBhBqdu0Q1yhWt9R3nScsof4SaV9d8KOQXS5bU9g2cfP5/ac
Ma6zXeQzd5Vcgcgg5BhB8/YqiB3OATezMI8Y/uC84irNJSpD6Z4Pct5QGwT99lZ7
hFQiDXFF+M8X0x7gp43MVq7BfwdfFS1MA1VByvtuneNclXLrf2wrHQf39mthfQYz
DUk/KAtRdRSzAkan3t+7As7z1CUCAwEAAaOCAqUwggKhMB0GA1UdDgQWBBRmEuby
AJjTtM58vOEbtssZGG1DjTAfBgNVHSMEGDAWgBRCvab/UHMdp1eHY0m9Dd+KajgN
UTAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2MzAzQjYvQUVDRjE4Q0FDM0JBMTFGMTk4MzE0QjEwQ0YxRDM4QjAvUXIybV8x
QnpIYWRYaDJOSnZRM2ZpbW80RFZFLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvUXIybV8xQnpIYWRYaDJOSnZRM2ZpbW80RFZFLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MzAzQjYvQUVDRjE4Q0FDM0JBMTFGMTk4MzE0QjEwQ0Yx
RDM4QjAvRDlDM0JBNDZEOUI3MTFGMThDQkMzREQ4Q0UxRDM4QjAucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGbOHDANBgkqhkiG9w0BAQsF
AAOCAQEAqg4QJsZ4V7u6w8Tfli/vVSu+p7b6vmscRP/pklpPnGmp2yBSW96vHDov
WLVFD7l8mbQJdlpiXyHU+b9uU7gMRsb54ahUKD2WSVqEpBlXzK/OlHSGs5bYMgIG
cC2X3w4eSe+6mbkWuakzNKf+9CU+sBixiKVtmoUKK315dGWjA4g6J6dNKwPKUvC/
Dn56lgbT59ARh+jicj7/vtA7gXD6BmC6FF77WQ3B7G4/PuZPptw/K9YXvnjSgLkb
UIH/fLn1b7gF7ZxXovbnZwy8BnIpopGsiXrJCiXZ2KgkxiEdILojcQGTvDdRUol4
ESJvzZb/QVFNxNb/cYIAGYL9m96CXQ==
-----END CERTIFICATE-----