Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/2766BE02B27011F18DB950EDCE1D38B0.roa
File:                     2766BE02B27011F18DB950EDCE1D38B0.roa (raw, json)
Hash identifier:          jRPiAT3GNUZhJyV9YyaFmwomitbSTPPwzqLOeUIGVQw=
Subject key identifier:   29:6B:00:0F:DC:14:3C:A2:EC:79:AE:F4:F5:BC:C8:FA:2B:F4:7E:59
Certificate issuer:       /CN=F36337E5AF/serialNumber=C9C129FBC3C8273A462955A9528E0AAC2F2E982C
Certificate serial:       02F8
Authority key identifier: C9:C1:29:FB:C3:C8:27:3A:46:29:55:A9:52:8E:0A:AC:2F:2E:98:2C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ycEp-8PIJzpGKVWpUo4KrC8umCw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/2766BE02B27011F18DB950EDCE1D38B0.roa
Signing time:             Thu 17 Sep 2026 08:16:59 +0000
ROA not before:           Thu 17 Sep 2026 08:16:55 +0000
ROA not after:            Fri 17 Sep 2027 08:16:55 +0000
asID:                     329403
IP address blocks:        102.206.68.0/24 maxlen: 24
                          102.206.69.0/24 maxlen: 24
                          102.206.70.0/24 maxlen: 24
                          102.206.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/ycEp-8PIJzpGKVWpUo4KrC8umCw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/ycEp-8PIJzpGKVWpUo4KrC8umCw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ycEp-8PIJzpGKVWpUo4KrC8umCw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 760 (0x2f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36337E5AF, serialNumber=C9C129FBC3C8273A462955A9528E0AAC2F2E982C
        Validity
            Not Before: Sep 17 08:16:55 2026 GMT
            Not After : Sep 17 08:16:55 2027 GMT
        Subject: CN=6aaba1fb-7ee7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:8d:ea:1a:8e:c8:d3:88:2e:1d:86:5d:9e:c6:
                    bc:59:5c:30:f7:7b:01:50:25:69:5c:95:eb:2f:1b:
                    e6:23:bd:a1:c6:d4:f6:cb:d0:f0:e8:29:c5:ce:4a:
                    11:7d:a8:be:7b:ca:9b:d8:ba:e1:1b:80:6e:48:71:
                    23:8c:47:3e:60:a4:2f:da:ff:48:dc:94:42:b8:ad:
                    b6:f9:e8:76:54:0c:83:ed:d4:11:76:8f:c3:9c:13:
                    de:2b:d9:56:df:d0:3f:f1:d8:0f:82:ac:4a:a2:88:
                    1a:16:f5:b7:59:23:b4:cf:11:0c:8f:23:c6:80:4b:
                    d3:b9:3d:da:62:f3:22:6d:25:10:c5:fd:2a:d3:9b:
                    2a:f1:7a:1d:80:5e:db:36:32:3c:be:e1:2e:c4:55:
                    58:b6:0c:f0:0b:9d:01:08:9f:f3:b7:1a:07:39:2e:
                    f3:23:4c:d4:89:c8:99:d8:5c:0d:11:80:2d:3f:7b:
                    07:e3:b8:32:56:4d:b1:e2:35:cd:1a:ee:43:85:2a:
                    79:e6:43:ba:ff:7b:fe:30:12:5d:11:14:25:62:8f:
                    f8:3c:ca:4d:37:f6:3c:67:ef:f9:6d:f1:22:20:87:
                    86:f9:fe:25:79:00:fc:04:39:e5:96:b2:2b:44:5a:
                    ac:58:c8:c1:09:5c:09:22:8e:61:55:ac:87:6a:e5:
                    c0:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:6B:00:0F:DC:14:3C:A2:EC:79:AE:F4:F5:BC:C8:FA:2B:F4:7E:59
            X509v3 Authority Key Identifier:
                keyid:C9:C1:29:FB:C3:C8:27:3A:46:29:55:A9:52:8E:0A:AC:2F:2E:98:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/ycEp-8PIJzpGKVWpUo4KrC8umCw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ycEp-8PIJzpGKVWpUo4KrC8umCw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/2766BE02B27011F18DB950EDCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.206.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         17:98:0e:a8:8d:01:6f:75:c6:50:2e:e5:fa:d9:67:f7:0b:49:
         ff:bd:92:16:85:27:54:0e:62:92:03:de:ff:23:02:9e:0e:1c:
         e4:ed:f0:71:a7:d4:dc:cd:24:ee:2e:1b:22:14:05:be:41:80:
         96:ea:62:ac:0c:41:91:f0:a8:2a:be:6d:39:91:01:cd:02:82:
         05:c4:15:74:00:11:1a:19:8d:eb:8a:c1:b1:2f:53:d6:18:dc:
         be:bf:80:47:97:f3:97:3f:78:d5:08:d8:ac:6f:b7:51:94:9d:
         95:cf:1b:d3:c5:b3:5c:fc:73:11:5c:38:f8:9e:bb:d1:7f:3b:
         5c:56:38:54:ac:89:a3:b7:84:11:0a:00:ef:7e:d9:ab:a8:d5:
         42:87:32:95:35:0c:33:65:69:0a:30:9b:90:37:cb:85:74:3c:
         05:00:18:75:d6:37:d4:0c:d8:04:dc:0d:0c:a7:50:95:64:1f:
         7f:51:b9:e3:dd:b7:18:80:c9:33:94:1b:7f:f9:b7:aa:73:46:
         ad:e0:af:ad:b2:f4:16:2f:ff:b6:c2:48:56:32:73:36:56:b0:
         bb:35:a4:cc:18:a3:12:d1:33:97:0c:8b:3d:15:e6:cf:ff:b0:
         75:4e:be:f9:99:08:ed:2b:90:61:d2:f6:af:7e:13:13:f0:c1:
         50:9d:71:97
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICAvgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MzM3RTVBRjExMC8GA1UEBRMoQzlDMTI5RkJDM0M4MjczQTQ2Mjk1NUE5NTI4RTBB
QUMyRjJFOTgyQzAeFw0yNjA5MTcwODE2NTVaFw0yNzA5MTcwODE2NTVaMBgxFjAU
BgNVBAMTDTZhYWJhMWZiLTdlZTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCxjeoajsjTiC4dhl2exrxZXDD3ewFQJWlclesvG+YjvaHG1PbL0PDoKcXO
ShF9qL57ypvYuuEbgG5IcSOMRz5gpC/a/0jclEK4rbb56HZUDIPt1BF2j8OcE94r
2Vbf0D/x2A+CrEqiiBoW9bdZI7TPEQyPI8aAS9O5Pdpi8yJtJRDF/SrTmyrxeh2A
Xts2Mjy+4S7EVVi2DPALnQEIn/O3Ggc5LvMjTNSJyJnYXA0RgC0/ewfjuDJWTbHi
Nc0a7kOFKnnmQ7r/e/4wEl0RFCVij/g8yk039jxn7/lt8SIgh4b5/iV5APwEOeWW
sitEWqxYyMEJXAkijmFVrIdq5cD1AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUKWsA
D9wUPKLsea709bzI+iv0flkwHwYDVR0jBBgwFoAUycEp+8PIJzpGKVWpUo4KrC8u
mCwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjMzN0U1Lzk3OUJBNjQwN0ZFMzExRUY4MzQ3NTU4Njc2MkU5NTFBL3ljRXAt
OFBJSnpwR0tWV3BVbzRLckM4dW1Ddy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3ljRXAtOFBJSnpwR0tWV3BVbzRLckM4dW1Ddy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjMzN0U1Lzk3OUJBNjQwN0ZFMzExRUY4MzQ3NTU4Njc2
MkU5NTFBLzI3NjZCRTAyQjI3MDExRjE4REI5NTBFRENFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJmzkQwDQYJKoZIhvcNAQEL
BQADggEBABeYDqiNAW91xlAu5frZZ/cLSf+9khaFJ1QOYpID3v8jAp4OHOTt8HGn
1NzNJO4uGyIUBb5BgJbqYqwMQZHwqCq+bTmRAc0CggXEFXQAERoZjeuKwbEvU9YY
3L6/gEeX85c/eNUI2Kxvt1GUnZXPG9PFs1z8cxFcOPieu9F/O1xWOFSsiaO3hBEK
AO9+2auo1UKHMpU1DDNlaQowm5A3y4V0PAUAGHXWN9QM2ATcDQynUJVkH39RuePd
txiAyTOUG3/5t6pzRq3gr62y9BYv/7bCSFYyczZWsLs1pMwYoxLRM5cMiz0V5s//
sHVOvvmZCO0rkGHS9q9+ExPwwVCdcZc=
-----END CERTIFICATE-----