Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F367917C/00DB23C4B75A11F1953AF9B0CE1D38B0/1C600666BCA311F1A05132B3CE1D38B0.roa
File:                     1C600666BCA311F1A05132B3CE1D38B0.roa (raw, json)
Hash identifier:          TR8171nphEW7FSyz10G+DypQGdrKhMK1w29QUehHjtI=
Subject key identifier:   B5:51:21:E1:0D:28:2A:89:92:42:C1:A3:2A:A3:E2:89:F2:50:07:B2
Certificate issuer:       /CN=F367917CAF/serialNumber=D3ABD956F45371FE29FC9298A95AFCB2F9B83D2D
Certificate serial:       0B
Authority key identifier: D3:AB:D9:56:F4:53:71:FE:29:FC:92:98:A9:5A:FC:B2:F9:B8:3D:2D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/06vZVvRTcf4p_JKYqVr8svm4PS0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367917C/00DB23C4B75A11F1953AF9B0CE1D38B0/1C600666BCA311F1A05132B3CE1D38B0.roa
Signing time:             Wed 30 Sep 2026 07:46:57 +0000
ROA not before:           Wed 30 Sep 2026 07:46:53 +0000
ROA not after:            Sun 30 Sep 2029 07:46:53 +0000
asID:                     37381
IP address blocks:        102.201.192.0/23 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367917C/00DB23C4B75A11F1953AF9B0CE1D38B0/06vZVvRTcf4p_JKYqVr8svm4PS0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367917C/00DB23C4B75A11F1953AF9B0CE1D38B0/06vZVvRTcf4p_JKYqVr8svm4PS0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/06vZVvRTcf4p_JKYqVr8svm4PS0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 08 Oct 2026 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11 (0xb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367917CAF, serialNumber=D3ABD956F45371FE29FC9298A95AFCB2F9B83D2D
        Validity
            Not Before: Sep 30 07:46:53 2026 GMT
            Not After : Sep 30 07:46:53 2029 GMT
        Subject: CN=6abcbe71-d297
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:84:63:f9:16:df:6f:45:62:77:3b:d0:7c:a5:
                    25:e1:82:dc:a6:5f:a4:c2:61:88:b8:a4:b6:58:d5:
                    d4:0f:bb:10:8f:47:85:8f:8f:90:09:f7:8a:57:53:
                    b5:5c:3b:bc:7f:df:9f:08:51:95:d3:55:3d:c7:20:
                    5e:3e:cf:79:3a:83:3b:eb:61:f6:f0:11:3e:a9:9c:
                    f6:47:36:0e:74:a4:c4:22:44:66:98:79:af:27:91:
                    c2:bd:91:a0:25:2c:8c:78:3d:ba:d2:84:32:2d:2b:
                    83:2e:31:8b:43:46:84:31:9a:53:1c:0c:ce:bb:6a:
                    0e:66:c1:38:c6:3a:df:4a:3c:b7:aa:48:23:ca:79:
                    c5:5e:c7:ea:0c:36:82:f3:68:aa:76:57:25:cb:ff:
                    b2:41:8b:49:ef:b5:69:95:2c:0b:13:06:7a:54:09:
                    cd:75:2b:45:27:55:4c:32:d7:c7:2e:c7:ea:24:21:
                    2d:3b:55:4b:06:6f:cb:59:af:8f:ca:6e:42:32:84:
                    54:c4:4e:6f:85:ef:bd:a3:f8:f8:af:09:d1:ed:51:
                    b0:96:16:bf:cd:95:f5:52:e7:0b:56:85:c5:76:19:
                    4e:00:28:4a:ee:a6:97:d8:3c:1b:7d:0d:52:a2:f0:
                    e3:c4:12:ea:d5:fd:66:1f:b3:ff:12:72:1d:9f:2a:
                    d6:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:51:21:E1:0D:28:2A:89:92:42:C1:A3:2A:A3:E2:89:F2:50:07:B2
            X509v3 Authority Key Identifier:
                keyid:D3:AB:D9:56:F4:53:71:FE:29:FC:92:98:A9:5A:FC:B2:F9:B8:3D:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367917C/00DB23C4B75A11F1953AF9B0CE1D38B0/06vZVvRTcf4p_JKYqVr8svm4PS0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/06vZVvRTcf4p_JKYqVr8svm4PS0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367917C/00DB23C4B75A11F1953AF9B0CE1D38B0/1C600666BCA311F1A05132B3CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.201.192.0/23

    Signature Algorithm: sha256WithRSAEncryption
         72:9e:b8:b0:bd:bf:5d:ad:9d:9e:24:2d:64:ec:52:19:32:5c:
         dc:ef:da:9b:29:1a:ad:4f:6c:56:ec:1d:d2:cc:37:5c:fd:a3:
         eb:3d:a4:2f:ab:ce:05:43:6b:44:e5:a5:ae:f7:10:37:4a:bc:
         96:81:6a:e3:5a:80:7d:8f:10:56:a6:55:2e:00:b2:05:0b:82:
         38:47:b5:5d:85:a4:10:aa:43:01:5c:74:1b:85:c3:a0:c1:89:
         47:da:95:b7:87:43:80:27:27:d6:c9:a4:8a:c6:5f:e2:21:fb:
         fa:d0:09:85:5a:db:3b:fc:4d:08:9a:34:0e:24:c9:30:5e:c8:
         5b:9d:43:4a:34:16:de:e6:ed:ed:ba:13:4c:0a:9c:7a:4c:aa:
         bc:45:8a:a0:d9:30:f7:27:7b:19:bc:ef:0e:2c:93:ae:00:41:
         65:6c:e4:d9:19:aa:a3:0f:3f:88:c3:0c:de:ca:de:be:34:fc:
         6c:3a:5d:ad:95:d2:e5:7b:11:9e:66:01:96:af:ae:df:d7:e7:
         76:d5:f9:e0:9b:55:f8:a0:c4:95:c5:4b:22:5b:34:ac:a5:83:
         ef:c4:8a:1b:45:21:6a:2c:a8:37:92:ce:7e:7b:a5:f4:0e:8a:
         92:1a:82:5d:eb:18:3b:30:db:82:7a:ce:04:f3:f8:a0:ee:82:
         63:20:67:85
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBCzANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY3
OTE3Q0FGMTEwLwYDVQQFEyhEM0FCRDk1NkY0NTM3MUZFMjlGQzkyOThBOTVBRkNC
MkY5QjgzRDJEMB4XDTI2MDkzMDA3NDY1M1oXDTI5MDkzMDA3NDY1M1owGDEWMBQG
A1UEAxMNNmFiY2JlNzEtZDI5NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMSEY/kW329FYnc70HylJeGC3KZfpMJhiLiktljV1A+7EI9HhY+PkAn3ildT
tVw7vH/fnwhRldNVPccgXj7PeTqDO+th9vARPqmc9kc2DnSkxCJEZph5ryeRwr2R
oCUsjHg9utKEMi0rgy4xi0NGhDGaUxwMzrtqDmbBOMY630o8t6pII8p5xV7H6gw2
gvNoqnZXJcv/skGLSe+1aZUsCxMGelQJzXUrRSdVTDLXxy7H6iQhLTtVSwZvy1mv
j8puQjKEVMROb4XvvaP4+K8J0e1RsJYWv82V9VLnC1aFxXYZTgAoSu6ml9g8G30N
UqLw48QS6tX9Zh+z/xJyHZ8q1usCAwEAAaOCAqUwggKhMB0GA1UdDgQWBBS1USHh
DSgqiZJCwaMqo+KJ8lAHsjAfBgNVHSMEGDAWgBTTq9lW9FNx/in8kpipWvyy+bg9
LTAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2NzkxN0MvMDBEQjIzQzRCNzVBMTFGMTk1M0FGOUIwQ0UxRDM4QjAvMDZ2WlZ2
UlRjZjRwX0pLWXFWcjhzdm00UFMwLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvMDZ2WlZ2UlRjZjRwX0pLWXFWcjhzdm00UFMwLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NzkxN0MvMDBEQjIzQzRCNzVBMTFGMTk1M0FGOUIwQ0Ux
RDM4QjAvMUM2MDA2NjZCQ0EzMTFGMUEwNTEzMkIzQ0UxRDM4QjAucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWbJwDANBgkqhkiG9w0BAQsF
AAOCAQEAcp64sL2/Xa2dniQtZOxSGTJc3O/amykarU9sVuwd0sw3XP2j6z2kL6vO
BUNrROWlrvcQN0q8loFq41qAfY8QVqZVLgCyBQuCOEe1XYWkEKpDAVx0G4XDoMGJ
R9qVt4dDgCcn1smkisZf4iH7+tAJhVrbO/xNCJo0DiTJMF7IW51DSjQW3ubt7boT
TAqcekyqvEWKoNkw9yd7GbzvDiyTrgBBZWzk2Rmqow8/iMMM3srevjT8bDpdrZXS
5XsRnmYBlq+u39fndtX54JtV+KDElcVLIls0rKWD78SKG0UhaiyoN5LOfnul9A6K
khqCXesYOzDbgnrOBPP4oO6CYyBnhQ==
-----END CERTIFICATE-----