Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368CB9C/FE452F46528D11F1931543E1CE1D38B0/BCD184B8BDA611F1933A93C8CE1D38B0.roa
File:                     BCD184B8BDA611F1933A93C8CE1D38B0.roa (raw, json)
Hash identifier:          PMpgQUlvGywhYVxfHxmSeAuK4wapTHI1PVbZxrKjNFU=
Subject key identifier:   DE:80:79:76:B5:D1:73:8F:A6:61:1F:07:0D:EE:7E:02:8B:45:D3:1E
Certificate issuer:       /CN=F368CB9CAF/serialNumber=4521AB7BCBA9E5CE99C71AFEBF237248B6A00C04
Certificate serial:       8D
Authority key identifier: 45:21:AB:7B:CB:A9:E5:CE:99:C7:1A:FE:BF:23:72:48:B6:A0:0C:04
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/RSGre8up5c6Zxxr-vyNySLagDAQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368CB9C/FE452F46528D11F1931543E1CE1D38B0/BCD184B8BDA611F1933A93C8CE1D38B0.roa
Signing time:             Thu 01 Oct 2026 14:45:26 +0000
ROA not before:           Thu 01 Oct 2026 14:45:22 +0000
ROA not after:            Mon 02 Oct 2028 14:45:22 +0000
asID:                     329341
IP address blocks:        102.201.136.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368CB9C/FE452F46528D11F1931543E1CE1D38B0/RSGre8up5c6Zxxr-vyNySLagDAQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368CB9C/FE452F46528D11F1931543E1CE1D38B0/RSGre8up5c6Zxxr-vyNySLagDAQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/RSGre8up5c6Zxxr-vyNySLagDAQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 04 Oct 2026 05:36:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 141 (0x8d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368CB9CAF, serialNumber=4521AB7BCBA9E5CE99C71AFEBF237248B6A00C04
        Validity
            Not Before: Oct  1 14:45:22 2026 GMT
            Not After : Oct  2 14:45:22 2028 GMT
        Subject: CN=6abe7206-cb32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:1f:36:cb:88:23:2f:f5:42:9a:aa:6f:94:f7:
                    16:fd:d5:e8:6d:2f:58:9b:8b:cb:0e:0c:e8:f3:7c:
                    d7:29:76:51:a5:2f:b0:b6:4a:36:a1:a4:b5:29:a2:
                    66:04:23:11:21:1b:f3:7c:87:ea:bf:ea:90:03:49:
                    67:ff:bc:f9:e3:30:13:ee:93:e5:8b:fb:06:26:7f:
                    d3:30:4f:17:fb:3f:90:17:08:66:8e:c1:43:a4:e7:
                    c6:51:de:a0:ed:a7:4c:ed:45:cf:b2:d0:71:1a:2b:
                    d1:b6:77:38:bb:52:ad:8f:80:3e:3e:3d:d4:27:1c:
                    6d:d6:85:1a:eb:7a:c0:b6:f6:bc:69:a2:3b:9a:ed:
                    25:f9:67:36:67:b2:bd:07:d7:9f:e2:50:ff:ea:fa:
                    42:3b:f3:41:cb:fe:a3:d8:42:ba:b2:90:17:27:83:
                    f3:e8:44:7d:1d:ae:c8:36:3c:a4:ab:d2:a3:3a:32:
                    85:57:f1:76:5d:46:67:a7:de:c2:79:dc:c0:8b:da:
                    f5:2c:f5:9d:e2:5f:a3:80:a8:6c:96:60:ab:b4:fa:
                    84:ac:cd:82:05:fd:17:60:4c:8d:8a:61:cf:be:5d:
                    14:c7:eb:d8:0f:53:b0:85:ff:32:c1:e4:fe:a0:fe:
                    08:19:80:13:11:bf:4b:f7:5d:58:45:7c:5c:e9:97:
                    13:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:80:79:76:B5:D1:73:8F:A6:61:1F:07:0D:EE:7E:02:8B:45:D3:1E
            X509v3 Authority Key Identifier:
                keyid:45:21:AB:7B:CB:A9:E5:CE:99:C7:1A:FE:BF:23:72:48:B6:A0:0C:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368CB9C/FE452F46528D11F1931543E1CE1D38B0/RSGre8up5c6Zxxr-vyNySLagDAQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/RSGre8up5c6Zxxr-vyNySLagDAQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368CB9C/FE452F46528D11F1931543E1CE1D38B0/BCD184B8BDA611F1933A93C8CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.201.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a6:0e:b5:ca:ae:a9:77:77:81:14:b7:4b:df:5d:4d:16:b6:0a:
         92:69:39:c6:36:02:a9:af:f4:36:29:94:ab:89:1f:95:62:bd:
         64:3c:0a:25:a8:0d:53:aa:a3:79:93:64:7b:b2:60:49:d3:80:
         94:95:79:c2:3f:10:24:ff:a9:5a:a4:1c:72:09:af:6d:ca:26:
         51:9c:53:35:b0:f0:c5:ab:b3:e1:ee:e7:89:cc:d7:cb:e7:a6:
         b6:a5:ce:d0:b1:c6:69:83:ba:3f:80:da:a0:f6:89:67:f2:1f:
         71:63:5a:60:ff:61:b9:ee:58:d0:7a:0b:bf:22:79:85:cf:31:
         34:29:28:dc:fe:b3:9f:ae:2e:5a:d3:da:74:f8:d1:a1:bc:a1:
         a4:6e:5d:1f:58:35:7a:80:49:b4:b9:04:c7:a5:6c:52:4b:4b:
         bd:03:bf:fa:03:29:f7:2f:1a:d9:94:3b:62:30:de:1f:20:92:
         fe:7c:3b:84:01:9a:ab:43:e3:ec:a3:00:03:b7:17:ba:79:30:
         5d:c7:54:e8:20:90:97:8b:91:71:78:e3:49:4b:77:7e:ee:3e:
         3e:3b:db:b8:01:8a:84:52:b2:3d:e5:ad:be:70:14:da:9b:4a:
         ad:69:0d:45:06:da:bd:49:d6:f1:77:ad:ac:0f:78:20:67:f5:
         75:f4:ed:26
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICAI0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OENCOUNBRjExMC8GA1UEBRMoNDUyMUFCN0JDQkE5RTVDRTk5QzcxQUZFQkYyMzcy
NDhCNkEwMEMwNDAeFw0yNjEwMDExNDQ1MjJaFw0yODEwMDIxNDQ1MjJaMBgxFjAU
BgNVBAMTDTZhYmU3MjA2LWNiMzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDEHzbLiCMv9UKaqm+U9xb91ehtL1ibi8sODOjzfNcpdlGlL7C2SjahpLUp
omYEIxEhG/N8h+q/6pADSWf/vPnjMBPuk+WL+wYmf9MwTxf7P5AXCGaOwUOk58ZR
3qDtp0ztRc+y0HEaK9G2dzi7Uq2PgD4+PdQnHG3WhRrresC29rxpojua7SX5ZzZn
sr0H15/iUP/q+kI780HL/qPYQrqykBcng/PoRH0drsg2PKSr0qM6MoVX8XZdRmen
3sJ53MCL2vUs9Z3iX6OAqGyWYKu0+oSszYIF/RdgTI2KYc++XRTH69gPU7CF/zLB
5P6g/ggZgBMRv0v3XVhFfFzplxOXAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU3oB5
drXRc4+mYR8HDe5+AotF0x4wHwYDVR0jBBgwFoAURSGre8up5c6Zxxr+vyNySLag
DAQwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhDQjlDL0ZFNDUyRjQ2NTI4RDExRjE5MzE1NDNFMUNFMUQzOEIwL1JTR3Jl
OHVwNWM2Wnh4ci12eU55U0xhZ0RBUS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1JTR3JlOHVwNWM2Wnh4ci12eU55U0xhZ0RBUS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhDQjlDL0ZFNDUyRjQ2NTI4RDExRjE5MzE1NDNFMUNF
MUQzOEIwL0JDRDE4NEI4QkRBNjExRjE5MzNBOTNDOENFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJmyYgwDQYJKoZIhvcNAQEL
BQADggEBAKYOtcquqXd3gRS3S99dTRa2CpJpOcY2Aqmv9DYplKuJH5VivWQ8CiWo
DVOqo3mTZHuyYEnTgJSVecI/ECT/qVqkHHIJr23KJlGcUzWw8MWrs+Hu54nM18vn
pralztCxxmmDuj+A2qD2iWfyH3FjWmD/YbnuWNB6C78ieYXPMTQpKNz+s5+uLlrT
2nT40aG8oaRuXR9YNXqASbS5BMelbFJLS70Dv/oDKfcvGtmUO2Iw3h8gkv58O4QB
mqtD4+yjAAO3F7p5MF3HVOggkJeLkXF440lLd37uPj4727gBioRSsj3lrb5wFNqb
Sq1pDUUG2r1J1vF3rawPeCBn9XX07SY=
-----END CERTIFICATE-----