Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F369F058/8B32E79A553911E9A572702FF8AEA228/90AD6192A77411F188D6BAE9CE1D38B0.roa
File:                     90AD6192A77411F188D6BAE9CE1D38B0.roa (raw, json)
Hash identifier:          fWmY6i/CSL5/fkan32p1pVRsVhJJHvl/8SPguXbL6cM=
Subject key identifier:   00:87:D1:8F:33:13:93:7E:87:3B:D7:B6:B5:49:19:1C:CC:2D:78:0F
Certificate issuer:       /CN=F369F058AF/serialNumber=C92E885827C67619E13175703017C4442DDFEACF
Certificate serial:       0AF2
Authority key identifier: C9:2E:88:58:27:C6:76:19:E1:31:75:70:30:17:C4:44:2D:DF:EA:CF
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/yS6IWCfGdhnhMXVwMBfERC3f6s8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369F058/8B32E79A553911E9A572702FF8AEA228/90AD6192A77411F188D6BAE9CE1D38B0.roa
Signing time:             Thu 03 Sep 2026 08:50:51 +0000
ROA not before:           Thu 03 Sep 2026 08:50:47 +0000
ROA not after:            Wed 03 Sep 2036 08:50:47 +0000
asID:                     328114
IP address blocks:        102.203.48.0/22 maxlen: 22
                          102.203.48.0/24 maxlen: 24
                          102.203.49.0/24 maxlen: 24
                          102.203.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369F058/8B32E79A553911E9A572702FF8AEA228/yS6IWCfGdhnhMXVwMBfERC3f6s8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369F058/8B32E79A553911E9A572702FF8AEA228/yS6IWCfGdhnhMXVwMBfERC3f6s8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/yS6IWCfGdhnhMXVwMBfERC3f6s8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2802 (0xaf2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369F058AF, serialNumber=C92E885827C67619E13175703017C4442DDFEACF
        Validity
            Not Before: Sep  3 08:50:47 2026 GMT
            Not After : Sep  3 08:50:47 2036 GMT
        Subject: CN=6a9934eb-69a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:85:52:41:6d:12:40:43:39:56:ce:9d:3c:7d:
                    c6:7d:2c:5a:01:d4:c6:2b:3c:f0:f6:31:0b:40:5d:
                    9d:c9:58:af:7a:da:05:0d:83:07:1b:30:61:53:78:
                    c3:57:c0:ad:50:17:8d:53:10:a2:c1:13:a5:be:fe:
                    89:7b:d7:e0:46:22:1a:bc:24:b8:51:18:26:e0:70:
                    e4:f0:e4:6f:e7:df:ce:e8:34:34:3e:fb:97:f8:8e:
                    b8:f8:f6:4a:5b:18:a3:51:5b:18:a9:59:c7:fc:23:
                    f1:b7:78:c8:64:10:a3:cf:71:82:09:01:5e:18:22:
                    0f:e8:83:b4:99:f6:e1:52:3e:30:24:68:9d:9d:f5:
                    56:7f:56:81:c1:8a:f3:d2:f3:da:48:db:14:8c:f8:
                    a9:d7:c0:33:f1:66:c6:b5:48:22:68:72:e7:58:70:
                    3b:df:34:24:f2:a2:7f:20:10:ba:8a:36:7a:ca:04:
                    74:91:3d:b8:f0:1c:02:e5:2c:50:56:ba:31:d3:6b:
                    0d:c3:e4:7c:15:08:27:8c:3a:28:bc:55:e0:f1:2e:
                    1b:04:6f:24:d2:04:f8:3d:d8:2c:ab:ab:b0:5a:3f:
                    b3:63:54:d5:48:96:28:58:56:91:7a:8c:42:f8:40:
                    a5:aa:ae:2f:9b:a9:d6:a2:47:82:12:ba:f9:81:9b:
                    43:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:87:D1:8F:33:13:93:7E:87:3B:D7:B6:B5:49:19:1C:CC:2D:78:0F
            X509v3 Authority Key Identifier:
                keyid:C9:2E:88:58:27:C6:76:19:E1:31:75:70:30:17:C4:44:2D:DF:EA:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369F058/8B32E79A553911E9A572702FF8AEA228/yS6IWCfGdhnhMXVwMBfERC3f6s8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/yS6IWCfGdhnhMXVwMBfERC3f6s8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369F058/8B32E79A553911E9A572702FF8AEA228/90AD6192A77411F188D6BAE9CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.203.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         28:62:e3:57:bf:7c:77:67:a9:e7:0a:1c:d5:f5:40:dc:e3:ce:
         51:2a:7b:8f:8d:fd:c7:67:fc:ae:e3:42:38:16:87:67:c6:c6:
         d4:99:2e:cd:b8:18:78:19:e1:ba:f4:d6:1d:fb:24:b5:2a:b1:
         62:b2:42:e0:9c:16:a2:7b:61:4c:08:3a:40:91:e3:3d:7d:48:
         9d:bd:5e:a8:75:4a:89:d4:e5:c0:63:99:26:0f:1b:24:84:cd:
         97:ee:31:2b:e9:03:2d:0e:d0:6c:3b:4c:c7:bc:1a:5f:0a:fd:
         a6:e5:9d:9c:dd:97:7d:09:81:41:7a:69:b8:9b:f5:66:ae:62:
         3d:d4:ce:d0:33:90:c3:7a:a1:04:c6:aa:c2:f6:98:1a:33:7e:
         ac:50:c6:f6:44:d3:c9:ad:d1:3b:a5:94:26:85:84:0a:36:0d:
         f5:7f:6f:85:d3:86:8b:19:cd:17:ca:22:6a:07:58:0c:a2:8c:
         c3:70:12:54:ac:25:bc:d6:57:fc:49:2c:f4:fd:5b:01:33:1d:
         e0:98:79:74:48:cd:25:6f:36:ff:3f:06:63:55:12:8d:4d:cc:
         62:d2:c8:a1:b8:90:89:74:5a:32:0e:ce:27:92:09:29:1b:ce:
         82:e6:92:2b:1a:74:61:b8:dd:69:83:ae:86:4d:75:ae:3b:d2:
         fc:89:84:35
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCvIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OUYwNThBRjExMC8GA1UEBRMoQzkyRTg4NTgyN0M2NzYxOUUxMzE3NTcwMzAxN0M0
NDQyRERGRUFDRjAeFw0yNjA5MDMwODUwNDdaFw0zNjA5MDMwODUwNDdaMBgxFjAU
BgNVBAMTDTZhOTkzNGViLTY5YTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDQhVJBbRJAQzlWzp08fcZ9LFoB1MYrPPD2MQtAXZ3JWK962gUNgwcbMGFT
eMNXwK1QF41TEKLBE6W+/ol71+BGIhq8JLhRGCbgcOTw5G/n387oNDQ++5f4jrj4
9kpbGKNRWxipWcf8I/G3eMhkEKPPcYIJAV4YIg/og7SZ9uFSPjAkaJ2d9VZ/VoHB
ivPS89pI2xSM+KnXwDPxZsa1SCJocudYcDvfNCTyon8gELqKNnrKBHSRPbjwHALl
LFBWujHTaw3D5HwVCCeMOii8VeDxLhsEbyTSBPg92Cyrq7BaP7NjVNVIlihYVpF6
jEL4QKWqri+bqdaiR4ISuvmBm0OtAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUAIfR
jzMTk36HO9e2tUkZHMwteA8wHwYDVR0jBBgwFoAUyS6IWCfGdhnhMXVwMBfERC3f
6s8wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjlGMDU4LzhCMzJFNzlBNTUzOTExRTlBNTcyNzAyRkY4QUVBMjI4L3lTNklX
Q2ZHZGhuaE1YVndNQmZFUkMzZjZzOC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3lTNklXQ2ZHZGhuaE1YVndNQmZFUkMzZjZzOC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjlGMDU4LzhCMzJFNzlBNTUzOTExRTlBNTcyNzAyRkY4
QUVBMjI4LzkwQUQ2MTkyQTc3NDExRjE4OEQ2QkFFOUNFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJmyzAwDQYJKoZIhvcNAQEL
BQADggEBAChi41e/fHdnqecKHNX1QNzjzlEqe4+N/cdn/K7jQjgWh2fGxtSZLs24
GHgZ4br01h37JLUqsWKyQuCcFqJ7YUwIOkCR4z19SJ29Xqh1SonU5cBjmSYPGySE
zZfuMSvpAy0O0Gw7TMe8Gl8K/ablnZzdl30JgUF6abib9WauYj3UztAzkMN6oQTG
qsL2mBozfqxQxvZE08mt0TullCaFhAo2DfV/b4XThosZzRfKImoHWAyijMNwElSs
JbzWV/xJLPT9WwEzHeCYeXRIzSVvNv8/BmNVEo1NzGLSyKG4kIl0WjIOzieSCSkb
zoLmkisadGG43WmDroZNda470vyJhDU=
-----END CERTIFICATE-----