Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362B8A8/B5C94E4C9C2511EBAD78FF53F8AEA228/4895434C1EC211F192F83FA5DAE4EC9C.roa
File:                     4895434C1EC211F192F83FA5DAE4EC9C.roa (raw, json)
Hash identifier:          DtVdmxGdE0bAVJw+SCyGkfCE6F+QttClsmmRrI9PYRY=
Subject key identifier:   D0:4B:6C:AB:B3:D9:82:35:A4:45:62:96:00:F0:AD:CF:1F:1D:A6:CA
Certificate issuer:       /CN=F362B8A8AF/serialNumber=DF376480DCF07A1B7AD164DE64A3EA215F247541
Certificate serial:       0777
Authority key identifier: DF:37:64:80:DC:F0:7A:1B:7A:D1:64:DE:64:A3:EA:21:5F:24:75:41
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/3zdkgNzweht60WTeZKPqIV8kdUE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362B8A8/B5C94E4C9C2511EBAD78FF53F8AEA228/4895434C1EC211F192F83FA5DAE4EC9C.roa
Signing time:             Fri 13 Mar 2026 09:52:02 +0000
ROA not before:           Fri 13 Mar 2026 09:51:56 +0000
ROA not after:            Thu 13 Mar 2036 09:51:56 +0000
asID:                     37053
IP address blocks:        2c0f:f800::/28 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362B8A8/B5C94E4C9C2511EBAD78FF53F8AEA228/3zdkgNzweht60WTeZKPqIV8kdUE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362B8A8/B5C94E4C9C2511EBAD78FF53F8AEA228/3zdkgNzweht60WTeZKPqIV8kdUE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/3zdkgNzweht60WTeZKPqIV8kdUE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1911 (0x777)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362B8A8AF, serialNumber=DF376480DCF07A1B7AD164DE64A3EA215F247541
        Validity
            Not Before: Mar 13 09:51:56 2026 GMT
            Not After : Mar 13 09:51:56 2036 GMT
        Subject: CN=69b3de42-80de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f6:6b:a5:d6:77:94:8a:46:c9:40:01:5a:79:
                    15:85:80:18:23:67:09:69:6f:98:a5:dc:f7:46:8f:
                    d2:2f:2d:99:20:06:a1:21:89:f4:6c:ce:b7:df:3e:
                    b8:cf:3c:99:d6:6f:2f:42:4d:16:0c:77:07:f8:87:
                    e2:5a:d0:19:c2:2f:a0:c5:cc:03:10:28:49:07:a1:
                    66:23:63:c1:02:2a:2a:15:2a:c9:f2:e0:64:ee:4c:
                    e9:a8:c0:08:0d:b8:f4:30:b6:7f:a5:db:4c:02:71:
                    50:3a:ba:8e:f0:70:1d:7d:4d:fc:53:74:96:e3:ae:
                    fc:49:15:4e:de:18:df:64:e0:1b:f0:74:65:0f:2e:
                    1d:ea:70:fd:11:fc:75:ca:03:99:df:24:e0:64:a4:
                    9d:58:5e:db:ba:46:d5:59:67:1e:10:2d:6f:3e:95:
                    cc:b1:d5:17:0d:b9:d3:4d:f9:19:e8:18:62:0c:f3:
                    28:e7:c8:ee:70:ac:82:3c:f3:f5:bc:ae:38:35:97:
                    b0:0f:9b:fa:76:5c:ca:1e:e0:9f:98:02:00:24:55:
                    07:b2:f3:d5:08:3b:ed:18:fe:91:c5:60:07:c7:c4:
                    e0:57:26:c5:1f:f0:19:0e:bf:e7:8c:87:c2:ed:88:
                    c6:c0:e5:71:29:8f:c5:b6:eb:87:a7:26:16:58:af:
                    5b:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:4B:6C:AB:B3:D9:82:35:A4:45:62:96:00:F0:AD:CF:1F:1D:A6:CA
            X509v3 Authority Key Identifier:
                keyid:DF:37:64:80:DC:F0:7A:1B:7A:D1:64:DE:64:A3:EA:21:5F:24:75:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362B8A8/B5C94E4C9C2511EBAD78FF53F8AEA228/3zdkgNzweht60WTeZKPqIV8kdUE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/3zdkgNzweht60WTeZKPqIV8kdUE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362B8A8/B5C94E4C9C2511EBAD78FF53F8AEA228/4895434C1EC211F192F83FA5DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:f800::/28

    Signature Algorithm: sha256WithRSAEncryption
         7f:44:cf:e8:be:66:ea:e8:09:b1:7f:ad:74:64:cd:ae:38:f0:
         09:9a:d7:70:10:63:f7:eb:c9:25:3f:7e:ec:1b:04:d6:64:fb:
         fe:4e:11:a0:2b:9a:c4:7b:09:41:8a:52:2b:bd:5b:55:3e:1f:
         51:06:47:35:93:e6:99:28:bb:82:c6:80:77:b4:57:f9:60:30:
         97:44:cb:2e:35:96:41:22:47:d8:c6:84:8b:ae:b7:05:19:cd:
         a6:8b:8c:11:6e:56:eb:cc:79:2f:3c:c1:c8:a2:70:47:58:86:
         f9:8b:26:0c:0a:38:be:42:de:48:da:4e:a6:1c:75:39:92:34:
         c9:8b:0b:b9:35:df:41:58:18:a0:cb:f5:86:ec:e0:6e:3c:35:
         4d:42:4f:7f:a1:50:c9:63:aa:2e:e5:16:a5:ff:84:e3:1c:89:
         7d:59:90:e0:1d:91:94:17:5e:c7:0e:92:8f:60:f1:79:0a:75:
         6e:8b:7e:61:34:f8:7e:89:77:11:8e:c0:5e:8a:d1:0a:b3:11:
         78:9f:b7:3f:bb:30:47:88:e6:88:f8:38:8d:56:f9:98:f0:11:
         fe:f7:3f:75:87:23:42:3e:75:df:ad:93:7e:c1:44:6e:a1:06:
         1c:1c:70:cd:9f:bf:5b:56:d6:fc:b1:f6:be:2d:fe:a8:9a:4d:
         63:9c:91:36
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB3cwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MkI4QThBRjExMC8GA1UEBRMoREYzNzY0ODBEQ0YwN0ExQjdBRDE2NERFNjRBM0VB
MjE1RjI0NzU0MTAeFw0yNjAzMTMwOTUxNTZaFw0zNjAzMTMwOTUxNTZaMBgxFjAU
BgNVBAMTDTY5YjNkZTQyLTgwZGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDH9mul1neUikbJQAFaeRWFgBgjZwlpb5il3PdGj9IvLZkgBqEhifRszrff
PrjPPJnWby9CTRYMdwf4h+Ja0BnCL6DFzAMQKEkHoWYjY8ECKioVKsny4GTuTOmo
wAgNuPQwtn+l20wCcVA6uo7wcB19TfxTdJbjrvxJFU7eGN9k4BvwdGUPLh3qcP0R
/HXKA5nfJOBkpJ1YXtu6RtVZZx4QLW8+lcyx1RcNudNN+RnoGGIM8yjnyO5wrII8
8/W8rjg1l7APm/p2XMoe4J+YAgAkVQey89UIO+0Y/pHFYAfHxOBXJsUf8BkOv+eM
h8LtiMbA5XEpj8W264enJhZYr1t5AgMBAAGjggKmMIICojAdBgNVHQ4EFgQU0Ets
q7PZgjWkRWKWAPCtzx8dpsowHwYDVR0jBBgwFoAU3zdkgNzweht60WTeZKPqIV8k
dUEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjJCOEE4L0I1Qzk0RTRDOUMyNTExRUJBRDc4RkY1M0Y4QUVBMjI4LzN6ZGtn
Tnp3ZWh0NjBXVGVaS1BxSVY4a2RVRS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzN6ZGtnTnp3ZWh0NjBXVGVaS1BxSVY4a2RVRS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjJCOEE4L0I1Qzk0RTRDOUMyNTExRUJBRDc4RkY1M0Y4
QUVBMjI4LzQ4OTU0MzRDMUVDMjExRjE5MkY4M0ZBNURBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQQsD/gAMA0GCSqGSIb3DQEB
CwUAA4IBAQB/RM/ovmbq6Amxf610ZM2uOPAJmtdwEGP368klP37sGwTWZPv+ThGg
K5rEewlBilIrvVtVPh9RBkc1k+aZKLuCxoB3tFf5YDCXRMsuNZZBIkfYxoSLrrcF
Gc2mi4wRblbrzHkvPMHIonBHWIb5iyYMCji+Qt5I2k6mHHU5kjTJiwu5Nd9BWBig
y/WG7OBuPDVNQk9/oVDJY6ou5Ral/4TjHIl9WZDgHZGUF17HDpKPYPF5CnVui35h
NPh+iXcRjsBeitEKsxF4n7c/uzBHiOaI+DiNVvmY8BH+9z91hyNCPnXfrZN+wURu
oQYcHHDNn79bVtb8sfa+Lf6omk1jnJE2
-----END CERTIFICATE-----