Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/432C441ED5FB11F1B9CB37E4CE1D38B0.roa
File:                     432C441ED5FB11F1B9CB37E4CE1D38B0.roa (raw, json)
Hash identifier:          zQPc+iwIwlWvHNeOKo7SRROLuBYnx2289FdWFiQnb78=
Subject key identifier:   33:43:AB:02:D9:28:15:A8:5D:C0:36:F6:62:C0:01:54:0D:06:A4:F2
Certificate issuer:       /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial:       135B
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/432C441ED5FB11F1B9CB37E4CE1D38B0.roa
Signing time:             Sun 01 Nov 2026 13:50:57 +0000
ROA not before:           Sun 01 Nov 2026 13:50:53 +0000
ROA not after:            Tue 30 Nov 2027 13:50:53 +0000
asID:                     29802
IP address blocks:        196.251.85.0/24 maxlen: 24 (superfluous maxlen)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 17 Nov 2026 00:08:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4955 (0x135b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
        Validity
            Not Before: Nov  1 13:50:53 2026 GMT
            Not After : Nov 30 13:50:53 2027 GMT
        Subject: CN=6ae743c1-4b54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:00:36:5a:2a:c4:50:39:41:63:b4:04:eb:85:
                    5a:90:20:bc:99:8f:da:b3:6a:a4:ca:da:a4:7c:1a:
                    a5:85:f4:29:34:33:02:59:c7:81:c8:a8:2b:26:f9:
                    43:2e:fb:e5:52:75:78:38:91:d9:32:7e:ee:2a:21:
                    a0:9f:3e:a8:62:1b:e6:18:cf:05:96:98:6e:94:a8:
                    8c:7c:e4:19:95:31:f2:50:8c:24:e1:2f:dd:b5:cd:
                    b7:58:5a:6e:8a:89:42:99:64:62:69:fd:6a:a9:51:
                    d6:2c:36:dc:ee:ba:f3:a4:d0:fa:24:e6:0c:64:6c:
                    f3:7c:71:db:4c:ae:34:94:5a:e0:c5:70:03:6b:95:
                    de:a0:1a:97:7d:c1:de:de:3c:68:06:7b:e5:32:fe:
                    55:cd:04:4b:78:86:41:88:cc:b2:02:46:f4:5b:4e:
                    54:f4:85:96:0c:b0:67:5a:6e:9c:21:e0:47:9e:7c:
                    39:27:d6:04:3c:87:f4:b7:c0:f3:30:57:82:70:33:
                    d1:00:c6:7e:37:81:1c:cd:fc:72:1a:59:85:41:9f:
                    7b:13:36:13:31:e6:ee:05:1c:e4:57:7e:99:0b:a2:
                    f5:cb:6a:2e:93:c2:9a:04:c1:d7:61:63:b4:d2:da:
                    38:c7:15:25:eb:c1:9b:fa:90:0c:50:e6:fb:7c:16:
                    c6:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:43:AB:02:D9:28:15:A8:5D:C0:36:F6:62:C0:01:54:0D:06:A4:F2
            X509v3 Authority Key Identifier:
                keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/432C441ED5FB11F1B9CB37E4CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.251.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:ec:b3:e0:3f:3e:b1:05:2b:a2:35:ff:90:66:3c:3d:d2:61:
         d8:d7:39:4a:d1:f8:57:41:b3:92:b7:0a:99:b8:a2:8c:9c:b7:
         b7:67:b2:30:2b:06:b6:f5:aa:74:d9:4f:e5:ee:68:65:6c:a9:
         92:1b:f8:4c:23:3c:43:c3:f4:8b:83:b9:1f:f5:08:57:82:ef:
         ca:77:f5:c2:9f:84:17:cc:18:dc:ff:2e:e6:9e:d1:42:66:43:
         f1:42:63:ac:fd:96:18:56:c6:71:cf:09:25:e3:a0:94:56:7e:
         45:9d:51:80:8f:39:37:b2:f0:7e:ca:6f:78:d2:84:e7:5e:8b:
         e3:ca:59:5c:2e:91:ad:9e:b7:0d:29:f2:48:db:af:e0:45:b7:
         e4:45:ca:7b:6b:9a:40:54:1b:d9:3a:63:ca:17:2a:62:28:6a:
         dc:b3:10:0e:a5:96:60:97:12:e7:21:7e:07:e2:f1:6c:9f:2b:
         74:19:4e:b2:04:69:82:46:63:de:be:23:67:6e:0b:93:f8:c6:
         09:e4:b0:5d:b9:62:d2:25:89:4b:d7:7b:74:8f:c0:ce:5e:09:
         8d:8c:ab:06:9d:7b:9a:9c:27:5e:63:14:4c:0b:19:af:4c:76:
         51:3a:0d:9e:4e:0a:3d:b0:3d:3b:3f:28:33:8e:c2:19:7a:88:
         c2:6c:8d:ae
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICE1swDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
M0JBMTlBRjExMC8GA1UEBRMoNkFFQTI0QjA5OUMzMkIyMkU0RTQ4QkI5RjI2Q0Y1
NzhCRUY2QkZGMzAeFw0yNjExMDExMzUwNTNaFw0yNzExMzAxMzUwNTNaMBgxFjAU
BgNVBAMTDTZhZTc0M2MxLTRiNTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC/ADZaKsRQOUFjtATrhVqQILyZj9qzaqTK2qR8GqWF9Ck0MwJZx4HIqCsm
+UMu++VSdXg4kdkyfu4qIaCfPqhiG+YYzwWWmG6UqIx85BmVMfJQjCThL921zbdY
Wm6KiUKZZGJp/WqpUdYsNtzuuvOk0Pok5gxkbPN8cdtMrjSUWuDFcANrld6gGpd9
wd7ePGgGe+Uy/lXNBEt4hkGIzLICRvRbTlT0hZYMsGdabpwh4EeefDkn1gQ8h/S3
wPMwV4JwM9EAxn43gRzN/HIaWYVBn3sTNhMx5u4FHORXfpkLovXLai6TwpoEwddh
Y7TS2jjHFSXrwZv6kAxQ5vt8FsZ3AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUM0Or
AtkoFahdwDb2YsABVA0GpPIwHwYDVR0jBBgwFoAUauoksJnDKyLk5Iu58mz1eL72
v/MwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVBNDBENTc3L2F1b2tz
Sm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2F1b2tzSm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVB
NDBENTc3LzQzMkM0NDFFRDVGQjExRjFCOUNCMzdFNENFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADE+1UwDQYJKoZIhvcNAQEL
BQADggEBAG7ss+A/PrEFK6I1/5BmPD3SYdjXOUrR+FdBs5K3Cpm4ooyct7dnsjAr
Brb1qnTZT+XuaGVsqZIb+EwjPEPD9IuDuR/1CFeC78p39cKfhBfMGNz/Luae0UJm
Q/FCY6z9lhhWxnHPCSXjoJRWfkWdUYCPOTey8H7Kb3jShOdei+PKWVwuka2etw0p
8kjbr+BFt+RFyntrmkBUG9k6Y8oXKmIoatyzEA6llmCXEuchfgfi8WyfK3QZTrIE
aYJGY96+I2duC5P4xgnksF25YtIliUvXe3SPwM5eCY2Mqwade5qcJ15jFEwLGa9M
dlE6DZ5OCj2wPTs/KDOOwhl6iMJsja4=
-----END CERTIFICATE-----