Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/2A18A32AB33011F1B80F63F8CE1D38B0.roa
File:                     2A18A32AB33011F1B80F63F8CE1D38B0.roa (raw, json)
Hash identifier:          YHeDwvZJky5slsjRJ8MvhV4C6nX8nrY+mFQyAk6b0io=
Subject key identifier:   7D:10:00:37:A0:50:15:EB:5F:D2:84:35:83:25:2B:26:AD:A0:19:FA
Certificate issuer:       /CN=F364712FAF/serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
Certificate serial:       08F8
Authority key identifier: 3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/2A18A32AB33011F1B80F63F8CE1D38B0.roa
Signing time:             Fri 18 Sep 2026 07:11:27 +0000
ROA not before:           Fri 18 Sep 2026 07:11:23 +0000
ROA not after:            Wed 31 Dec 2036 07:11:23 +0000
asID:                     29975
IP address blocks:        105.250.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Sep 2026 00:07:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2296 (0x8f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364712FAF, serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
        Validity
            Not Before: Sep 18 07:11:23 2026 GMT
            Not After : Dec 31 07:11:23 2036 GMT
        Subject: CN=6aace41f-c468
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:38:fa:a8:d4:10:62:58:fa:f6:d9:01:cd:37:
                    58:78:42:53:7c:fb:77:60:66:4e:30:c6:fd:43:ae:
                    92:15:37:f0:e0:08:d5:46:6b:c6:60:5a:ba:67:f3:
                    e9:02:37:88:da:da:19:48:ac:d3:ea:0a:ee:64:11:
                    52:f7:58:73:60:8a:51:76:c4:56:e4:d0:13:29:36:
                    35:d1:01:6a:56:cd:d2:70:f8:1f:4a:6c:65:c6:c3:
                    32:ce:54:78:51:cd:6e:82:61:67:22:4e:de:ad:48:
                    72:67:92:a4:bd:2b:3a:cd:b4:1e:62:9a:84:46:f8:
                    bd:22:05:05:bb:f4:99:fd:bc:23:98:8a:31:ea:54:
                    1c:af:08:00:b0:04:1b:83:a1:32:56:0d:8f:ae:f8:
                    fb:4f:ce:c0:7b:b9:b1:39:22:92:09:18:d4:66:b4:
                    92:18:5c:17:cb:0a:fa:4d:5d:30:3c:a5:d0:3f:9d:
                    de:1f:75:94:ab:13:27:4f:51:6a:b9:26:73:15:ef:
                    89:a3:a7:b7:a0:2c:ac:8d:bf:fd:92:88:17:de:33:
                    83:db:3c:c1:e4:95:ae:39:d1:b0:17:73:6b:40:d6:
                    7f:6a:5b:f4:e0:0b:97:d6:ed:92:e3:15:a7:56:9a:
                    c6:b9:a7:0d:cb:d7:c5:62:3f:b0:1e:7e:70:1d:1f:
                    1b:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:10:00:37:A0:50:15:EB:5F:D2:84:35:83:25:2B:26:AD:A0:19:FA
            X509v3 Authority Key Identifier:
                keyid:3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/2A18A32AB33011F1B80F63F8CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  105.250.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         8a:8b:44:b5:11:d6:db:ff:86:7b:4a:34:9b:6d:a7:3c:f8:ce:
         56:eb:13:67:33:71:07:5d:e9:4b:95:16:f0:50:fd:4e:54:18:
         c2:8b:d2:dd:48:fd:d5:33:b5:ad:f7:3f:8d:5c:21:c7:e0:19:
         05:e6:57:d4:f2:48:26:f5:fe:cd:b6:c8:9f:43:5a:e1:8e:63:
         4b:69:42:c1:49:a5:36:26:37:8e:11:76:3f:9c:ef:f4:17:ed:
         73:e2:95:ee:ec:43:2c:a4:7f:13:27:2c:af:70:b7:f6:63:8d:
         c1:9e:a3:01:19:62:2c:9e:d8:c5:22:1f:4f:2f:b3:fd:7b:78:
         b6:76:cd:41:d2:73:14:d0:79:a7:cc:3d:1a:f7:b8:6f:09:7a:
         d9:c8:21:78:39:43:63:36:cb:de:60:1e:69:55:66:42:e0:48:
         93:d6:7b:6c:57:ce:33:4c:4e:7e:16:da:38:53:5b:54:ae:38:
         c9:eb:50:c5:f2:6e:82:1b:1f:b4:a5:07:e2:8a:02:28:18:bc:
         a2:56:f6:32:9e:f1:a7:e6:8c:a5:37:c7:d7:45:25:3e:07:f1:
         68:8c:63:a4:ae:99:33:5d:9e:4b:94:44:67:02:85:32:42:6a:
         b2:1e:88:cd:d0:31:1b:1d:15:6f:c5:3d:f2:1f:28:39:65:65:
         e9:41:c7:bf
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCPgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NDcxMkZBRjExMC8GA1UEBRMoM0Q1NUM3ODRFQTE3OTEyRjBFOTYwQTI1QzZDQTky
MEUxMDAyMzAwQTAeFw0yNjA5MTgwNzExMjNaFw0zNjEyMzEwNzExMjNaMBgxFjAU
BgNVBAMTDTZhYWNlNDFmLWM0NjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDNOPqo1BBiWPr22QHNN1h4QlN8+3dgZk4wxv1DrpIVN/DgCNVGa8ZgWrpn
8+kCN4ja2hlIrNPqCu5kEVL3WHNgilF2xFbk0BMpNjXRAWpWzdJw+B9KbGXGwzLO
VHhRzW6CYWciTt6tSHJnkqS9KzrNtB5imoRG+L0iBQW79Jn9vCOYijHqVByvCACw
BBuDoTJWDY+u+PtPzsB7ubE5IpIJGNRmtJIYXBfLCvpNXTA8pdA/nd4fdZSrEydP
UWq5JnMV74mjp7egLKyNv/2SiBfeM4PbPMHkla450bAXc2tA1n9qW/TgC5fW7ZLj
FadWmsa5pw3L18ViP7AefnAdHxtxAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUfRAA
N6BQFetf0oQ1gyUrJq2gGfowHwYDVR0jBBgwFoAUPVXHhOoXkS8OlgolxsqSDhAC
MAowDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjQ3MTJGL0U5QzRCQUEyQTBFODExRUI4ODk1OEQxMEY4QUVBMjI4L1BWWEho
T29Ya1M4T2xnb2x4c3FTRGhBQ01Bby5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1BWWEhoT29Ya1M4T2xnb2x4c3FTRGhBQ01Bby5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjQ3MTJGL0U5QzRCQUEyQTBFODExRUI4ODk1OEQxMEY4
QUVBMjI4LzJBMThBMzJBQjMzMDExRjFCODBGNjNGOENFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAZp+gAwDQYJKoZIhvcNAQEL
BQADggEBAIqLRLUR1tv/hntKNJttpzz4zlbrE2czcQdd6UuVFvBQ/U5UGMKL0t1I
/dUzta33P41cIcfgGQXmV9TySCb1/s22yJ9DWuGOY0tpQsFJpTYmN44Rdj+c7/QX
7XPile7sQyykfxMnLK9wt/ZjjcGeowEZYiye2MUiH08vs/17eLZ2zUHScxTQeafM
PRr3uG8JetnIIXg5Q2M2y95gHmlVZkLgSJPWe2xXzjNMTn4W2jhTW1SuOMnrUMXy
boIbH7SlB+KKAigYvKJW9jKe8afmjKU3x9dFJT4H8WiMY6SumTNdnkuURGcChTJC
arIeiM3QMRsdFW/FPfIfKDllZelBx78=
-----END CERTIFICATE-----