Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/3236DE0EB33111F193F95DFECE1D38B0.roa
File:                     3236DE0EB33111F193F95DFECE1D38B0.roa (raw, json)
Hash identifier:          mRZXBeWvTK4wHl+Wyt25qekHlFqQFvShI+W6OYaYm70=
Subject key identifier:   40:08:0F:CC:6C:49:74:8F:D4:14:12:28:8A:D2:B6:18:70:76:48:7F
Certificate issuer:       /CN=F364712FAF/serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
Certificate serial:       0906
Authority key identifier: 3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/3236DE0EB33111F193F95DFECE1D38B0.roa
Signing time:             Fri 18 Sep 2026 07:18:51 +0000
ROA not before:           Fri 18 Sep 2026 07:18:46 +0000
ROA not after:            Wed 31 Dec 2036 07:18:46 +0000
asID:                     29975
IP address blocks:        105.251.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2310 (0x906)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364712FAF, serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
        Validity
            Not Before: Sep 18 07:18:46 2026 GMT
            Not After : Dec 31 07:18:46 2036 GMT
        Subject: CN=6aace5da-9d92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:f6:e0:9a:69:e9:a6:fb:a0:a5:6a:ad:de:71:
                    63:c8:20:55:d0:d8:85:b4:91:18:b9:36:a5:26:49:
                    c3:00:3c:a5:9a:e4:91:f7:d3:38:8b:3c:46:4d:a7:
                    e7:c7:a5:62:5a:83:96:d6:97:c7:3c:db:50:b1:1b:
                    8f:2e:00:be:40:17:02:2c:b1:fc:26:72:73:1a:14:
                    61:1d:c1:ce:27:fd:48:fd:d9:f9:34:d4:41:06:cf:
                    b0:48:a9:4e:c1:18:30:4c:ef:ce:b1:18:1c:92:f1:
                    52:76:28:23:a7:51:fb:87:32:76:24:06:3a:19:24:
                    8e:da:b0:13:a2:e9:0b:b3:ce:fb:dd:5d:87:e1:cd:
                    fe:ba:0f:54:5c:50:5b:c8:c3:ca:5b:8e:04:33:29:
                    09:06:8d:4f:20:5e:6f:26:81:e0:ec:24:e5:e0:18:
                    75:0e:fe:25:39:f4:d6:29:cb:69:8f:1e:d8:a9:73:
                    3a:ca:67:8c:a6:26:75:a2:72:3c:b5:bc:a7:eb:39:
                    1e:1a:68:73:bc:68:b8:ff:48:98:21:6a:60:8a:b4:
                    32:61:5a:9d:1d:2a:05:2e:38:73:8e:92:53:1a:b2:
                    b6:52:6b:09:69:ba:cb:68:0d:ce:fc:14:30:a3:80:
                    46:db:21:56:8c:a7:c6:a9:e1:d5:f2:14:31:b0:28:
                    05:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:08:0F:CC:6C:49:74:8F:D4:14:12:28:8A:D2:B6:18:70:76:48:7F
            X509v3 Authority Key Identifier:
                keyid:3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/3236DE0EB33111F193F95DFECE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  105.251.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         9b:d1:fe:47:50:15:b3:9d:b6:4a:14:95:07:b5:3d:ab:65:5c:
         34:dd:c8:37:79:f2:c6:08:dc:38:46:7e:00:4f:63:c9:61:4d:
         78:bc:64:c8:58:f4:96:40:93:d0:b7:3f:b2:cc:8f:ee:57:a5:
         ec:2a:c8:b8:b3:d5:37:5e:11:da:ec:0f:bd:28:18:2f:57:93:
         f6:40:4c:87:ea:f4:b7:d4:00:92:cd:e3:07:5d:71:74:c9:67:
         2a:a1:06:eb:be:e5:cd:25:fd:d7:ae:88:fb:07:65:f4:11:dc:
         2f:9e:f5:a0:14:c6:f6:2a:2d:f9:62:9f:56:1e:5a:22:ae:71:
         d1:91:a4:da:6e:0f:e8:22:e0:88:f1:a9:d0:1d:02:96:ab:2e:
         ab:75:ab:dc:f0:e0:81:60:1c:6c:a4:8f:10:56:8e:92:d2:d4:
         9b:b3:00:28:f7:b5:68:ca:23:98:47:9b:b8:b9:7b:d0:10:fd:
         bd:53:5f:6a:bf:f2:30:8a:2b:23:00:38:54:48:74:a8:33:ff:
         cc:04:24:ac:07:b2:32:19:d8:88:c2:c9:ad:fa:f2:9d:cd:b8:
         03:2a:0c:0f:9e:35:00:f9:f8:91:d8:c9:03:05:21:2c:56:40:
         63:44:79:15:b1:66:1e:85:d3:85:8c:66:ca:2a:af:94:24:fb:
         5e:ed:69:2c
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCQYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NDcxMkZBRjExMC8GA1UEBRMoM0Q1NUM3ODRFQTE3OTEyRjBFOTYwQTI1QzZDQTky
MEUxMDAyMzAwQTAeFw0yNjA5MTgwNzE4NDZaFw0zNjEyMzEwNzE4NDZaMBgxFjAU
BgNVBAMTDTZhYWNlNWRhLTlkOTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDa9uCaaemm+6Claq3ecWPIIFXQ2IW0kRi5NqUmScMAPKWa5JH30ziLPEZN
p+fHpWJag5bWl8c821CxG48uAL5AFwIssfwmcnMaFGEdwc4n/Uj92fk01EEGz7BI
qU7BGDBM786xGByS8VJ2KCOnUfuHMnYkBjoZJI7asBOi6QuzzvvdXYfhzf66D1Rc
UFvIw8pbjgQzKQkGjU8gXm8mgeDsJOXgGHUO/iU59NYpy2mPHtipczrKZ4ymJnWi
cjy1vKfrOR4aaHO8aLj/SJghamCKtDJhWp0dKgUuOHOOklMasrZSawlpustoDc78
FDCjgEbbIVaMp8ap4dXyFDGwKAXjAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUQAgP
zGxJdI/UFBIoitK2GHB2SH8wHwYDVR0jBBgwFoAUPVXHhOoXkS8OlgolxsqSDhAC
MAowDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjQ3MTJGL0U5QzRCQUEyQTBFODExRUI4ODk1OEQxMEY4QUVBMjI4L1BWWEho
T29Ya1M4T2xnb2x4c3FTRGhBQ01Bby5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1BWWEhoT29Ya1M4T2xnb2x4c3FTRGhBQ01Bby5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjQ3MTJGL0U5QzRCQUEyQTBFODExRUI4ODk1OEQxMEY4
QUVBMjI4LzMyMzZERTBFQjMzMTExRjE5M0Y5NURGRUNFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAZp+8AwDQYJKoZIhvcNAQEL
BQADggEBAJvR/kdQFbOdtkoUlQe1PatlXDTdyDd58sYI3DhGfgBPY8lhTXi8ZMhY
9JZAk9C3P7LMj+5XpewqyLiz1TdeEdrsD70oGC9Xk/ZATIfq9LfUAJLN4wddcXTJ
ZyqhBuu+5c0l/deuiPsHZfQR3C+e9aAUxvYqLflin1YeWiKucdGRpNpuD+gi4Ijx
qdAdAparLqt1q9zw4IFgHGykjxBWjpLS1JuzACj3tWjKI5hHm7i5e9AQ/b1TX2q/
8jCKKyMAOFRIdKgz/8wEJKwHsjIZ2IjCya368p3NuAMqDA+eNQD5+JHYyQMFISxW
QGNEeRWxZh6F04WMZsoqr5Qk+17taSw=
-----END CERTIFICATE-----