Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/33E2B218B00D11F18B3D46FACE1D38B0.roa
File:                     33E2B218B00D11F18B3D46FACE1D38B0.roa (raw, json)
Hash identifier:          Jzce8bs5ZQY9szUpCbNaitC9dVouDEqwg4lBfST4wrI=
Subject key identifier:   20:A6:9B:78:3F:EC:1D:7E:F9:51:A9:0B:00:56:EA:4A:3F:87:D5:E2
Certificate issuer:       /CN=F364712FAF/serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
Certificate serial:       0883
Authority key identifier: 3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/33E2B218B00D11F18B3D46FACE1D38B0.roa
Signing time:             Mon 14 Sep 2026 07:23:38 +0000
ROA not before:           Mon 14 Sep 2026 07:23:34 +0000
ROA not after:            Wed 31 Dec 2036 07:23:34 +0000
asID:                     29975
IP address blocks:        41.12.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 01 Oct 2026 00:07:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2179 (0x883)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364712FAF, serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
        Validity
            Not Before: Sep 14 07:23:34 2026 GMT
            Not After : Dec 31 07:23:34 2036 GMT
        Subject: CN=6aa7a0fa-1c3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:aa:09:1f:fc:62:96:75:df:97:80:c3:b5:bf:
                    e2:63:b6:dc:02:4f:e4:8f:9c:85:01:71:6b:d6:ee:
                    d3:c6:cf:d8:b4:f3:7a:9a:be:9e:ba:ab:4c:b1:04:
                    e5:cf:5e:4f:7e:b1:5f:93:b9:68:62:2b:a2:f6:cc:
                    82:8a:3c:a4:ab:23:65:80:44:82:e2:26:66:7c:e7:
                    01:56:b2:c8:c9:c0:20:02:79:13:e7:e7:df:fc:08:
                    1a:75:57:d3:30:15:b2:a2:45:c5:c6:8d:5e:eb:6d:
                    13:9c:3f:32:d7:18:96:12:3d:13:9b:a7:0b:82:96:
                    9d:f0:db:16:00:45:88:6c:51:3e:c8:1d:38:d6:7d:
                    70:39:4d:af:93:de:9f:7f:84:07:87:c8:47:56:ae:
                    63:0b:a8:77:52:51:d0:ad:7e:95:76:17:3a:13:7b:
                    b3:4b:47:92:6e:f6:2e:ef:04:68:3b:83:91:55:b8:
                    85:fa:93:82:8c:b2:f5:17:e0:63:e0:f5:e9:f6:83:
                    5d:81:ee:6f:0d:12:7c:9d:3a:ba:89:49:ce:ec:69:
                    43:c1:03:f4:4a:ec:18:f5:c9:a9:ff:00:ab:8a:0b:
                    16:fc:84:1b:3d:b6:02:c3:a8:61:d5:3a:06:bb:45:
                    71:76:98:8a:34:66:61:50:7d:d8:36:3b:e8:aa:4c:
                    ae:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:A6:9B:78:3F:EC:1D:7E:F9:51:A9:0B:00:56:EA:4A:3F:87:D5:E2
            X509v3 Authority Key Identifier:
                keyid:3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/33E2B218B00D11F18B3D46FACE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.12.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         cb:c1:6f:51:82:88:db:7f:da:2c:ce:66:f6:13:0a:ee:8d:b8:
         97:34:39:76:e7:9a:f8:6a:a4:73:4b:84:25:22:16:73:ce:db:
         11:70:6e:24:6d:06:4a:9e:97:fe:82:0d:46:37:25:ca:36:d1:
         9c:68:51:bb:e6:cc:61:ff:0b:76:2e:96:eb:d7:2d:6f:33:a7:
         7c:04:d8:6e:d2:10:5a:98:1b:12:6f:be:5e:39:6d:ed:91:c5:
         9f:90:7d:e2:b0:87:1a:33:6a:a4:da:95:c6:0f:a3:92:18:42:
         7e:e3:7a:f0:a0:84:83:b2:90:2e:1d:24:2b:f9:51:c2:d0:12:
         9d:69:0d:b8:cf:fc:a7:6d:6d:24:49:6c:49:be:35:37:92:37:
         c5:6d:e5:e1:24:a2:40:3a:d7:82:15:c2:e3:a5:83:d0:cc:06:
         b5:18:8a:8b:66:fd:5e:1d:26:f0:cd:89:ad:23:b7:2f:98:00:
         d2:aa:0c:83:5f:80:6b:13:ff:e2:0c:b3:ba:24:1b:92:44:82:
         fd:52:bc:d3:f2:b2:0a:48:70:d7:08:79:d2:ef:38:22:6c:73:
         b2:7a:1e:c4:98:71:a8:d3:1e:e2:4a:c4:c5:bf:21:94:ed:14:
         41:77:45:2d:1a:7c:f6:cf:1c:89:32:77:97:70:dc:11:ac:75:
         bf:d5:46:5b
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgICCIMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NDcxMkZBRjExMC8GA1UEBRMoM0Q1NUM3ODRFQTE3OTEyRjBFOTYwQTI1QzZDQTky
MEUxMDAyMzAwQTAeFw0yNjA5MTQwNzIzMzRaFw0zNjEyMzEwNzIzMzRaMBgxFjAU
BgNVBAMTDTZhYTdhMGZhLTFjM2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCnqgkf/GKWdd+XgMO1v+JjttwCT+SPnIUBcWvW7tPGz9i083qavp66q0yx
BOXPXk9+sV+TuWhiK6L2zIKKPKSrI2WARILiJmZ85wFWssjJwCACeRPn59/8CBp1
V9MwFbKiRcXGjV7rbROcPzLXGJYSPRObpwuClp3w2xYARYhsUT7IHTjWfXA5Ta+T
3p9/hAeHyEdWrmMLqHdSUdCtfpV2FzoTe7NLR5Ju9i7vBGg7g5FVuIX6k4KMsvUX
4GPg9en2g12B7m8NEnydOrqJSc7saUPBA/RK7Bj1yan/AKuKCxb8hBs9tgLDqGHV
Oga7RXF2mIo0ZmFQfdg2O+iqTK5pAgMBAAGjggKkMIICoDAdBgNVHQ4EFgQUIKab
eD/sHX75UakLAFbqSj+H1eIwHwYDVR0jBBgwFoAUPVXHhOoXkS8OlgolxsqSDhAC
MAowDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjQ3MTJGL0U5QzRCQUEyQTBFODExRUI4ODk1OEQxMEY4QUVBMjI4L1BWWEho
T29Ya1M4T2xnb2x4c3FTRGhBQ01Bby5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1BWWEhoT29Ya1M4T2xnb2x4c3FTRGhBQ01Bby5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjQ3MTJGL0U5QzRCQUEyQTBFODExRUI4ODk1OEQxMEY4
QUVBMjI4LzMzRTJCMjE4QjAwRDExRjE4QjNENDZGQUNFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwApDDANBgkqhkiG9w0BAQsF
AAOCAQEAy8FvUYKI23/aLM5m9hMK7o24lzQ5duea+Gqkc0uEJSIWc87bEXBuJG0G
Sp6X/oINRjclyjbRnGhRu+bMYf8Ldi6W69ctbzOnfATYbtIQWpgbEm++Xjlt7ZHF
n5B94rCHGjNqpNqVxg+jkhhCfuN68KCEg7KQLh0kK/lRwtASnWkNuM/8p21tJEls
Sb41N5I3xW3l4SSiQDrXghXC46WD0MwGtRiKi2b9Xh0m8M2JrSO3L5gA0qoMg1+A
axP/4gyzuiQbkkSC/VK80/KyCkhw1wh50u84ImxzsnoexJhxqNMe4krExb8hlO0U
QXdFLRp89s8ciTJ3l3DcEax1v9VGWw==
-----END CERTIFICATE-----