Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/3F3F79509A7F11F18394121BCF1D38B0.roa
File:                     3F3F79509A7F11F18394121BCF1D38B0.roa (raw, json)
Hash identifier:          4SLMNr8udDc0QqzvyugX4Pfi7FtygrZpGM9Fp9qs3cg=
Subject key identifier:   1A:96:EC:86:9A:F5:A4:C4:A3:6D:6E:3F:2C:BA:8C:C8:B7:E8:47:4F
Certificate issuer:       /CN=F364712FAF/serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
Certificate serial:       0837
Authority key identifier: 3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/3F3F79509A7F11F18394121BCF1D38B0.roa
Signing time:             Mon 17 Aug 2026 21:04:34 +0000
ROA not before:           Mon 17 Aug 2026 21:04:28 +0000
ROA not after:            Wed 31 Dec 2036 21:04:28 +0000
asID:                     29975
IP address blocks:        41.13.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2103 (0x837)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364712FAF, serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
        Validity
            Not Before: Aug 17 21:04:28 2026 GMT
            Not After : Dec 31 21:04:28 2036 GMT
        Subject: CN=6a837762-a9b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:bd:b7:07:42:9c:48:7a:f5:21:0a:de:09:74:
                    bd:cd:2a:5f:73:63:f3:4c:9d:ad:80:04:6f:60:95:
                    66:90:66:b8:63:c7:3b:11:d9:48:d3:3b:cd:24:5a:
                    3f:fb:3a:9a:62:42:53:b1:8a:bf:c6:7b:3f:b2:c8:
                    b3:59:b7:ea:a2:dd:08:2f:e8:f7:c0:c1:e8:22:be:
                    ba:5d:b3:b0:b5:2e:8d:31:92:94:e0:64:50:6b:75:
                    c6:a2:f4:21:40:34:49:7f:1c:79:46:38:05:bb:ae:
                    51:5c:10:52:a3:a2:88:f0:d7:cf:ea:0c:47:b2:d7:
                    aa:03:50:86:24:73:6a:5e:66:28:6a:6a:9b:b2:92:
                    8a:92:b8:bf:01:e2:e1:a5:25:2d:d0:db:70:c0:89:
                    f4:0e:37:60:bc:f7:2c:08:29:e3:44:15:01:d9:8a:
                    a3:d6:de:fa:4c:cb:82:56:3a:a6:d8:d4:a6:5b:1a:
                    83:75:a8:1c:38:bb:56:58:5f:38:19:a7:13:89:26:
                    ea:5b:07:4d:1d:60:20:8d:b3:ee:31:73:cc:bf:95:
                    2c:f8:59:b0:95:0e:fb:cd:9c:e6:14:50:1b:cf:fe:
                    bd:09:82:1c:4e:0e:af:93:f6:33:e6:6d:15:ef:4e:
                    a4:1f:e9:c4:9d:ba:eb:22:bd:82:18:e4:08:45:06:
                    c0:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:96:EC:86:9A:F5:A4:C4:A3:6D:6E:3F:2C:BA:8C:C8:B7:E8:47:4F
            X509v3 Authority Key Identifier:
                keyid:3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/3F3F79509A7F11F18394121BCF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.13.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         4d:4d:3e:8f:5c:18:97:6e:a8:88:bc:ac:00:a6:c0:5a:3c:db:
         87:1c:0e:1d:f3:18:bc:0d:c2:3f:bd:99:75:aa:cd:b3:41:ff:
         4e:44:6e:71:f2:6d:eb:63:f9:45:9b:54:ae:16:02:29:33:d6:
         9a:48:a0:63:ab:c7:7b:bf:d7:c4:99:ba:35:b9:50:3f:7e:06:
         5f:20:22:06:8c:fb:1d:29:ea:b1:52:fb:10:fb:38:63:d5:03:
         23:db:f1:c9:10:e7:7c:c5:af:5d:11:e5:72:58:6a:43:fd:b3:
         46:ff:6f:54:89:2f:af:a7:3f:d6:0f:9e:2e:86:12:05:2e:fa:
         22:5d:53:a9:ad:0b:2c:ff:6a:ff:1d:09:04:3b:6b:7b:dd:05:
         b3:54:8a:ae:b9:5d:30:26:82:e5:18:3b:7a:9f:40:9e:21:8f:
         dd:3f:67:39:c6:9b:d2:a6:05:e1:54:f1:ee:4c:9a:84:bb:d7:
         4f:35:be:0c:35:c3:65:ce:02:a4:b8:8c:b7:68:32:7d:b1:63:
         44:27:66:95:c2:09:5e:d6:8b:e7:1c:52:bb:32:46:02:3f:e4:
         4c:96:84:5f:da:18:b3:57:10:83:77:a7:a5:61:69:7d:ed:46:
         2e:81:b4:b8:66:ab:5f:21:54:35:d4:48:de:d0:18:01:ef:55:
         cd:0e:18:23
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCDcwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NDcxMkZBRjExMC8GA1UEBRMoM0Q1NUM3ODRFQTE3OTEyRjBFOTYwQTI1QzZDQTky
MEUxMDAyMzAwQTAeFw0yNjA4MTcyMTA0MjhaFw0zNjEyMzEyMTA0MjhaMBgxFjAU
BgNVBAMTDTZhODM3NzYyLWE5YjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCwvbcHQpxIevUhCt4JdL3NKl9zY/NMna2ABG9glWaQZrhjxzsR2UjTO80k
Wj/7OppiQlOxir/Gez+yyLNZt+qi3Qgv6PfAwegivrpds7C1Lo0xkpTgZFBrdcai
9CFANEl/HHlGOAW7rlFcEFKjoojw18/qDEey16oDUIYkc2peZihqapuykoqSuL8B
4uGlJS3Q23DAifQON2C89ywIKeNEFQHZiqPW3vpMy4JWOqbY1KZbGoN1qBw4u1ZY
XzgZpxOJJupbB00dYCCNs+4xc8y/lSz4WbCVDvvNnOYUUBvP/r0JghxODq+T9jPm
bRXvTqQf6cSduusivYIY5AhFBsBrAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUGpbs
hpr1pMSjbW4/LLqMyLfoR08wHwYDVR0jBBgwFoAUPVXHhOoXkS8OlgolxsqSDhAC
MAowDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjQ3MTJGL0U5QzRCQUEyQTBFODExRUI4ODk1OEQxMEY4QUVBMjI4L1BWWEho
T29Ya1M4T2xnb2x4c3FTRGhBQ01Bby5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1BWWEhoT29Ya1M4T2xnb2x4c3FTRGhBQ01Bby5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjQ3MTJGL0U5QzRCQUEyQTBFODExRUI4ODk1OEQxMEY4
QUVBMjI4LzNGM0Y3OTUwOUE3RjExRjE4Mzk0MTIxQkNGMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAYpDQAwDQYJKoZIhvcNAQEL
BQADggEBAE1NPo9cGJduqIi8rACmwFo824ccDh3zGLwNwj+9mXWqzbNB/05EbnHy
betj+UWbVK4WAikz1ppIoGOrx3u/18SZujW5UD9+Bl8gIgaM+x0p6rFS+xD7OGPV
AyPb8ckQ53zFr10R5XJYakP9s0b/b1SJL6+nP9YPni6GEgUu+iJdU6mtCyz/av8d
CQQ7a3vdBbNUiq65XTAmguUYO3qfQJ4hj90/ZznGm9KmBeFU8e5MmoS71081vgw1
w2XOAqS4jLdoMn2xY0QnZpXCCV7Wi+ccUrsyRgI/5EyWhF/aGLNXEIN3p6VhaX3t
Ri6BtLhmq18hVDXUSN7QGAHvVc0OGCM=
-----END CERTIFICATE-----