Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/561FDAE0B1AC11F18DDF6CCCCE1D38B0.roa
File:                     561FDAE0B1AC11F18DDF6CCCCE1D38B0.roa (raw, json)
Hash identifier:          T+/r0ZOYtYThYwJtvLzvUDGYxOnYFEFhj4ngAD+zS54=
Subject key identifier:   54:79:A2:A5:49:64:85:6D:3D:1A:06:4B:96:97:0B:73:A5:0F:7A:FE
Certificate issuer:       /CN=F364712FAF/serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
Certificate serial:       08D2
Authority key identifier: 3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/561FDAE0B1AC11F18DDF6CCCCE1D38B0.roa
Signing time:             Wed 16 Sep 2026 08:55:16 +0000
ROA not before:           Wed 16 Sep 2026 08:55:12 +0000
ROA not after:            Wed 31 Dec 2036 08:55:12 +0000
asID:                     29975
IP address blocks:        41.28.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2258 (0x8d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364712FAF, serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
        Validity
            Not Before: Sep 16 08:55:12 2026 GMT
            Not After : Dec 31 08:55:12 2036 GMT
        Subject: CN=6aaa5974-0838
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:4c:f5:d3:35:c4:80:ed:8c:b7:81:fc:12:c1:
                    6c:db:b4:9c:4d:9d:3c:ad:a5:12:58:2c:03:28:16:
                    7a:50:00:cc:8a:4e:68:fd:7b:67:d2:69:b5:a3:58:
                    40:81:91:81:17:7a:0f:12:59:06:c3:0d:26:47:5f:
                    f0:ad:cf:fd:7d:a9:44:17:0e:f9:d6:9d:f2:eb:1f:
                    1b:d6:b5:4c:9f:90:ba:62:44:28:a7:dd:ac:8c:c3:
                    bf:78:d1:d2:94:e8:cd:f2:13:0a:c4:7c:e0:f5:ec:
                    3f:a7:f8:7a:d4:58:6e:d9:c8:df:75:52:ba:f4:ca:
                    a9:91:34:cb:36:1a:b3:0d:a6:87:8a:95:ba:63:f8:
                    0f:06:91:e2:65:ba:e0:11:8e:26:65:bd:97:d4:c9:
                    ca:f2:41:1f:6d:6a:0f:74:f5:ac:28:20:ab:c1:b5:
                    b6:ad:66:ff:26:c5:c5:fc:cb:90:85:04:69:95:82:
                    d9:c8:63:7f:ae:4a:4a:5b:7e:a4:e2:5a:90:ed:08:
                    ce:40:a7:1f:44:6c:76:c5:ce:b9:e4:ab:3d:a5:eb:
                    a9:05:6d:c5:86:21:ad:fb:84:2f:c5:91:c1:f2:6a:
                    0a:d4:af:9b:19:3c:4b:1f:f9:f8:ca:1a:08:ac:e4:
                    6b:1b:97:61:48:ac:f8:44:e6:56:97:9c:57:09:c4:
                    31:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:79:A2:A5:49:64:85:6D:3D:1A:06:4B:96:97:0B:73:A5:0F:7A:FE
            X509v3 Authority Key Identifier:
                keyid:3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/561FDAE0B1AC11F18DDF6CCCCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.28.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         9e:37:22:d1:8b:46:b6:ba:cc:dd:b9:ac:bf:c3:6a:d8:89:d8:
         01:2d:e9:32:fe:b9:06:51:d3:11:b2:32:89:2d:3f:e8:b0:81:
         65:02:93:f7:43:18:3c:a2:86:33:fe:f2:92:25:ee:e5:dd:31:
         a6:1d:92:04:e9:78:7a:11:92:3e:1f:be:41:a0:d9:d4:54:c9:
         53:b8:e2:2b:b9:0c:00:80:aa:82:44:05:22:3f:74:af:8b:ba:
         d1:d5:ca:d6:fd:03:2b:13:18:c3:f7:ab:56:f9:28:bc:1f:4b:
         b9:40:d1:2f:40:38:96:dc:0d:29:15:79:00:40:47:93:5f:85:
         c1:07:0d:3b:32:9e:c6:3a:54:7e:8a:aa:39:7d:19:90:10:3d:
         02:f1:f1:74:c6:e1:f1:a6:02:c4:82:78:57:00:61:0e:00:28:
         0f:e7:d0:44:24:6d:2d:51:b2:45:ca:79:e5:9a:19:2f:bc:8a:
         a9:8a:d9:23:a3:c5:07:f6:8d:d7:f7:74:09:56:7d:db:1d:7d:
         44:69:fe:ec:b1:da:d4:36:fd:10:75:9b:8e:0a:f7:68:6f:15:
         fa:c8:09:a8:a8:3d:38:1d:98:e1:04:5c:0f:66:94:bb:f7:ec:
         5e:d4:be:e4:b6:c5:fc:3e:07:d7:f8:f5:91:34:ba:5b:c7:65:
         b1:8a:50:77
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCNIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NDcxMkZBRjExMC8GA1UEBRMoM0Q1NUM3ODRFQTE3OTEyRjBFOTYwQTI1QzZDQTky
MEUxMDAyMzAwQTAeFw0yNjA5MTYwODU1MTJaFw0zNjEyMzEwODU1MTJaMBgxFjAU
BgNVBAMTDTZhYWE1OTc0LTA4MzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDvTPXTNcSA7Yy3gfwSwWzbtJxNnTytpRJYLAMoFnpQAMyKTmj9e2fSabWj
WECBkYEXeg8SWQbDDSZHX/Ctz/19qUQXDvnWnfLrHxvWtUyfkLpiRCin3ayMw794
0dKU6M3yEwrEfOD17D+n+HrUWG7ZyN91Urr0yqmRNMs2GrMNpoeKlbpj+A8GkeJl
uuARjiZlvZfUycryQR9tag909awoIKvBtbatZv8mxcX8y5CFBGmVgtnIY3+uSkpb
fqTiWpDtCM5Apx9EbHbFzrnkqz2l66kFbcWGIa37hC/FkcHyagrUr5sZPEsf+fjK
Ggis5Gsbl2FIrPhE5laXnFcJxDGdAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUVHmi
pUlkhW09GgZLlpcLc6UPev4wHwYDVR0jBBgwFoAUPVXHhOoXkS8OlgolxsqSDhAC
MAowDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjQ3MTJGL0U5QzRCQUEyQTBFODExRUI4ODk1OEQxMEY4QUVBMjI4L1BWWEho
T29Ya1M4T2xnb2x4c3FTRGhBQ01Bby5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1BWWEhoT29Ya1M4T2xnb2x4c3FTRGhBQ01Bby5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjQ3MTJGL0U5QzRCQUEyQTBFODExRUI4ODk1OEQxMEY4
QUVBMjI4LzU2MUZEQUUwQjFBQzExRjE4RERGNkNDQ0NFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAYpHIAwDQYJKoZIhvcNAQEL
BQADggEBAJ43ItGLRra6zN25rL/DatiJ2AEt6TL+uQZR0xGyMoktP+iwgWUCk/dD
GDyihjP+8pIl7uXdMaYdkgTpeHoRkj4fvkGg2dRUyVO44iu5DACAqoJEBSI/dK+L
utHVytb9AysTGMP3q1b5KLwfS7lA0S9AOJbcDSkVeQBAR5NfhcEHDTsynsY6VH6K
qjl9GZAQPQLx8XTG4fGmAsSCeFcAYQ4AKA/n0EQkbS1RskXKeeWaGS+8iqmK2SOj
xQf2jdf3dAlWfdsdfURp/uyx2tQ2/RB1m44K92hvFfrICaioPTgdmOEEXA9mlLv3
7F7UvuS2xfw+B9f49ZE0ulvHZbGKUHc=
-----END CERTIFICATE-----