Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/7D038518B33111F1B3859400CF1D38B0.roa
File:                     7D038518B33111F1B3859400CF1D38B0.roa (raw, json)
Hash identifier:          9dkogiQHJ7T9TyVBm3kFfngdSYcBu6UGHtp3JL5ggY0=
Subject key identifier:   8F:E3:C3:8C:93:63:0B:48:AC:68:FD:78:37:13:09:B9:E7:C3:FB:BF
Certificate issuer:       /CN=F364712FAF/serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
Certificate serial:       090A
Authority key identifier: 3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/7D038518B33111F1B3859400CF1D38B0.roa
Signing time:             Fri 18 Sep 2026 07:20:56 +0000
ROA not before:           Fri 18 Sep 2026 07:20:52 +0000
ROA not after:            Wed 31 Dec 2036 07:20:52 +0000
asID:                     29975
IP address blocks:        105.252.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 06 Oct 2026 00:07:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2314 (0x90a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364712FAF, serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
        Validity
            Not Before: Sep 18 07:20:52 2026 GMT
            Not After : Dec 31 07:20:52 2036 GMT
        Subject: CN=6aace658-873c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:2a:e4:8d:1f:16:cf:85:a7:aa:5c:7d:b4:0a:
                    e5:9c:6d:ed:52:71:51:04:89:a3:af:09:88:f8:9a:
                    1d:8b:df:f4:a1:55:f7:a3:04:38:60:d5:5c:58:12:
                    45:bf:4f:7d:4a:13:18:ec:c1:fb:8b:27:0a:0f:5e:
                    ab:38:a3:bd:e0:71:29:4c:1e:1f:db:4e:de:af:10:
                    5a:14:7f:80:17:23:30:a6:e6:6a:5f:2b:30:18:ac:
                    84:bc:e0:91:01:c0:0c:5e:ab:c8:8f:5d:6a:14:21:
                    42:f9:39:3a:18:79:2c:b4:e1:d3:f9:9c:2a:b0:35:
                    80:ee:0a:41:ba:15:9a:3f:cb:e6:78:31:25:ab:0b:
                    b7:a7:1d:ed:22:13:7a:51:52:48:a6:9e:6f:dd:90:
                    c0:09:22:88:d6:09:af:0b:19:19:2f:11:06:41:0a:
                    1d:3e:5a:2b:92:46:86:99:3c:ad:32:f4:2f:c4:b8:
                    76:12:40:80:d7:ef:4f:ed:7a:c5:74:fc:f3:74:b7:
                    d2:68:6d:6d:9a:32:83:63:88:40:73:a1:e9:20:42:
                    6f:6a:40:e9:5b:4c:2a:b1:49:27:14:88:45:e8:e5:
                    53:e8:12:99:f9:8d:d0:9f:69:d0:e7:47:a4:43:21:
                    f4:e2:bd:68:9f:69:43:34:e1:78:cd:f3:7f:74:0a:
                    56:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:E3:C3:8C:93:63:0B:48:AC:68:FD:78:37:13:09:B9:E7:C3:FB:BF
            X509v3 Authority Key Identifier:
                keyid:3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/7D038518B33111F1B3859400CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  105.252.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         c2:48:9d:82:62:53:2e:0b:64:f1:09:ec:d0:85:3b:ec:21:d5:
         ea:87:a8:d3:44:a1:13:78:d7:db:3c:ac:78:16:12:58:4c:6d:
         01:3e:7d:57:2b:8a:94:60:cb:8d:08:e6:c3:c5:66:c0:d0:ea:
         6e:ee:36:0d:2c:03:ea:98:f9:06:13:9b:eb:5e:3f:bf:2c:dd:
         2b:e1:44:f8:49:85:83:5f:53:b3:4a:2d:24:6c:c0:b9:7b:0d:
         fd:71:54:f8:62:1c:61:e7:72:dc:bc:e9:eb:2f:72:35:f3:19:
         f1:cb:27:dc:b3:b4:e3:55:d2:ba:f3:10:fc:8b:81:7e:b8:d1:
         4b:4d:c9:01:29:4f:21:1d:6f:55:57:69:f0:b8:66:a5:1b:72:
         32:ad:fe:f8:33:44:45:9c:c5:c1:3b:b5:07:fd:18:01:41:f2:
         c6:6f:c0:27:90:c0:57:83:72:88:ac:8f:93:6b:87:4d:3d:04:
         ae:7a:e0:8a:dd:fc:9e:71:3e:a2:19:f4:d4:b9:c4:7d:22:9d:
         f7:2d:3f:35:31:ab:4d:c3:be:68:21:81:8b:e6:b9:86:dd:77:
         61:4d:8e:44:ec:ff:57:6b:a2:0c:89:58:86:f9:52:77:01:9c:
         48:7d:a9:55:c4:c9:72:20:5a:14:2e:77:31:ca:0e:92:a0:7e:
         72:81:f9:12
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCQowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NDcxMkZBRjExMC8GA1UEBRMoM0Q1NUM3ODRFQTE3OTEyRjBFOTYwQTI1QzZDQTky
MEUxMDAyMzAwQTAeFw0yNjA5MTgwNzIwNTJaFw0zNjEyMzEwNzIwNTJaMBgxFjAU
BgNVBAMTDTZhYWNlNjU4LTg3M2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDFKuSNHxbPhaeqXH20CuWcbe1ScVEEiaOvCYj4mh2L3/ShVfejBDhg1VxY
EkW/T31KExjswfuLJwoPXqs4o73gcSlMHh/bTt6vEFoUf4AXIzCm5mpfKzAYrIS8
4JEBwAxeq8iPXWoUIUL5OToYeSy04dP5nCqwNYDuCkG6FZo/y+Z4MSWrC7enHe0i
E3pRUkimnm/dkMAJIojWCa8LGRkvEQZBCh0+WiuSRoaZPK0y9C/EuHYSQIDX70/t
esV0/PN0t9JobW2aMoNjiEBzoekgQm9qQOlbTCqxSScUiEXo5VPoEpn5jdCfadDn
R6RDIfTivWifaUM04XjN8390ClYTAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUj+PD
jJNjC0isaP14NxMJuefD+78wHwYDVR0jBBgwFoAUPVXHhOoXkS8OlgolxsqSDhAC
MAowDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjQ3MTJGL0U5QzRCQUEyQTBFODExRUI4ODk1OEQxMEY4QUVBMjI4L1BWWEho
T29Ya1M4T2xnb2x4c3FTRGhBQ01Bby5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1BWWEhoT29Ya1M4T2xnb2x4c3FTRGhBQ01Bby5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjQ3MTJGL0U5QzRCQUEyQTBFODExRUI4ODk1OEQxMEY4
QUVBMjI4LzdEMDM4NTE4QjMzMTExRjFCMzg1OTQwMENGMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAZp/EAwDQYJKoZIhvcNAQEL
BQADggEBAMJInYJiUy4LZPEJ7NCFO+wh1eqHqNNEoRN419s8rHgWElhMbQE+fVcr
ipRgy40I5sPFZsDQ6m7uNg0sA+qY+QYTm+teP78s3SvhRPhJhYNfU7NKLSRswLl7
Df1xVPhiHGHncty86esvcjXzGfHLJ9yztONV0rrzEPyLgX640UtNyQEpTyEdb1VX
afC4ZqUbcjKt/vgzREWcxcE7tQf9GAFB8sZvwCeQwFeDcoisj5Nrh009BK564Ird
/J5xPqIZ9NS5xH0infctPzUxq03DvmghgYvmuYbdd2FNjkTs/1drogyJWIb5UncB
nEh9qVXEyXIgWhQudzHKDpKgfnKB+RI=
-----END CERTIFICATE-----