Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/9543B1D4B58E11F18C061C03CF1D38B0.roa
File:                     9543B1D4B58E11F18C061C03CF1D38B0.roa (raw, json)
Hash identifier:          GPlNkd5kolYY3JIw7bsaODQ/TzByRRPU7jGX3L5bhgQ=
Subject key identifier:   18:FD:FC:84:E9:71:86:78:F3:3A:D2:63:91:27:18:4A:5B:EB:CE:1F
Certificate issuer:       /CN=F364712FAF/serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
Certificate serial:       0922
Authority key identifier: 3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/9543B1D4B58E11F18C061C03CF1D38B0.roa
Signing time:             Mon 21 Sep 2026 07:32:22 +0000
ROA not before:           Mon 21 Sep 2026 07:32:18 +0000
ROA not after:            Wed 31 Dec 2036 07:32:18 +0000
asID:                     29975
IP address blocks:        196.46.160.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Sep 2026 00:07:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2338 (0x922)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364712FAF, serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
        Validity
            Not Before: Sep 21 07:32:18 2026 GMT
            Not After : Dec 31 07:32:18 2036 GMT
        Subject: CN=6ab0dd86-765b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:2a:e9:2c:5a:32:16:5f:19:33:5d:21:78:10:
                    c6:52:56:f8:3e:43:7c:58:1b:4c:ad:e0:5d:44:06:
                    73:ed:f2:f2:29:51:60:1f:b9:c1:72:71:00:db:34:
                    94:6a:35:8f:f1:ee:1f:4d:ec:87:f7:b4:e0:d1:2f:
                    59:94:b0:37:16:7f:ae:ba:a5:ab:d4:e1:f4:ac:97:
                    f3:bc:ae:a9:32:63:84:03:d5:f8:8a:c1:2c:6a:30:
                    b3:11:36:c4:6c:30:3b:34:8a:8f:7d:f7:16:fb:13:
                    6a:e0:94:77:bf:46:66:a6:73:1c:ac:8c:09:c4:ea:
                    7e:31:f2:51:72:af:94:e2:b1:f4:9e:75:e4:7b:1d:
                    34:19:c4:6a:e7:8b:be:af:c8:8f:b8:f2:ab:34:13:
                    d3:f1:ac:e8:a2:d7:f5:bb:38:06:9c:ad:fa:11:0b:
                    f0:bd:23:3a:2e:bb:a5:c9:99:78:63:b3:2f:b5:4c:
                    40:20:51:3d:64:9a:2f:71:c7:26:db:79:21:4c:eb:
                    18:06:3e:19:35:18:56:aa:db:af:01:f7:78:3d:91:
                    67:00:0e:f4:5c:0d:cb:2f:5c:96:ac:88:b1:05:79:
                    d2:bf:97:99:8b:4f:ac:1c:12:71:ed:0b:f2:ad:7e:
                    a3:99:c5:32:0e:e2:fe:47:4e:b1:e1:97:29:fa:01:
                    c8:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:FD:FC:84:E9:71:86:78:F3:3A:D2:63:91:27:18:4A:5B:EB:CE:1F
            X509v3 Authority Key Identifier:
                keyid:3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/9543B1D4B58E11F18C061C03CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.46.160.0/21

    Signature Algorithm: sha256WithRSAEncryption
         bb:e0:77:e4:95:1a:c9:bb:20:58:cf:87:06:d6:e4:a9:2a:85:
         34:aa:82:59:7c:8c:ca:e9:8d:0f:66:8d:cd:53:2a:9f:a3:a5:
         44:a7:63:9e:a1:2e:0b:50:2b:de:85:e4:83:0d:74:8e:45:4e:
         49:15:5a:47:69:eb:7a:c2:8e:39:ab:9f:ff:95:7e:a5:9d:e7:
         51:70:23:9c:a7:69:ca:37:d8:6c:14:01:e4:9c:90:c3:ec:c1:
         85:bf:3a:9e:fe:74:91:5a:be:61:a5:83:a0:eb:b5:68:41:1d:
         ee:12:8d:db:3a:ef:2d:c5:bf:01:03:dd:4c:e3:9a:e6:0c:79:
         10:58:85:2e:a1:49:eb:63:6f:71:e6:4f:77:95:d6:dd:a4:63:
         63:6e:b8:c9:94:a0:ff:b3:c0:92:03:63:3d:fd:a0:d1:39:71:
         37:e8:0e:79:5e:3a:2d:9c:4a:ac:d8:b4:18:b1:a1:37:d3:81:
         59:56:ea:ae:d3:c4:07:9f:5c:a7:ee:b1:eb:3d:54:53:e8:5f:
         1a:5a:00:ce:08:9e:eb:a1:3e:ad:43:9a:84:8a:85:66:75:ce:
         39:dd:11:6d:2d:46:23:0e:23:61:57:71:c0:c3:c1:eb:8c:f8:
         d1:cd:0f:b5:84:03:e9:9e:b5:7e:6f:78:08:a1:f6:33:6c:ae:
         7f:b6:c1:e9
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCSIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NDcxMkZBRjExMC8GA1UEBRMoM0Q1NUM3ODRFQTE3OTEyRjBFOTYwQTI1QzZDQTky
MEUxMDAyMzAwQTAeFw0yNjA5MjEwNzMyMThaFw0zNjEyMzEwNzMyMThaMBgxFjAU
BgNVBAMTDTZhYjBkZDg2LTc2NWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCvKuksWjIWXxkzXSF4EMZSVvg+Q3xYG0yt4F1EBnPt8vIpUWAfucFycQDb
NJRqNY/x7h9N7If3tODRL1mUsDcWf666pavU4fSsl/O8rqkyY4QD1fiKwSxqMLMR
NsRsMDs0io999xb7E2rglHe/RmamcxysjAnE6n4x8lFyr5TisfSedeR7HTQZxGrn
i76vyI+48qs0E9PxrOii1/W7OAacrfoRC/C9Izouu6XJmXhjsy+1TEAgUT1kmi9x
xybbeSFM6xgGPhk1GFaq268B93g9kWcADvRcDcsvXJasiLEFedK/l5mLT6wcEnHt
C/KtfqOZxTIO4v5HTrHhlyn6Acj3AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUGP38
hOlxhnjzOtJjkScYSlvrzh8wHwYDVR0jBBgwFoAUPVXHhOoXkS8OlgolxsqSDhAC
MAowDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjQ3MTJGL0U5QzRCQUEyQTBFODExRUI4ODk1OEQxMEY4QUVBMjI4L1BWWEho
T29Ya1M4T2xnb2x4c3FTRGhBQ01Bby5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1BWWEhoT29Ya1M4T2xnb2x4c3FTRGhBQ01Bby5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjQ3MTJGL0U5QzRCQUEyQTBFODExRUI4ODk1OEQxMEY4
QUVBMjI4Lzk1NDNCMUQ0QjU4RTExRjE4QzA2MUMwM0NGMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAPELqAwDQYJKoZIhvcNAQEL
BQADggEBALvgd+SVGsm7IFjPhwbW5KkqhTSqgll8jMrpjQ9mjc1TKp+jpUSnY56h
LgtQK96F5IMNdI5FTkkVWkdp63rCjjmrn/+VfqWd51FwI5ynaco32GwUAeSckMPs
wYW/Op7+dJFavmGlg6DrtWhBHe4Sjds67y3FvwED3UzjmuYMeRBYhS6hSetjb3Hm
T3eV1t2kY2NuuMmUoP+zwJIDYz39oNE5cTfoDnleOi2cSqzYtBixoTfTgVlW6q7T
xAefXKfuses9VFPoXxpaAM4InuuhPq1DmoSKhWZ1zjndEW0tRiMOI2FXccDDweuM
+NHND7WEA+metX5veAih9jNsrn+2wek=
-----END CERTIFICATE-----