Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/AAC26E6A9D3D11F1AABF5DD0CE1D38B0.roa
File:                     AAC26E6A9D3D11F1AABF5DD0CE1D38B0.roa (raw, json)
Hash identifier:          u9Yy5BPDhKvn5B1poS8uX74a8VbkBHR49Cmk+cIOZP4=
Subject key identifier:   CB:FB:19:41:43:2A:E3:64:95:2E:E2:BD:07:5A:E1:5C:38:D4:3A:BB
Certificate issuer:       /CN=F364712FAF/serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
Certificate serial:       0847
Authority key identifier: 3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/AAC26E6A9D3D11F1AABF5DD0CE1D38B0.roa
Signing time:             Fri 21 Aug 2026 08:52:41 +0000
ROA not before:           Fri 21 Aug 2026 08:52:37 +0000
ROA not after:            Wed 31 Dec 2036 08:52:37 +0000
asID:                     29975
IP address blocks:        41.5.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 03 Oct 2026 00:07:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2119 (0x847)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364712FAF, serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
        Validity
            Not Before: Aug 21 08:52:37 2026 GMT
            Not After : Dec 31 08:52:37 2036 GMT
        Subject: CN=6a8811d9-a511
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:92:f6:ea:3c:f4:d3:18:b0:b6:7d:45:2f:e1:
                    ed:2a:8e:4b:15:33:ae:2a:85:73:cd:16:ec:e4:90:
                    51:e0:ba:e1:7c:8a:2a:15:18:e0:9c:c8:2e:92:03:
                    b9:dc:26:38:5e:5c:06:63:bc:27:b2:e5:75:d7:7d:
                    09:77:0c:2b:04:62:e5:4c:18:c7:25:ba:4a:61:af:
                    a0:8a:3f:9f:19:04:ca:5d:d6:94:51:db:d2:a3:fe:
                    e0:5e:0b:4f:ad:9a:92:8d:7b:e1:5d:40:d5:e4:ae:
                    12:46:28:1d:1c:9a:0c:5a:ce:81:c2:05:fc:f4:af:
                    9f:be:88:e5:60:e1:8e:79:23:e6:5b:47:97:67:c3:
                    77:ba:d9:2c:2a:40:d0:16:2d:d5:e8:8c:d2:f8:3e:
                    dd:42:d3:3d:94:e5:05:45:75:da:36:af:a6:f9:95:
                    dd:c2:55:c7:5b:f8:aa:bf:42:5c:64:e2:d7:4a:27:
                    16:66:ee:37:38:e0:fa:fd:cd:45:e3:86:ab:16:8d:
                    07:a0:9a:42:ed:be:c0:9a:0a:09:ad:91:ec:78:5b:
                    f0:3b:a8:78:8a:f5:8b:3d:58:fc:82:e5:da:6b:77:
                    0e:37:ed:1c:2e:df:89:ea:47:b9:03:84:40:b3:1b:
                    26:1d:f5:e5:ed:f4:a3:55:b0:84:ac:20:99:27:2b:
                    bd:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:FB:19:41:43:2A:E3:64:95:2E:E2:BD:07:5A:E1:5C:38:D4:3A:BB
            X509v3 Authority Key Identifier:
                keyid:3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/AAC26E6A9D3D11F1AABF5DD0CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.5.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         12:4a:03:11:7a:96:22:06:a4:25:a4:58:ee:a1:b9:39:6f:1f:
         82:d6:39:73:e1:86:24:11:7f:06:ff:59:6e:9e:b9:b6:0b:3e:
         a2:c1:d4:51:44:1c:35:83:78:56:55:8a:f4:ce:cf:d0:71:67:
         2a:1b:a1:49:d5:91:3a:34:4d:08:c0:be:31:32:de:ff:9f:b6:
         b0:60:39:3a:b4:44:53:d8:42:8e:71:88:95:68:af:ef:53:20:
         46:14:0b:e5:7d:df:3e:f0:1d:e9:d1:e0:98:45:95:14:1e:c7:
         5e:9b:b0:06:40:0f:f2:3a:32:6e:3d:e0:a8:dc:7d:c8:fa:25:
         76:0f:7b:26:66:b9:4b:d4:81:64:ba:47:e4:14:bd:24:17:41:
         ae:7d:7c:ba:c2:31:c3:31:94:6a:71:ec:22:2d:06:f7:6e:e0:
         9c:d1:3f:37:74:6a:01:fb:17:9b:8e:fc:4c:01:77:2c:33:b6:
         1c:e8:4e:f2:d0:b3:4a:e7:95:b0:e2:ed:1e:38:96:da:2f:8d:
         16:e3:5e:32:ce:6a:40:30:4c:20:ad:d9:06:57:b3:ff:25:a7:
         ce:09:12:05:eb:44:ba:48:f1:00:78:e4:72:c7:08:28:65:32:
         46:e0:53:68:26:7e:a4:ac:12:25:c5:0d:b3:2e:89:d0:e6:e0:
         48:8d:46:04
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCEcwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NDcxMkZBRjExMC8GA1UEBRMoM0Q1NUM3ODRFQTE3OTEyRjBFOTYwQTI1QzZDQTky
MEUxMDAyMzAwQTAeFw0yNjA4MjEwODUyMzdaFw0zNjEyMzEwODUyMzdaMBgxFjAU
BgNVBAMTDTZhODgxMWQ5LWE1MTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCVkvbqPPTTGLC2fUUv4e0qjksVM64qhXPNFuzkkFHguuF8iioVGOCcyC6S
A7ncJjheXAZjvCey5XXXfQl3DCsEYuVMGMclukphr6CKP58ZBMpd1pRR29Kj/uBe
C0+tmpKNe+FdQNXkrhJGKB0cmgxazoHCBfz0r5++iOVg4Y55I+ZbR5dnw3e62Swq
QNAWLdXojNL4Pt1C0z2U5QVFddo2r6b5ld3CVcdb+Kq/Qlxk4tdKJxZm7jc44Pr9
zUXjhqsWjQegmkLtvsCaCgmtkex4W/A7qHiK9Ys9WPyC5dprdw437Rwu34nqR7kD
hECzGyYd9eXt9KNVsISsIJknK70tAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUy/sZ
QUMq42SVLuK9B1rhXDjUOrswHwYDVR0jBBgwFoAUPVXHhOoXkS8OlgolxsqSDhAC
MAowDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjQ3MTJGL0U5QzRCQUEyQTBFODExRUI4ODk1OEQxMEY4QUVBMjI4L1BWWEho
T29Ya1M4T2xnb2x4c3FTRGhBQ01Bby5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1BWWEhoT29Ya1M4T2xnb2x4c3FTRGhBQ01Bby5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjQ3MTJGL0U5QzRCQUEyQTBFODExRUI4ODk1OEQxMEY4
QUVBMjI4L0FBQzI2RTZBOUQzRDExRjFBQUJGNUREMENFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAYpBcAwDQYJKoZIhvcNAQEL
BQADggEBABJKAxF6liIGpCWkWO6huTlvH4LWOXPhhiQRfwb/WW6eubYLPqLB1FFE
HDWDeFZVivTOz9BxZyoboUnVkTo0TQjAvjEy3v+ftrBgOTq0RFPYQo5xiJVor+9T
IEYUC+V93z7wHenR4JhFlRQex16bsAZAD/I6Mm494Kjcfcj6JXYPeyZmuUvUgWS6
R+QUvSQXQa59fLrCMcMxlGpx7CItBvdu4JzRPzd0agH7F5uO/EwBdywzthzoTvLQ
s0rnlbDi7R44ltovjRbjXjLOakAwTCCt2QZXs/8lp84JEgXrRLpI8QB45HLHCChl
MkbgU2gmfqSsEiXFDbMuidDm4EiNRgQ=
-----END CERTIFICATE-----