Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/BC0D08F0B26A11F1A0869BCBCE1D38B0.roa
File:                     BC0D08F0B26A11F1A0869BCBCE1D38B0.roa (raw, json)
Hash identifier:          8zpG7bbKZn+qFDRNzm8TgRguOj3zhGetc/7FCHgPaXA=
Subject key identifier:   54:87:D1:CF:76:F8:1C:01:0B:BE:05:D9:CC:0C:B9:13:99:03:E1:E4
Certificate issuer:       /CN=F364712FAF/serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
Certificate serial:       08DB
Authority key identifier: 3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/BC0D08F0B26A11F1A0869BCBCE1D38B0.roa
Signing time:             Thu 17 Sep 2026 07:38:12 +0000
ROA not before:           Thu 17 Sep 2026 07:38:08 +0000
ROA not after:            Wed 31 Dec 2036 07:38:08 +0000
asID:                     29975
IP address blocks:        41.29.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 16 Oct 2026 02:05:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2267 (0x8db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364712FAF, serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
        Validity
            Not Before: Sep 17 07:38:08 2026 GMT
            Not After : Dec 31 07:38:08 2036 GMT
        Subject: CN=6aab98e4-6c71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a0:cb:58:56:ed:3c:2b:17:51:c0:28:e8:a7:
                    8d:dd:ed:1e:7c:d1:b1:3d:df:a9:83:ea:1e:75:38:
                    fe:da:55:e6:ba:a0:30:04:4c:c3:ff:11:08:f4:0d:
                    25:d7:db:ec:16:6b:e7:2d:03:79:81:dd:fa:ba:e9:
                    07:92:05:06:cd:a1:65:21:2a:da:31:35:fd:85:77:
                    dc:5b:d7:a6:41:df:40:5c:53:2f:5e:15:59:fa:9a:
                    68:8c:31:a0:ae:78:ec:31:18:66:8d:48:4a:92:02:
                    8e:58:73:0e:44:a1:2a:57:4c:24:c3:35:10:8d:48:
                    47:0e:61:3f:a8:47:e9:c1:cc:7c:8d:c6:16:9a:1b:
                    9a:18:4a:d3:bb:20:cb:a7:2d:90:0c:cd:07:0e:43:
                    be:4d:22:cb:01:bc:28:da:c7:6d:6b:8d:8f:0c:89:
                    3d:d2:8d:52:9f:fc:98:05:82:aa:21:d6:87:0c:62:
                    d9:d8:3d:65:99:b3:7c:75:78:40:a4:90:2b:46:eb:
                    11:af:ba:7e:fd:a8:55:e7:02:55:19:00:b2:d4:05:
                    a4:04:c3:15:25:84:35:2b:53:fc:3a:8c:25:d0:ce:
                    78:36:ba:9a:aa:d2:18:31:72:51:1e:dd:49:91:85:
                    1d:3f:98:d2:73:a6:9e:0b:9d:6a:2b:ad:10:f4:57:
                    27:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:87:D1:CF:76:F8:1C:01:0B:BE:05:D9:CC:0C:B9:13:99:03:E1:E4
            X509v3 Authority Key Identifier:
                keyid:3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/BC0D08F0B26A11F1A0869BCBCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.29.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         05:58:66:a7:ec:c1:72:46:e9:0b:e7:c7:a5:64:2f:2b:92:47:
         49:0a:0d:43:fc:74:86:95:db:45:2c:b2:fd:ab:47:17:ec:61:
         4c:76:9c:99:08:40:53:84:04:f5:8d:56:f0:7a:b8:6a:3a:53:
         aa:3f:c0:99:37:57:fa:49:e3:46:6a:2f:79:08:cf:8e:7c:38:
         e7:4a:27:a7:7a:0c:d4:c2:dc:92:c8:1d:df:c3:27:5b:94:8a:
         89:cd:52:80:1b:85:ba:23:49:dc:eb:d0:e7:7b:08:d1:0d:f8:
         76:79:6a:ce:d3:f7:f6:1c:8e:c9:94:23:85:6d:60:8b:43:ba:
         ba:64:06:db:7c:00:3f:a4:9e:0f:08:7f:3e:55:03:f5:41:e0:
         6d:77:69:5f:49:15:3a:38:50:e3:0e:d2:41:ee:35:99:29:ce:
         85:68:dc:ba:75:25:8e:86:8c:66:b6:27:6e:0b:4f:af:1c:dd:
         a5:6a:4b:63:d6:f7:f8:4a:51:a2:0c:99:4b:8c:f3:22:ef:1a:
         ed:93:a7:3f:ef:2b:23:9d:ed:ce:35:b9:94:90:b0:36:2d:88:
         a8:d9:75:34:bf:17:bb:11:fa:3a:ab:48:02:6d:9f:db:65:30:
         b3:58:9f:ab:07:90:f0:d4:e0:30:de:ab:85:7d:dc:d3:84:19:
         66:aa:e2:24
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCNswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NDcxMkZBRjExMC8GA1UEBRMoM0Q1NUM3ODRFQTE3OTEyRjBFOTYwQTI1QzZDQTky
MEUxMDAyMzAwQTAeFw0yNjA5MTcwNzM4MDhaFw0zNjEyMzEwNzM4MDhaMBgxFjAU
BgNVBAMTDTZhYWI5OGU0LTZjNzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDOoMtYVu08KxdRwCjop43d7R580bE936mD6h51OP7aVea6oDAETMP/EQj0
DSXX2+wWa+ctA3mB3fq66QeSBQbNoWUhKtoxNf2Fd9xb16ZB30BcUy9eFVn6mmiM
MaCueOwxGGaNSEqSAo5Ycw5EoSpXTCTDNRCNSEcOYT+oR+nBzHyNxhaaG5oYStO7
IMunLZAMzQcOQ75NIssBvCjax21rjY8MiT3SjVKf/JgFgqoh1ocMYtnYPWWZs3x1
eECkkCtG6xGvun79qFXnAlUZALLUBaQEwxUlhDUrU/w6jCXQzng2upqq0hgxclEe
3UmRhR0/mNJzpp4LnWorrRD0VyfpAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUVIfR
z3b4HAELvgXZzAy5E5kD4eQwHwYDVR0jBBgwFoAUPVXHhOoXkS8OlgolxsqSDhAC
MAowDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjQ3MTJGL0U5QzRCQUEyQTBFODExRUI4ODk1OEQxMEY4QUVBMjI4L1BWWEho
T29Ya1M4T2xnb2x4c3FTRGhBQ01Bby5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1BWWEhoT29Ya1M4T2xnb2x4c3FTRGhBQ01Bby5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjQ3MTJGL0U5QzRCQUEyQTBFODExRUI4ODk1OEQxMEY4
QUVBMjI4L0JDMEQwOEYwQjI2QTExRjFBMDg2OUJDQkNFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAYpHYAwDQYJKoZIhvcNAQEL
BQADggEBAAVYZqfswXJG6Qvnx6VkLyuSR0kKDUP8dIaV20Ussv2rRxfsYUx2nJkI
QFOEBPWNVvB6uGo6U6o/wJk3V/pJ40ZqL3kIz458OOdKJ6d6DNTC3JLIHd/DJ1uU
ionNUoAbhbojSdzr0Od7CNEN+HZ5as7T9/YcjsmUI4VtYItDurpkBtt8AD+kng8I
fz5VA/VB4G13aV9JFTo4UOMO0kHuNZkpzoVo3Lp1JY6GjGa2J24LT68c3aVqS2PW
9/hKUaIMmUuM8yLvGu2Tpz/vKyOd7c41uZSQsDYtiKjZdTS/F7sR+jqrSAJtn9tl
MLNYn6sHkPDU4DDeq4V93NOEGWaq4iQ=
-----END CERTIFICATE-----