Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/F22411DEB27111F1BB9D7EF5CE1D38B0.roa
File:                     F22411DEB27111F1BB9D7EF5CE1D38B0.roa (raw, json)
Hash identifier:          Ftr4YRPV1BNTOZ31ua1ovu2X6xvXQeu2ZG/OGh0zeBM=
Subject key identifier:   11:2C:BC:81:09:83:93:32:57:6C:D8:A1:FE:99:7E:DB:EC:58:C4:47
Certificate issuer:       /CN=F364712FAF/serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
Certificate serial:       08F5
Authority key identifier: 3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/F22411DEB27111F1BB9D7EF5CE1D38B0.roa
Signing time:             Thu 17 Sep 2026 08:29:49 +0000
ROA not before:           Thu 17 Sep 2026 08:29:45 +0000
ROA not after:            Wed 31 Dec 2036 08:29:45 +0000
asID:                     29975
IP address blocks:        105.249.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 02:05:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2293 (0x8f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364712FAF, serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
        Validity
            Not Before: Sep 17 08:29:45 2026 GMT
            Not After : Dec 31 08:29:45 2036 GMT
        Subject: CN=6aaba4fd-8b55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:a0:ba:21:8d:91:16:65:31:a6:88:e7:c1:0b:
                    95:a3:f8:62:61:6e:93:79:e7:51:11:af:71:f8:ff:
                    5f:a9:bf:51:33:cc:eb:2a:f5:2a:ef:96:af:82:2f:
                    77:a0:e0:97:2d:50:d8:bf:a3:07:49:64:26:06:b0:
                    7a:7e:65:76:5a:ed:92:ac:81:3e:a5:4b:c9:c7:02:
                    aa:fa:f7:44:25:84:1c:21:3c:cf:c2:80:33:12:84:
                    71:67:b6:63:39:49:15:dc:40:2c:5d:59:da:11:fd:
                    63:19:d0:22:6c:3c:6a:ad:d6:25:78:78:ab:89:36:
                    ef:54:1e:20:39:1f:dc:8f:bd:ec:52:08:03:3e:1f:
                    85:f0:fd:2b:c6:f7:e5:64:d5:5c:73:41:82:1c:fd:
                    a8:98:ca:dc:02:4a:2e:8f:83:d3:95:a4:82:03:43:
                    90:82:55:eb:b6:3c:8d:b5:fd:1f:ea:c3:02:0a:b5:
                    aa:f3:ef:c0:99:4d:ca:41:c9:8e:15:f6:82:73:e8:
                    9c:36:44:92:3c:cb:c2:0f:c8:e3:d6:78:af:94:8e:
                    db:06:d7:e8:db:58:7f:c9:25:04:52:8c:82:76:05:
                    ce:48:4d:1d:60:bf:20:d4:6b:d6:db:b4:9c:33:7c:
                    46:0e:cf:b1:06:e1:d3:01:90:c8:7d:a5:a4:93:b9:
                    db:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:2C:BC:81:09:83:93:32:57:6C:D8:A1:FE:99:7E:DB:EC:58:C4:47
            X509v3 Authority Key Identifier:
                keyid:3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/F22411DEB27111F1BB9D7EF5CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  105.249.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         0f:e0:4b:63:e1:c7:29:a1:3d:a7:a8:27:8c:94:11:93:ab:4d:
         22:b7:a6:28:cc:36:fe:70:d3:d9:cd:b7:bd:94:1a:2c:12:d4:
         06:22:c5:74:58:9f:6f:73:3d:29:2e:07:ee:3a:46:e2:6d:6c:
         2b:b7:ea:56:1e:00:58:06:97:e9:dc:2c:e9:a5:f6:c9:5e:97:
         ff:23:45:cd:fb:bf:9d:9e:9a:3e:28:77:0e:1e:0f:9f:5e:27:
         75:ea:2c:94:9a:66:10:ba:92:7f:55:e3:69:33:ac:8f:77:90:
         9e:f8:e9:53:83:6f:db:c1:2c:67:25:d3:a6:b0:70:5b:c3:8d:
         78:f4:d3:e8:35:4f:9b:25:c5:91:c7:af:ba:4c:21:b7:ed:82:
         4b:d3:66:ef:75:4b:1a:43:d1:b0:4d:81:be:40:71:88:a2:b3:
         b9:f3:53:a1:c8:ff:15:14:32:99:71:38:e1:51:4f:69:77:f8:
         ab:b0:e8:4c:b5:46:71:b9:3d:c7:12:86:0b:fd:2d:26:21:34:
         f2:21:4a:e9:c8:1c:05:42:73:54:04:a7:43:d0:00:a8:dc:8e:
         91:24:38:33:c3:c2:7d:5d:69:ca:0c:50:79:f5:8b:36:82:40:
         c1:1e:d7:7a:61:fb:43:54:d6:be:db:8e:2f:de:75:fc:bd:cc:
         ac:85:8d:6f
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCPUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NDcxMkZBRjExMC8GA1UEBRMoM0Q1NUM3ODRFQTE3OTEyRjBFOTYwQTI1QzZDQTky
MEUxMDAyMzAwQTAeFw0yNjA5MTcwODI5NDVaFw0zNjEyMzEwODI5NDVaMBgxFjAU
BgNVBAMTDTZhYWJhNGZkLThiNTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDUoLohjZEWZTGmiOfBC5Wj+GJhbpN551ERr3H4/1+pv1EzzOsq9Srvlq+C
L3eg4JctUNi/owdJZCYGsHp+ZXZa7ZKsgT6lS8nHAqr690QlhBwhPM/CgDMShHFn
tmM5SRXcQCxdWdoR/WMZ0CJsPGqt1iV4eKuJNu9UHiA5H9yPvexSCAM+H4Xw/SvG
9+Vk1VxzQYIc/aiYytwCSi6Pg9OVpIIDQ5CCVeu2PI21/R/qwwIKtarz78CZTcpB
yY4V9oJz6Jw2RJI8y8IPyOPWeK+UjtsG1+jbWH/JJQRSjIJ2Bc5ITR1gvyDUa9bb
tJwzfEYOz7EG4dMBkMh9paSTudsHAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUESy8
gQmDkzJXbNih/pl+2+xYxEcwHwYDVR0jBBgwFoAUPVXHhOoXkS8OlgolxsqSDhAC
MAowDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjQ3MTJGL0U5QzRCQUEyQTBFODExRUI4ODk1OEQxMEY4QUVBMjI4L1BWWEho
T29Ya1M4T2xnb2x4c3FTRGhBQ01Bby5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1BWWEhoT29Ya1M4T2xnb2x4c3FTRGhBQ01Bby5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjQ3MTJGL0U5QzRCQUEyQTBFODExRUI4ODk1OEQxMEY4
QUVBMjI4L0YyMjQxMURFQjI3MTExRjFCQjlEN0VGNUNFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAZp+cAwDQYJKoZIhvcNAQEL
BQADggEBAA/gS2PhxymhPaeoJ4yUEZOrTSK3pijMNv5w09nNt72UGiwS1AYixXRY
n29zPSkuB+46RuJtbCu36lYeAFgGl+ncLOml9slel/8jRc37v52emj4odw4eD59e
J3XqLJSaZhC6kn9V42kzrI93kJ746VODb9vBLGcl06awcFvDjXj00+g1T5slxZHH
r7pMIbftgkvTZu91SxpD0bBNgb5AcYiis7nzU6HI/xUUMplxOOFRT2l3+Kuw6Ey1
RnG5PccShgv9LSYhNPIhSunIHAVCc1QEp0PQAKjcjpEkODPDwn1dacoMUHn1izaC
QMEe13ph+0NU1r7bji/edfy9zKyFjW8=
-----END CERTIFICATE-----