Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/FFC814E29FB211F18E92E6EDCE1D38B0.roa
File:                     FFC814E29FB211F18E92E6EDCE1D38B0.roa (raw, json)
Hash identifier:          8cYLNA9HUJAl+2n6laDhq95s2R7p73vGguQD5CV/J0k=
Subject key identifier:   83:A1:3C:3F:6C:EF:F6:A5:FB:7E:90:5B:25:52:15:15:87:CC:45:BD
Certificate issuer:       /CN=F364712FAF/serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
Certificate serial:       0864
Authority key identifier: 3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/FFC814E29FB211F18E92E6EDCE1D38B0.roa
Signing time:             Mon 24 Aug 2026 11:57:37 +0000
ROA not before:           Mon 24 Aug 2026 11:57:33 +0000
ROA not after:            Wed 31 Dec 2036 11:57:33 +0000
asID:                     29975
IP address blocks:        41.192.208.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2148 (0x864)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364712FAF, serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
        Validity
            Not Before: Aug 24 11:57:33 2026 GMT
            Not After : Dec 31 11:57:33 2036 GMT
        Subject: CN=6a8c31b1-43ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:34:df:93:44:5c:f1:38:1d:dd:c8:b9:6d:0f:
                    26:70:fc:8e:f6:38:5d:7b:52:83:87:38:d5:8f:55:
                    a4:b5:37:3f:01:43:48:4e:71:24:47:71:c3:4a:a5:
                    d5:bc:fa:da:19:22:06:2e:2b:98:87:bc:2c:4e:0c:
                    f8:63:5c:96:a0:f3:ef:bc:8d:5f:2d:9c:07:31:ba:
                    c5:4a:99:8e:04:70:c5:8f:9b:3c:9f:a5:2e:a8:95:
                    c1:28:21:af:5d:ea:83:0b:a2:4b:09:44:24:b8:65:
                    22:5c:a9:45:26:e1:f2:f9:ee:aa:f0:30:c3:35:72:
                    4b:1c:a0:11:ca:59:93:0b:34:24:e9:42:c4:21:dd:
                    42:f5:de:5c:37:24:3a:bf:71:1c:bc:af:b5:21:b7:
                    1d:49:83:a0:15:45:49:d8:c2:74:b9:82:07:ee:f3:
                    a8:dd:42:83:5e:99:10:c4:4b:d0:48:f2:5d:29:cf:
                    05:3d:2b:a2:a5:ad:29:74:ab:77:43:3e:b2:8e:d9:
                    be:d3:98:c9:ba:da:fb:8d:7d:f9:68:5f:18:c8:e3:
                    cb:bd:39:20:59:ca:3a:5a:22:9e:68:29:d6:c5:2a:
                    2a:e6:b6:17:db:8b:78:b9:1e:95:ad:fc:a6:f2:d8:
                    71:8b:02:82:63:b4:40:a2:74:52:83:48:78:47:7d:
                    2b:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:A1:3C:3F:6C:EF:F6:A5:FB:7E:90:5B:25:52:15:15:87:CC:45:BD
            X509v3 Authority Key Identifier:
                keyid:3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/FFC814E29FB211F18E92E6EDCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.192.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         0c:f3:3a:74:42:e6:e9:fc:4f:e0:dd:84:ab:0d:80:c8:d1:e9:
         27:2e:1e:3c:b2:7d:46:0f:94:00:80:d0:1c:7a:a6:77:1f:a6:
         d4:97:4b:7b:e1:fb:27:10:8e:1d:5a:a6:28:04:b9:c4:ec:84:
         04:51:ad:a0:b4:87:86:87:1b:d4:90:f7:7c:76:f7:94:81:66:
         1c:9a:80:d0:78:0a:b6:78:8f:ce:14:3a:47:60:9e:77:b1:6b:
         99:86:7b:eb:6f:8d:12:dd:8b:38:76:e0:45:6d:ef:88:ee:10:
         0d:f6:da:d4:5a:e9:dd:36:df:c4:85:76:dc:15:e3:ba:eb:22:
         64:f3:07:f5:dd:8b:0d:86:cb:20:7e:86:b0:cb:d4:21:86:1b:
         23:fe:d5:bc:aa:89:0e:cf:ed:0a:39:62:a4:bf:27:ab:57:37:
         72:8e:b9:19:72:d6:92:a7:a9:61:16:d0:c0:6d:c8:f4:3f:93:
         c3:b6:46:71:02:d8:02:bc:a8:5f:f2:a9:99:a2:1b:e8:8e:d7:
         88:c0:d3:80:e2:29:cb:20:d0:64:16:aa:5a:8f:b6:ac:bb:96:
         b3:40:d2:13:18:e1:30:50:f3:66:1b:2e:49:fc:0c:9c:dc:1e:
         b2:8b:14:f4:05:37:ec:a5:46:8c:e8:91:67:eb:8d:8d:7d:97:
         7c:6d:cb:2b
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCGQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NDcxMkZBRjExMC8GA1UEBRMoM0Q1NUM3ODRFQTE3OTEyRjBFOTYwQTI1QzZDQTky
MEUxMDAyMzAwQTAeFw0yNjA4MjQxMTU3MzNaFw0zNjEyMzExMTU3MzNaMBgxFjAU
BgNVBAMTDTZhOGMzMWIxLTQzYWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDYNN+TRFzxOB3dyLltDyZw/I72OF17UoOHONWPVaS1Nz8BQ0hOcSRHccNK
pdW8+toZIgYuK5iHvCxODPhjXJag8++8jV8tnAcxusVKmY4EcMWPmzyfpS6olcEo
Ia9d6oMLoksJRCS4ZSJcqUUm4fL57qrwMMM1ckscoBHKWZMLNCTpQsQh3UL13lw3
JDq/cRy8r7Uhtx1Jg6AVRUnYwnS5ggfu86jdQoNemRDES9BI8l0pzwU9K6KlrSl0
q3dDPrKO2b7TmMm62vuNffloXxjI48u9OSBZyjpaIp5oKdbFKirmthfbi3i5HpWt
/Kby2HGLAoJjtECidFKDSHhHfSuJAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUg6E8
P2zv9qX7fpBbJVIVFYfMRb0wHwYDVR0jBBgwFoAUPVXHhOoXkS8OlgolxsqSDhAC
MAowDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjQ3MTJGL0U5QzRCQUEyQTBFODExRUI4ODk1OEQxMEY4QUVBMjI4L1BWWEho
T29Ya1M4T2xnb2x4c3FTRGhBQ01Bby5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1BWWEhoT29Ya1M4T2xnb2x4c3FTRGhBQ01Bby5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjQ3MTJGL0U5QzRCQUEyQTBFODExRUI4ODk1OEQxMEY4
QUVBMjI4L0ZGQzgxNEUyOUZCMjExRjE4RTkyRTZFRENFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAQpwNAwDQYJKoZIhvcNAQEL
BQADggEBAAzzOnRC5un8T+DdhKsNgMjR6ScuHjyyfUYPlACA0Bx6pncfptSXS3vh
+ycQjh1apigEucTshARRraC0h4aHG9SQ93x295SBZhyagNB4CrZ4j84UOkdgnnex
a5mGe+tvjRLdizh24EVt74juEA322tRa6d0238SFdtwV47rrImTzB/Xdiw2GyyB+
hrDL1CGGGyP+1byqiQ7P7Qo5YqS/J6tXN3KOuRly1pKnqWEW0MBtyPQ/k8O2RnEC
2AK8qF/yqZmiG+iO14jA04DiKcsg0GQWqlqPtqy7lrNA0hMY4TBQ82YbLkn8DJzc
HrKLFPQFN+ylRozokWfrjY19l3xtyys=
-----END CERTIFICATE-----