Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/6B1CADC4964A11F183FD50A3CE1D38B0.roa
File:                     6B1CADC4964A11F183FD50A3CE1D38B0.roa (raw, json)
Hash identifier:          Q3bv+/3qzjoTU/OKx/laZYEE7INTlvCdy+ChzWaJdYM=
Subject key identifier:   58:F1:60:0C:0B:35:80:47:7A:76:6A:4C:B5:F1:55:21:64:EF:A0:2A
Certificate issuer:       /CN=F366B0C9AF/serialNumber=A20E2067F0DB783DE3723E231517DC7E9FE5BAD3
Certificate serial:       057F
Authority key identifier: A2:0E:20:67:F0:DB:78:3D:E3:72:3E:23:15:17:DC:7E:9F:E5:BA:D3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/og4gZ_DbeD3jcj4jFRfcfp_lutM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/6B1CADC4964A11F183FD50A3CE1D38B0.roa
Signing time:             Wed 12 Aug 2026 12:36:20 +0000
ROA not before:           Wed 12 Aug 2026 12:36:16 +0000
ROA not after:            Thu 10 Mar 2033 12:36:16 +0000
asID:                     37182
IP address blocks:        41.93.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/og4gZ_DbeD3jcj4jFRfcfp_lutM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/og4gZ_DbeD3jcj4jFRfcfp_lutM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/og4gZ_DbeD3jcj4jFRfcfp_lutM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Sep 2026 03:17:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1407 (0x57f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366B0C9AF, serialNumber=A20E2067F0DB783DE3723E231517DC7E9FE5BAD3
        Validity
            Not Before: Aug 12 12:36:16 2026 GMT
            Not After : Mar 10 12:36:16 2033 GMT
        Subject: CN=6a7c68c4-f11e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:66:f0:0b:86:91:71:d1:8a:f5:83:b7:16:33:
                    3d:4d:b1:96:2d:a8:50:2d:bf:d6:17:36:dd:12:ab:
                    10:37:32:92:4d:16:bc:ca:27:d3:4c:1c:a2:86:4a:
                    66:d2:59:07:90:09:20:f5:6a:15:75:4e:65:8c:54:
                    73:45:21:85:61:21:24:5e:b9:05:d8:2f:9f:35:10:
                    87:e6:17:0a:f6:41:35:1f:5a:da:58:98:04:e4:7a:
                    6b:26:fc:c1:f4:22:4a:48:d2:71:6c:04:8f:e5:c8:
                    23:10:f1:56:a4:36:97:78:88:b4:ed:9e:2f:ee:1d:
                    d6:55:e9:af:97:1a:41:f0:f5:81:ac:ab:e1:75:da:
                    5f:5a:62:c5:03:6b:86:ee:ff:28:25:03:fd:7b:e8:
                    c3:bd:39:21:c7:36:73:9d:d5:94:aa:25:72:92:1b:
                    26:e4:16:f0:7d:8d:d4:90:c0:b6:be:d1:e1:87:e8:
                    ff:1f:06:07:3b:06:4b:4a:9f:2c:53:47:26:9c:21:
                    eb:c3:d6:5e:34:cb:bb:00:d2:7a:fb:8b:25:02:f0:
                    fb:1c:71:9a:e3:3a:95:a7:21:f8:0a:f3:4e:8e:c2:
                    26:54:17:7c:b9:47:25:8a:58:fa:c4:1a:55:82:08:
                    38:94:e8:fe:b5:37:24:3a:a4:55:ae:a6:7f:e1:be:
                    3d:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:F1:60:0C:0B:35:80:47:7A:76:6A:4C:B5:F1:55:21:64:EF:A0:2A
            X509v3 Authority Key Identifier:
                keyid:A2:0E:20:67:F0:DB:78:3D:E3:72:3E:23:15:17:DC:7E:9F:E5:BA:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/og4gZ_DbeD3jcj4jFRfcfp_lutM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/og4gZ_DbeD3jcj4jFRfcfp_lutM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/6B1CADC4964A11F183FD50A3CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.93.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:94:30:38:a7:39:3a:e4:4f:52:18:61:33:5a:40:13:23:71:
         7e:ff:2d:55:7d:5c:9a:9a:45:45:1f:76:b9:6b:4a:70:c9:21:
         ee:26:38:da:b9:15:6b:2e:6f:bd:d9:d1:7d:d2:d1:3a:90:45:
         41:eb:91:bc:18:5c:0f:1f:3c:5d:f7:29:3b:e0:af:0e:02:04:
         71:55:be:1d:96:d3:df:9a:c9:d2:b2:5e:2a:ae:f2:e5:e7:b4:
         a2:f4:d0:5e:ee:f5:b1:79:23:b4:9c:3c:25:b7:ac:bb:52:d8:
         eb:a2:ad:6f:37:55:3d:b1:e8:fa:95:e3:28:94:7f:ec:09:aa:
         0f:8b:87:1b:a1:39:f3:c7:26:46:d2:45:a8:85:81:46:2d:b1:
         01:14:92:92:ee:5b:0b:83:a8:d0:7c:1e:7e:36:f2:26:8b:26:
         3b:1e:c6:51:20:94:10:da:6b:27:f5:da:d5:8a:11:e7:3b:0e:
         f6:a4:6c:7f:b0:76:c6:04:1f:06:0d:c4:9c:b4:7b:53:54:fa:
         50:5b:53:55:63:e7:9d:04:1f:81:2b:b5:13:e0:b5:1a:2a:0d:
         94:75:de:e1:eb:e4:78:12:38:61:56:fc:34:8b:1d:82:06:69:
         01:98:40:50:7f:f0:1b:fb:60:c3:83:76:c0:31:9e:ff:e8:19:
         20:8c:23:5e
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBX8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NkIwQzlBRjExMC8GA1UEBRMoQTIwRTIwNjdGMERCNzgzREUzNzIzRTIzMTUxN0RD
N0U5RkU1QkFEMzAeFw0yNjA4MTIxMjM2MTZaFw0zMzAzMTAxMjM2MTZaMBgxFjAU
BgNVBAMTDTZhN2M2OGM0LWYxMWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCzZvALhpFx0Yr1g7cWMz1NsZYtqFAtv9YXNt0SqxA3MpJNFrzKJ9NMHKKG
SmbSWQeQCSD1ahV1TmWMVHNFIYVhISReuQXYL581EIfmFwr2QTUfWtpYmATkemsm
/MH0IkpI0nFsBI/lyCMQ8VakNpd4iLTtni/uHdZV6a+XGkHw9YGsq+F12l9aYsUD
a4bu/yglA/176MO9OSHHNnOd1ZSqJXKSGybkFvB9jdSQwLa+0eGH6P8fBgc7BktK
nyxTRyacIevD1l40y7sA0nr7iyUC8PsccZrjOpWnIfgK806OwiZUF3y5RyWKWPrE
GlWCCDiU6P61NyQ6pFWupn/hvj3tAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUWPFg
DAs1gEd6dmpMtfFVIWTvoCowHwYDVR0jBBgwFoAUog4gZ/DbeD3jcj4jFRfcfp/l
utMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjZCMEM5L0YxMjY1MThDQkM0MDExRURBQjU5NEVEQ0YxMjIyNDY4L29nNGda
X0RiZUQzamNqNGpGUmZjZnBfbHV0TS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL29nNGdaX0RiZUQzamNqNGpGUmZjZnBfbHV0TS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjZCMEM5L0YxMjY1MThDQkM0MDExRURBQjU5NEVEQ0Yx
MjIyNDY4LzZCMUNBREM0OTY0QTExRjE4M0ZENTBBM0NFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAApXSgwDQYJKoZIhvcNAQEL
BQADggEBAGqUMDinOTrkT1IYYTNaQBMjcX7/LVV9XJqaRUUfdrlrSnDJIe4mONq5
FWsub73Z0X3S0TqQRUHrkbwYXA8fPF33KTvgrw4CBHFVvh2W09+aydKyXiqu8uXn
tKL00F7u9bF5I7ScPCW3rLtS2OuirW83VT2x6PqV4yiUf+wJqg+LhxuhOfPHJkbS
RaiFgUYtsQEUkpLuWwuDqNB8Hn428iaLJjsexlEglBDaayf12tWKEec7DvakbH+w
dsYEHwYNxJy0e1NU+lBbU1Vj550EH4ErtRPgtRoqDZR13uHr5HgSOGFW/DSLHYIG
aQGYQFB/8Bv7YMODdsAxnv/oGSCMI14=
-----END CERTIFICATE-----