Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3684027/43DC0FDC207711ECB23FE226D8A014CE/1C8C9C50C42B11F19678B9DCCE1D38B0.roa
File:                     1C8C9C50C42B11F19678B9DCCE1D38B0.roa (raw, json)
Hash identifier:          qOwoEaKZhZFoVWkSlupguO3fwwSn+hYGh63GDRAF4D4=
Subject key identifier:   43:BD:52:05:3E:AA:6C:BC:AA:16:9A:5C:0E:35:BF:DD:38:8C:F8:4B
Certificate issuer:       /CN=F3684027AF/serialNumber=A8F3FFCCF2BD6F173E578DCE8625E01C5397F735
Certificate serial:       0763
Authority key identifier: A8:F3:FF:CC:F2:BD:6F:17:3E:57:8D:CE:86:25:E0:1C:53:97:F7:35
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/qPP_zPK9bxc-V43OhiXgHFOX9zU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3684027/43DC0FDC207711ECB23FE226D8A014CE/1C8C9C50C42B11F19678B9DCCE1D38B0.roa
Signing time:             Fri 09 Oct 2026 21:48:07 +0000
ROA not before:           Sat 10 Oct 2026 21:48:02 +0000
ROA not after:            Fri 10 Oct 2031 21:48:02 +0000
asID:                     329181
IP address blocks:        2c0f:6500::/32 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3684027/43DC0FDC207711ECB23FE226D8A014CE/qPP_zPK9bxc-V43OhiXgHFOX9zU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3684027/43DC0FDC207711ECB23FE226D8A014CE/qPP_zPK9bxc-V43OhiXgHFOX9zU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/qPP_zPK9bxc-V43OhiXgHFOX9zU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 02:26:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1891 (0x763)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3684027AF, serialNumber=A8F3FFCCF2BD6F173E578DCE8625E01C5397F735
        Validity
            Not Before: Oct 10 21:48:02 2026 GMT
            Not After : Oct 10 21:48:02 2031 GMT
        Subject: CN=6ac96117-e6d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:83:64:37:87:d7:08:1c:42:ee:13:dc:ea:10:
                    aa:aa:91:f7:a8:1c:26:d0:09:2d:65:14:7d:e7:b4:
                    d5:4f:a4:0f:d7:3e:6d:8c:55:72:d7:a3:02:ce:c0:
                    46:d0:51:7a:b4:af:56:95:53:b9:34:c1:8a:17:29:
                    34:c9:74:1a:c6:de:5e:1f:b5:1d:c5:ac:b3:3c:62:
                    34:d0:95:34:e3:e4:2b:9a:ac:ee:bb:76:39:ab:6c:
                    41:c8:ff:26:3a:b9:99:5a:92:e0:ad:37:23:be:f1:
                    59:27:7a:85:c4:0b:d7:f9:37:7f:5d:9f:20:72:92:
                    d6:fc:40:b7:38:8e:20:f8:5b:7f:01:8d:a4:0e:2c:
                    d9:6b:af:db:16:70:68:cf:c8:ff:fb:f0:56:c5:d7:
                    87:33:f0:47:f3:16:25:d8:ab:bf:f7:b8:d5:b8:93:
                    91:6a:74:bd:1e:f0:4b:48:b7:2b:e1:07:a1:ec:74:
                    35:33:f1:d8:b5:39:2a:03:7d:03:80:b3:a0:d0:88:
                    d9:7b:97:ad:b7:09:05:dc:ba:1d:22:65:7e:6b:4f:
                    a3:65:66:66:b6:ed:b7:2c:db:38:51:18:9b:30:dd:
                    66:64:73:5a:90:77:ca:c0:46:d8:63:be:66:55:a2:
                    da:ee:ea:00:71:21:0d:98:31:16:d0:59:be:68:d2:
                    06:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:BD:52:05:3E:AA:6C:BC:AA:16:9A:5C:0E:35:BF:DD:38:8C:F8:4B
            X509v3 Authority Key Identifier:
                keyid:A8:F3:FF:CC:F2:BD:6F:17:3E:57:8D:CE:86:25:E0:1C:53:97:F7:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3684027/43DC0FDC207711ECB23FE226D8A014CE/qPP_zPK9bxc-V43OhiXgHFOX9zU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/qPP_zPK9bxc-V43OhiXgHFOX9zU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3684027/43DC0FDC207711ECB23FE226D8A014CE/1C8C9C50C42B11F19678B9DCCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:6500::/32

    Signature Algorithm: sha256WithRSAEncryption
         3c:78:4c:d6:57:90:93:55:4d:5c:23:8f:f2:19:02:23:d2:21:
         1e:0a:6c:00:1b:0a:e8:7d:4c:7d:1c:12:d7:c1:63:8d:1c:bb:
         99:f1:19:d9:6d:5f:c3:43:4b:d6:1a:68:71:b1:5a:93:25:b6:
         d1:c0:ce:4e:d6:75:66:23:e0:13:76:8d:cc:42:9e:38:6e:7c:
         71:4e:80:c1:bb:c9:2a:4d:01:e8:49:71:00:23:39:be:fd:c7:
         4c:2c:f2:27:8e:0e:67:84:23:52:65:2a:f3:2c:5d:f2:d3:a2:
         bc:bd:a1:a9:db:c0:56:c0:e4:21:5b:55:9e:18:32:a6:52:3f:
         34:d6:30:2c:e7:4f:12:e5:e3:3e:71:6d:1a:ea:33:9c:7f:fc:
         79:81:c2:92:7b:3c:59:60:b7:df:9a:d1:fe:00:4b:0e:7a:06:
         fb:4d:a3:2c:a1:b5:d7:19:05:2d:8d:f5:92:f0:11:30:4d:40:
         07:27:1a:64:2b:a2:5e:2a:27:b9:17:a8:e5:7e:e9:62:dc:fe:
         3c:bf:45:db:2d:41:b6:28:8e:0c:b7:7c:d4:dc:0e:d7:b1:a8:
         9f:e4:3d:f8:d9:1a:da:e1:70:64:6a:b7:3f:44:4f:7f:a4:81:
         5f:6f:fb:90:ba:39:db:5a:d9:a2:7f:20:e7:50:4c:60:90:11:
         20:a6:32:d7
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB2MwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODQwMjdBRjExMC8GA1UEBRMoQThGM0ZGQ0NGMkJENkYxNzNFNTc4RENFODYyNUUw
MUM1Mzk3RjczNTAeFw0yNjEwMTAyMTQ4MDJaFw0zMTEwMTAyMTQ4MDJaMBgxFjAU
BgNVBAMTDTZhYzk2MTE3LWU2ZDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCeg2Q3h9cIHELuE9zqEKqqkfeoHCbQCS1lFH3ntNVPpA/XPm2MVXLXowLO
wEbQUXq0r1aVU7k0wYoXKTTJdBrG3l4ftR3FrLM8YjTQlTTj5CuarO67djmrbEHI
/yY6uZlakuCtNyO+8VkneoXEC9f5N39dnyByktb8QLc4jiD4W38BjaQOLNlrr9sW
cGjPyP/78FbF14cz8EfzFiXYq7/3uNW4k5FqdL0e8EtItyvhB6HsdDUz8di1OSoD
fQOAs6DQiNl7l623CQXcuh0iZX5rT6NlZma27bcs2zhRGJsw3WZkc1qQd8rARthj
vmZVotru6gBxIQ2YMRbQWb5o0gYhAgMBAAGjggKmMIICojAdBgNVHQ4EFgQUQ71S
BT6qbLyqFppcDjW/3TiM+EswHwYDVR0jBBgwFoAUqPP/zPK9bxc+V43OhiXgHFOX
9zUwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjg0MDI3LzQzREMwRkRDMjA3NzExRUNCMjNGRTIyNkQ4QTAxNENFL3FQUF96
UEs5YnhjLVY0M09oaVhnSEZPWDl6VS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3FQUF96UEs5YnhjLVY0M09oaVhnSEZPWDl6VS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjg0MDI3LzQzREMwRkRDMjA3NzExRUNCMjNGRTIyNkQ4
QTAxNENFLzFDOEM5QzUwQzQyQjExRjE5Njc4QjlEQ0NFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAsD2UAMA0GCSqGSIb3DQEB
CwUAA4IBAQA8eEzWV5CTVU1cI4/yGQIj0iEeCmwAGwrofUx9HBLXwWONHLuZ8RnZ
bV/DQ0vWGmhxsVqTJbbRwM5O1nVmI+ATdo3MQp44bnxxToDBu8kqTQHoSXEAIzm+
/cdMLPInjg5nhCNSZSrzLF3y06K8vaGp28BWwOQhW1WeGDKmUj801jAs508S5eM+
cW0a6jOcf/x5gcKSezxZYLffmtH+AEsOegb7TaMsobXXGQUtjfWS8BEwTUAHJxpk
K6JeKie5F6jlfuli3P48v0XbLUG2KI4Mt3zU3A7Xsaif5D342Rra4XBkarc/RE9/
pIFfb/uQujnbWtmifyDnUExgkBEgpjLX
-----END CERTIFICATE-----