Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F369F2FA/69B05CBABB0C11ECA7DC65BB5A40D577/9E450F18925B11F189F167D0CE1D38B0.roa
File:                     9E450F18925B11F189F167D0CE1D38B0.roa (raw, json)
Hash identifier:          GpsUd/YZgpfms5C1bvWQhw6I3R7IEZL8CCEFYVKEz2Q=
Subject key identifier:   83:C7:C0:81:77:B8:81:F8:9F:A6:B0:34:41:E8:4B:87:44:BE:F4:99
Certificate issuer:       /CN=F369F2FAAF/serialNumber=9478315A1E5C5615A9228BBECA48A396870B847E
Certificate serial:       0668
Authority key identifier: 94:78:31:5A:1E:5C:56:15:A9:22:8B:BE:CA:48:A3:96:87:0B:84:7E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/lHgxWh5cVhWpIou-ykijlocLhH4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369F2FA/69B05CBABB0C11ECA7DC65BB5A40D577/9E450F18925B11F189F167D0CE1D38B0.roa
Signing time:             Fri 07 Aug 2026 12:29:22 +0000
ROA not before:           Fri 07 Aug 2026 12:29:18 +0000
ROA not after:            Tue 13 Apr 2027 12:29:18 +0000
asID:                     51265
IP address blocks:        197.211.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369F2FA/69B05CBABB0C11ECA7DC65BB5A40D577/lHgxWh5cVhWpIou-ykijlocLhH4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369F2FA/69B05CBABB0C11ECA7DC65BB5A40D577/lHgxWh5cVhWpIou-ykijlocLhH4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/lHgxWh5cVhWpIou-ykijlocLhH4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Sep 2026 00:07:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1640 (0x668)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369F2FAAF, serialNumber=9478315A1E5C5615A9228BBECA48A396870B847E
        Validity
            Not Before: Aug  7 12:29:18 2026 GMT
            Not After : Apr 13 12:29:18 2027 GMT
        Subject: CN=6a75cfa2-6723
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:da:db:fd:06:b0:54:4d:89:89:c2:0a:4a:a9:
                    6c:74:c2:40:ab:3c:a8:c9:90:24:36:53:c3:46:e4:
                    c6:7a:a4:c7:73:a1:97:27:de:d6:85:37:9f:03:5f:
                    46:04:d6:bf:15:d0:c4:f0:01:8c:9e:85:c5:b2:14:
                    98:64:cb:1e:53:50:54:8b:fb:a5:fa:b2:3b:e6:75:
                    b2:19:44:97:aa:7a:9b:ac:ec:34:3a:f0:97:c6:ec:
                    ac:8a:d6:e4:7a:fa:17:de:99:e9:0a:45:b6:e4:e1:
                    8f:ef:23:d3:3d:3a:3c:2a:b4:3b:b1:b0:42:d7:3f:
                    e7:28:c7:36:2a:b1:7d:8f:70:f9:e4:7b:cc:e7:57:
                    c6:50:f7:8f:e1:1e:d5:27:ab:dc:8b:09:94:1e:67:
                    ba:88:5b:11:6b:74:64:75:87:2d:74:36:a6:00:0a:
                    fe:03:cd:7b:92:e4:c0:f9:e5:c3:80:cd:f9:55:f7:
                    0b:41:95:1d:53:ed:e6:75:80:cc:76:5a:39:f6:ff:
                    5d:98:b2:39:02:c6:8f:17:d3:6a:03:00:f0:d0:39:
                    aa:a3:89:fa:b3:e6:4e:36:af:fc:d2:45:ae:ab:70:
                    a7:65:3e:8a:df:53:ed:ee:a3:e7:6d:84:a8:53:91:
                    f5:6f:60:4d:7b:de:2a:aa:85:12:76:39:3e:aa:0c:
                    25:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:C7:C0:81:77:B8:81:F8:9F:A6:B0:34:41:E8:4B:87:44:BE:F4:99
            X509v3 Authority Key Identifier:
                keyid:94:78:31:5A:1E:5C:56:15:A9:22:8B:BE:CA:48:A3:96:87:0B:84:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369F2FA/69B05CBABB0C11ECA7DC65BB5A40D577/lHgxWh5cVhWpIou-ykijlocLhH4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lHgxWh5cVhWpIou-ykijlocLhH4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369F2FA/69B05CBABB0C11ECA7DC65BB5A40D577/9E450F18925B11F189F167D0CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  197.211.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         1c:c8:b1:f7:4c:d4:ff:c1:df:95:59:48:62:df:eb:74:90:19:
         dd:5f:6d:f6:e9:2f:6d:5c:ac:3a:69:ab:f7:a9:32:bc:06:90:
         4d:89:eb:85:44:3b:e3:ca:da:01:47:82:68:47:72:cc:2c:1a:
         33:10:96:30:0a:74:04:cb:67:53:c3:af:a7:5b:12:75:c5:fa:
         db:27:b9:79:ee:66:33:1c:61:82:f1:0b:70:42:95:7e:a1:83:
         5b:3c:22:f2:28:b8:7d:40:5d:db:76:cd:5f:51:20:d2:35:25:
         31:cd:f0:cb:67:2d:69:25:77:e5:8b:67:ee:52:10:c4:cb:d4:
         ee:0e:ec:55:7b:1c:8b:3f:dc:66:99:be:6b:d6:1e:8b:f7:9d:
         a5:6d:f7:6a:0a:d8:a8:18:d7:84:11:37:10:79:60:66:d5:e3:
         96:74:e0:23:97:0d:47:3b:c6:1f:c5:04:e6:d1:94:d9:17:23:
         16:6e:8b:c2:01:95:03:6a:ae:d1:a0:72:97:98:08:17:58:27:
         9c:75:77:be:0d:30:f7:23:f4:55:52:98:4a:c5:f7:cd:39:be:
         2a:2e:d1:fb:e0:63:6b:b9:16:04:13:aa:6f:0b:7f:39:8b:3a:
         b0:e5:e7:64:d7:5b:d7:5b:10:c4:3b:d1:4a:bc:1c:a9:03:33:
         c1:63:63:20
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBmgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OUYyRkFBRjExMC8GA1UEBRMoOTQ3ODMxNUExRTVDNTYxNUE5MjI4QkJFQ0E0OEEz
OTY4NzBCODQ3RTAeFw0yNjA4MDcxMjI5MThaFw0yNzA0MTMxMjI5MThaMBgxFjAU
BgNVBAMTDTZhNzVjZmEyLTY3MjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCl2tv9BrBUTYmJwgpKqWx0wkCrPKjJkCQ2U8NG5MZ6pMdzoZcn3taFN58D
X0YE1r8V0MTwAYyehcWyFJhkyx5TUFSL+6X6sjvmdbIZRJeqepus7DQ68JfG7KyK
1uR6+hfemekKRbbk4Y/vI9M9OjwqtDuxsELXP+coxzYqsX2PcPnke8znV8ZQ94/h
HtUnq9yLCZQeZ7qIWxFrdGR1hy10NqYACv4DzXuS5MD55cOAzflV9wtBlR1T7eZ1
gMx2Wjn2/12YsjkCxo8X02oDAPDQOaqjifqz5k42r/zSRa6rcKdlPorfU+3uo+dt
hKhTkfVvYE173iqqhRJ2OT6qDCWFAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUg8fA
gXe4gfifprA0QehLh0S+9JkwHwYDVR0jBBgwFoAUlHgxWh5cVhWpIou+ykijlocL
hH4wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjlGMkZBLzY5QjA1Q0JBQkIwQzExRUNBN0RDNjVCQjVBNDBENTc3L2xIZ3hX
aDVjVmhXcElvdS15a2lqbG9jTGhINC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2xIZ3hXaDVjVmhXcElvdS15a2lqbG9jTGhINC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjlGMkZBLzY5QjA1Q0JBQkIwQzExRUNBN0RDNjVCQjVB
NDBENTc3LzlFNDUwRjE4OTI1QjExRjE4OUYxNjdEMENFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAbF04AwDQYJKoZIhvcNAQEL
BQADggEBABzIsfdM1P/B35VZSGLf63SQGd1fbfbpL21crDppq/epMrwGkE2J64VE
O+PK2gFHgmhHcswsGjMQljAKdATLZ1PDr6dbEnXF+tsnuXnuZjMcYYLxC3BClX6h
g1s8IvIouH1AXdt2zV9RINI1JTHN8MtnLWkld+WLZ+5SEMTL1O4O7FV7HIs/3GaZ
vmvWHov3naVt92oK2KgY14QRNxB5YGbV45Z04COXDUc7xh/FBObRlNkXIxZui8IB
lQNqrtGgcpeYCBdYJ5x1d74NMPcj9FVSmErF9805viou0fvgY2u5FgQTqm8LfzmL
OrDl52TXW9dbEMQ70Uq8HKkDM8FjYyA=
-----END CERTIFICATE-----