Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/03870992932611F1854B2A18CF1D38B0.roa
File:                     03870992932611F1854B2A18CF1D38B0.roa (raw, json)
Hash identifier:          g4uht79Lea67/S41vop7dZfsmXWvPGx8kN03ffbuaug=
Subject key identifier:   3D:3D:5D:2B:BD:7F:EE:7B:5B:EE:A2:94:E7:97:06:97:CE:AD:56:83
Certificate issuer:       /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial:       0A81
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/03870992932611F1854B2A18CF1D38B0.roa
Signing time:             Sat 08 Aug 2026 12:38:10 +0000
ROA not before:           Sat 08 Aug 2026 12:38:06 +0000
ROA not after:            Sun 31 Jul 2033 12:38:06 +0000
asID:                     37119
IP address blocks:        105.172.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 10 Oct 2026 01:55:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2689 (0xa81)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D0F50AF, serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
        Validity
            Not Before: Aug  8 12:38:06 2026 GMT
            Not After : Jul 31 12:38:06 2033 GMT
        Subject: CN=6a772332-73a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:0d:2e:29:94:29:c5:9e:36:17:19:7e:54:db:
                    73:a1:8b:d0:4e:f7:67:58:b1:bd:63:30:bb:62:8d:
                    3d:f2:e2:1d:fc:0f:6d:f9:b2:fc:13:24:6e:68:5d:
                    98:67:49:dd:30:ec:91:48:91:db:05:8e:cd:4c:da:
                    5b:92:2d:a8:52:92:03:22:df:f9:cb:91:fa:72:81:
                    95:3a:92:23:ed:15:a9:9b:72:ee:5c:64:28:74:c4:
                    fa:03:19:bc:a4:5d:15:45:0a:21:63:5e:e3:01:24:
                    e0:2c:fe:35:54:32:c7:0b:7d:10:2e:af:1d:da:47:
                    04:67:1f:b1:4f:2c:e8:20:79:57:10:1c:97:e2:72:
                    18:15:5e:04:9a:dd:5e:a3:98:45:da:3c:07:51:9a:
                    5e:24:46:8f:60:48:42:47:cf:25:2d:83:24:ec:93:
                    f6:f9:d3:ca:0a:a0:21:31:24:22:d6:7c:c4:64:8e:
                    35:ce:80:8f:9c:2f:3a:eb:4d:f2:fe:31:0b:49:69:
                    ce:36:63:f7:d1:6d:bc:36:17:7c:70:c3:ba:20:f7:
                    39:8b:db:99:f5:a6:4d:bb:e4:00:55:0c:59:50:f1:
                    c0:59:ec:4f:5f:83:08:5b:4a:0d:72:f2:c6:b6:06:
                    13:bf:4a:b0:52:12:02:ea:b9:8d:b6:e2:28:2e:df:
                    e6:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:3D:5D:2B:BD:7F:EE:7B:5B:EE:A2:94:E7:97:06:97:CE:AD:56:83
            X509v3 Authority Key Identifier:
                keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/03870992932611F1854B2A18CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  105.172.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         09:a0:3a:7d:8c:7e:e4:c4:a2:f7:05:17:6c:67:7e:ae:ab:31:
         f7:93:40:23:02:e0:f6:8f:ba:97:03:cd:ad:25:04:18:d7:a2:
         e1:0f:b9:e4:ee:e8:46:d6:f7:40:75:8e:b0:fe:6b:3a:ab:fc:
         f0:33:e7:28:7d:d3:f4:5b:c4:81:cc:a5:10:0f:69:6f:43:65:
         f8:08:fc:a4:74:dd:8a:f5:3a:bb:e3:ee:e0:6e:53:15:95:1d:
         39:24:95:67:bf:a3:0a:af:1d:6a:0d:94:83:f8:ef:bd:5b:4f:
         c5:c7:ac:d5:19:2d:a5:38:9b:5c:2b:20:c9:ba:57:2c:4a:b3:
         b0:cd:8d:e6:6b:11:c3:78:6c:b8:1d:5d:d9:47:34:01:77:09:
         7f:43:62:b0:67:f4:a4:44:f9:1d:96:33:ea:11:50:d4:a8:ef:
         22:64:3a:2d:7b:c4:1b:36:56:a4:31:ec:51:6b:c7:6d:25:e8:
         b3:c2:b5:67:78:0b:83:b8:b3:3c:56:ea:b1:0c:05:29:8e:cb:
         80:1f:17:7a:16:a9:c7:3c:d2:8c:d2:70:f5:e2:90:e6:69:2a:
         44:31:74:43:14:ad:44:e1:e8:44:ba:4a:f4:62:a5:ef:b1:7b:
         fa:be:6a:df:5c:f2:dc:c8:fa:84:0d:36:e2:ac:22:8f:a7:e8:
         87:64:0c:52
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCoEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RDBGNTBBRjExMC8GA1UEBRMoQUU5OEE1RkRBRDJEQzlGNEZDMUJFNDdGNjY4NTdB
OEM0Nzk4ODEwMjAeFw0yNjA4MDgxMjM4MDZaFw0zMzA3MzExMjM4MDZaMBgxFjAU
BgNVBAMTDTZhNzcyMzMyLTczYTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDzDS4plCnFnjYXGX5U23Ohi9BO92dYsb1jMLtijT3y4h38D235svwTJG5o
XZhnSd0w7JFIkdsFjs1M2luSLahSkgMi3/nLkfpygZU6kiPtFambcu5cZCh0xPoD
GbykXRVFCiFjXuMBJOAs/jVUMscLfRAurx3aRwRnH7FPLOggeVcQHJfichgVXgSa
3V6jmEXaPAdRml4kRo9gSEJHzyUtgyTsk/b508oKoCExJCLWfMRkjjXOgI+cLzrr
TfL+MQtJac42Y/fRbbw2F3xww7og9zmL25n1pk275ABVDFlQ8cBZ7E9fgwhbSg1y
8sa2BhO/SrBSEgLquY224igu3+blAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUPT1d
K71/7ntb7qKU55cGl86tVoMwHwYDVR0jBBgwFoAUrpil/a0tyfT8G+R/ZoV6jEeY
gQIwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkQwRjUwLzVFQUFBNkI4MjU4RjExRUJCNzBCN0MxOUY4QUVBMjI4L3JwaWxf
YTB0eWZUOEctUl9ab1Y2akVlWWdRSS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3JwaWxfYTB0eWZUOEctUl9ab1Y2akVlWWdRSS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkQwRjUwLzVFQUFBNkI4MjU4RjExRUJCNzBCN0MxOUY4
QUVBMjI4LzAzODcwOTkyOTMyNjExRjE4NTRCMkExOENGMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAZprEAwDQYJKoZIhvcNAQEL
BQADggEBAAmgOn2MfuTEovcFF2xnfq6rMfeTQCMC4PaPupcDza0lBBjXouEPueTu
6EbW90B1jrD+azqr/PAz5yh90/RbxIHMpRAPaW9DZfgI/KR03Yr1Orvj7uBuUxWV
HTkklWe/owqvHWoNlIP4771bT8XHrNUZLaU4m1wrIMm6VyxKs7DNjeZrEcN4bLgd
XdlHNAF3CX9DYrBn9KRE+R2WM+oRUNSo7yJkOi17xBs2VqQx7FFrx20l6LPCtWd4
C4O4szxW6rEMBSmOy4AfF3oWqcc80ozScPXikOZpKkQxdEMUrUTh6ES6SvRipe+x
e/q+at9c8tzI+oQNNuKsIo+n6IdkDFI=
-----END CERTIFICATE-----