Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3629FF7/EE6FA52ECD3511F1BD542AEBCE1D38B0/D021E79CCD7811F19873FB15CF1D38B0.roa
File:                     D021E79CCD7811F19873FB15CF1D38B0.roa (raw, json)
Hash identifier:          lgZnpsBQ+4u+VlH7rVcjMX62nYAZJbuksQiLO4HI2q8=
Subject key identifier:   BF:DC:99:82:7E:07:5E:5B:81:50:96:74:52:FE:28:0D:E6:B2:DF:E4
Certificate issuer:       /CN=F3629FF7AF/serialNumber=4F6FA28C68ED3B94F7F1F4BFF5351DADDE2FA629
Certificate serial:       0E
Authority key identifier: 4F:6F:A2:8C:68:ED:3B:94:F7:F1:F4:BF:F5:35:1D:AD:DE:2F:A6:29
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/T2-ijGjtO5T38fS_9TUdrd4vpik.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3629FF7/EE6FA52ECD3511F1BD542AEBCE1D38B0/D021E79CCD7811F19873FB15CF1D38B0.roa
Signing time:             Wed 21 Oct 2026 17:57:00 +0000
ROA not before:           Wed 21 Oct 2026 17:56:56 +0000
ROA not after:            Sun 21 Oct 2029 17:56:56 +0000
asID:                     37055
IP address blocks:        2c0f:fbb0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3629FF7/EE6FA52ECD3511F1BD542AEBCE1D38B0/T2-ijGjtO5T38fS_9TUdrd4vpik.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3629FF7/EE6FA52ECD3511F1BD542AEBCE1D38B0/T2-ijGjtO5T38fS_9TUdrd4vpik.mft
                          rsync://rpki.afrinic.net/repository/afrinic/T2-ijGjtO5T38fS_9TUdrd4vpik.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 06 Nov 2026 06:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14 (0xe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3629FF7AF, serialNumber=4F6FA28C68ED3B94F7F1F4BFF5351DADDE2FA629
        Validity
            Not Before: Oct 21 17:56:56 2026 GMT
            Not After : Oct 21 17:56:56 2029 GMT
        Subject: CN=6ad8fcec-962c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:5b:92:cf:ed:4c:d7:ef:8c:7d:58:6e:87:37:
                    24:82:45:4c:fc:66:56:5f:e0:6b:77:49:b7:03:85:
                    a5:73:83:5f:50:41:d2:16:fd:44:94:ba:be:4a:6b:
                    78:55:5d:a9:ba:ea:09:3d:1d:64:5c:7c:37:ef:8a:
                    38:5e:03:5b:94:c4:91:b8:41:5c:5c:a6:ae:4b:be:
                    85:7c:17:02:dc:c5:0c:df:96:b3:5e:31:66:91:5b:
                    23:91:63:d8:0e:5b:68:e1:71:ab:38:da:1a:2f:d0:
                    55:d6:b2:b3:69:b4:b1:85:9a:e2:85:63:6b:55:21:
                    2e:5a:72:d8:65:0c:04:8e:06:55:3c:8a:7f:78:3f:
                    de:37:48:64:ae:23:98:44:ea:b0:51:1c:5c:01:44:
                    f8:5a:23:ee:55:0d:a0:04:41:56:ed:b3:9f:93:51:
                    41:5c:ca:70:b9:92:11:80:9d:62:22:4c:a7:0e:59:
                    a2:b6:28:68:ad:f8:60:6a:59:3a:00:38:e4:bb:66:
                    b6:16:eb:76:3c:f9:eb:fa:eb:b5:9c:f8:bb:da:48:
                    69:21:d1:0e:63:c3:01:12:fb:16:c9:2f:fe:49:2f:
                    8b:55:6b:50:4c:25:4d:f0:ca:f0:f9:90:24:b1:47:
                    71:e6:5b:52:37:d7:77:50:49:69:18:c4:80:d2:e7:
                    d6:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:DC:99:82:7E:07:5E:5B:81:50:96:74:52:FE:28:0D:E6:B2:DF:E4
            X509v3 Authority Key Identifier:
                keyid:4F:6F:A2:8C:68:ED:3B:94:F7:F1:F4:BF:F5:35:1D:AD:DE:2F:A6:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3629FF7/EE6FA52ECD3511F1BD542AEBCE1D38B0/T2-ijGjtO5T38fS_9TUdrd4vpik.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/T2-ijGjtO5T38fS_9TUdrd4vpik.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3629FF7/EE6FA52ECD3511F1BD542AEBCE1D38B0/D021E79CCD7811F19873FB15CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:fbb0::/32

    Signature Algorithm: sha256WithRSAEncryption
         34:67:df:80:27:18:95:16:62:24:cd:83:b1:6f:c1:c7:93:ef:
         84:df:41:d8:c9:ff:d3:35:83:ec:30:da:0d:f9:e5:37:a7:9f:
         a3:eb:99:24:52:92:dc:91:81:da:cc:e3:7a:f9:1f:d5:a6:4b:
         cd:d2:6f:31:ab:7b:72:f1:0d:e0:ae:07:f2:55:cd:f6:c0:a0:
         22:b0:08:22:eb:c6:e5:fd:db:b5:ea:90:3c:7f:12:9d:5e:6a:
         6d:2c:dc:eb:b2:a0:3a:03:cc:51:35:64:40:5f:b8:86:56:56:
         47:f6:3c:f5:9b:3c:99:dd:2d:91:f9:39:4b:af:04:9d:b4:c6:
         69:aa:4a:74:8d:5b:b1:4b:8a:ad:cb:be:c0:3b:90:77:49:f2:
         fe:b8:3c:df:ac:74:2f:9b:bd:eb:ce:b6:3e:c5:9e:ff:9d:f3:
         89:86:e3:eb:ed:7c:08:00:be:02:16:bc:d9:ac:b9:71:43:e3:
         ce:77:23:9b:ee:12:39:fa:58:46:70:ad:83:d2:5a:2d:36:fd:
         90:5e:6c:9f:6e:ec:f8:14:70:12:68:75:ac:51:36:9e:82:35:
         e6:5d:bd:97:05:a5:c4:56:d0:58:c1:85:3f:21:51:c9:42:17:
         71:e4:68:f8:ee:59:71:26:db:1a:12:d3:f9:b8:d6:8c:48:62:
         d0:62:54:7b
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBDjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzYy
OUZGN0FGMTEwLwYDVQQFEyg0RjZGQTI4QzY4RUQzQjk0RjdGMUY0QkZGNTM1MURB
RERFMkZBNjI5MB4XDTI2MTAyMTE3NTY1NloXDTI5MTAyMTE3NTY1NlowGDEWMBQG
A1UEAxMNNmFkOGZjZWMtOTYyYzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMpbks/tTNfvjH1Yboc3JIJFTPxmVl/ga3dJtwOFpXODX1BB0hb9RJS6vkpr
eFVdqbrqCT0dZFx8N++KOF4DW5TEkbhBXFymrku+hXwXAtzFDN+Ws14xZpFbI5Fj
2A5baOFxqzjaGi/QVdays2m0sYWa4oVja1UhLlpy2GUMBI4GVTyKf3g/3jdIZK4j
mETqsFEcXAFE+Foj7lUNoARBVu2zn5NRQVzKcLmSEYCdYiJMpw5ZorYoaK34YGpZ
OgA45Ltmthbrdjz56/rrtZz4u9pIaSHRDmPDARL7Fskv/kkvi1VrUEwlTfDK8PmQ
JLFHceZbUjfXd1BJaRjEgNLn1v0CAwEAAaOCAqYwggKiMB0GA1UdDgQWBBS/3JmC
fgdeW4FQlnRS/igN5rLf5DAfBgNVHSMEGDAWgBRPb6KMaO07lPfx9L/1NR2t3i+m
KTAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2MjlGRjcvRUU2RkE1MkVDRDM1MTFGMUJENTQyQUVCQ0UxRDM4QjAvVDItaWpH
anRPNVQzOGZTXzlUVWRyZDR2cGlrLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvVDItaWpHanRPNVQzOGZTXzlUVWRyZDR2cGlrLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MjlGRjcvRUU2RkE1MkVDRDM1MTFGMUJENTQyQUVCQ0Ux
RDM4QjAvRDAyMUU3OUNDRDc4MTFGMTk4NzNGQjE1Q0YxRDM4QjAucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACwP+7AwDQYJKoZIhvcNAQEL
BQADggEBADRn34AnGJUWYiTNg7FvwceT74TfQdjJ/9M1g+ww2g355Tenn6PrmSRS
ktyRgdrM43r5H9WmS83SbzGre3LxDeCuB/JVzfbAoCKwCCLrxuX927XqkDx/Ep1e
am0s3OuyoDoDzFE1ZEBfuIZWVkf2PPWbPJndLZH5OUuvBJ20xmmqSnSNW7FLiq3L
vsA7kHdJ8v64PN+sdC+bvevOtj7Fnv+d84mG4+vtfAgAvgIWvNmsuXFD4853I5vu
Ejn6WEZwrYPSWi02/ZBebJ9u7PgUcBJodaxRNp6CNeZdvZcFpcRW0FjBhT8hUclC
F3HkaPjuWXEm2xoS0/m41oxIYtBiVHs=
-----END CERTIFICATE-----