Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36D6F5D/928D71FED3A311F1AB402B18CF1D38B0/E2B930CCD3A411F1A36E30A0CE1D38B0.roa
File:                     E2B930CCD3A411F1A36E30A0CE1D38B0.roa (raw, json)
Hash identifier:          xjZeLSc3uisxg+D8uQ15NcqO1rTsygCsEgtwv1cTigg=
Subject key identifier:   EE:16:1B:EE:42:5E:4F:11:DE:38:34:88:9A:FF:9D:9A:85:ED:4B:FF
Certificate issuer:       /CN=F36D6F5DAF/serialNumber=D9CC45CDC4FC5F821B0B57044841903E9CCD0BA0
Certificate serial:       02
Authority key identifier: D9:CC:45:CD:C4:FC:5F:82:1B:0B:57:04:48:41:90:3E:9C:CD:0B:A0
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/2cxFzcT8X4IbC1cESEGQPpzNC6A.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D6F5D/928D71FED3A311F1AB402B18CF1D38B0/E2B930CCD3A411F1A36E30A0CE1D38B0.roa
Signing time:             Thu 29 Oct 2026 14:27:36 +0000
ROA not before:           Thu 29 Oct 2026 14:27:31 +0000
ROA not after:            Tue 31 Dec 2030 14:27:31 +0000
asID:                     328136
IP address blocks:        196.250.176.0/20 maxlen: 20
                          196.250.177.0/24 maxlen: 24
                          196.250.178.0/24 maxlen: 24
                          196.250.179.0/24 maxlen: 24
                          196.250.180.0/24 maxlen: 24
                          196.250.181.0/24 maxlen: 24
                          196.250.182.0/24 maxlen: 24
                          196.250.183.0/24 maxlen: 24
                          196.250.184.0/24 maxlen: 24
                          196.250.185.0/24 maxlen: 24
                          196.250.186.0/24 maxlen: 24
                          196.250.187.0/24 maxlen: 24
                          196.250.188.0/24 maxlen: 24
                          196.250.189.0/24 maxlen: 24
                          196.250.190.0/24 maxlen: 24
                          196.250.191.0/24 maxlen: 24
                          2c0f:edc0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D6F5D/928D71FED3A311F1AB402B18CF1D38B0/2cxFzcT8X4IbC1cESEGQPpzNC6A.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D6F5D/928D71FED3A311F1AB402B18CF1D38B0/2cxFzcT8X4IbC1cESEGQPpzNC6A.mft
                          rsync://rpki.afrinic.net/repository/afrinic/2cxFzcT8X4IbC1cESEGQPpzNC6A.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 06 Nov 2026 06:06:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D6F5DAF, serialNumber=D9CC45CDC4FC5F821B0B57044841903E9CCD0BA0
        Validity
            Not Before: Oct 29 14:27:31 2026 GMT
            Not After : Dec 31 14:27:31 2030 GMT
        Subject: CN=6ae357d8-7e5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:23:75:97:25:1d:05:90:96:a7:99:44:89:9e:
                    c6:ab:de:67:2b:dc:11:95:1f:6b:b0:7d:e6:f7:1e:
                    7f:c8:39:26:4a:dc:4f:b8:5a:2a:8e:3a:21:bf:e1:
                    28:55:9c:6f:ca:9e:e5:f2:4c:8d:da:80:d7:fc:62:
                    ee:56:72:40:42:e4:ae:19:3e:af:b1:10:dd:eb:37:
                    b0:b1:64:4a:77:30:00:f2:9e:06:36:ac:13:82:fa:
                    4c:6f:01:4d:43:28:9b:c3:7d:b7:eb:5e:3a:32:9d:
                    a8:9c:aa:aa:42:ee:65:cd:b0:01:dd:8a:f6:7d:6d:
                    df:8e:8d:53:a6:b2:bd:8f:cd:08:e2:fd:f5:96:12:
                    23:59:83:12:fb:c2:c5:7d:9e:71:4e:0f:9b:ed:7e:
                    6e:79:d2:9a:a6:71:e9:11:28:b2:25:2c:e2:6f:e9:
                    f3:af:90:77:79:a4:44:6f:d3:b0:51:31:44:3d:4c:
                    e5:5d:64:f0:67:d0:5b:76:27:ba:1b:1e:75:e7:78:
                    90:64:03:57:c8:ff:30:e4:45:fb:48:f5:a9:48:b5:
                    06:bf:dc:18:24:a2:12:bc:3c:3a:d6:1b:47:0d:21:
                    7e:96:83:9c:ad:1d:9b:d2:1f:e5:28:fa:82:69:9e:
                    44:e2:79:87:77:36:79:19:22:7e:dd:10:05:01:d6:
                    91:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:16:1B:EE:42:5E:4F:11:DE:38:34:88:9A:FF:9D:9A:85:ED:4B:FF
            X509v3 Authority Key Identifier:
                keyid:D9:CC:45:CD:C4:FC:5F:82:1B:0B:57:04:48:41:90:3E:9C:CD:0B:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D6F5D/928D71FED3A311F1AB402B18CF1D38B0/2cxFzcT8X4IbC1cESEGQPpzNC6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2cxFzcT8X4IbC1cESEGQPpzNC6A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D6F5D/928D71FED3A311F1AB402B18CF1D38B0/E2B930CCD3A411F1A36E30A0CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.250.176.0/20
                IPv6:
                  2c0f:edc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         af:87:12:b8:59:eb:64:65:92:bf:60:8c:b2:68:2d:59:6f:29:
         0c:8b:dd:15:9e:c5:14:6c:b5:b9:13:4a:ac:58:78:ee:bd:ef:
         64:fd:f3:cd:25:67:f5:63:26:a9:d4:a4:59:f7:bc:24:6c:fc:
         4d:49:02:94:ef:e1:2b:c4:96:d6:2b:a6:6b:ab:66:8d:a6:83:
         f6:f8:80:92:ef:7c:f5:fd:c6:db:52:2d:5b:4e:74:ca:3a:fd:
         32:dd:3b:e2:22:20:f2:f2:38:f9:3e:4b:52:83:4d:e7:ef:b1:
         f9:9a:79:02:e8:f2:41:83:48:29:75:7c:b4:3f:4f:44:a1:9a:
         26:d0:a1:da:6a:b7:96:78:2b:5a:54:14:33:74:3a:b9:15:fd:
         2e:88:31:b3:6a:b8:f6:11:b9:45:30:1b:3f:e7:18:eb:8d:06:
         8e:b3:59:03:57:da:f9:b5:35:bd:2b:eb:fe:74:5d:60:ef:eb:
         44:31:5d:5d:af:79:12:30:9c:0e:36:1d:1d:7f:15:23:53:4a:
         fd:a7:36:5f:1c:47:33:35:d2:73:81:fa:f7:de:bf:31:ac:ac:
         79:b0:e1:c3:d3:e0:f2:b9:23:f7:d9:3e:35:ec:a8:28:71:f0:
         e6:c2:6f:52:8f:1f:69:9b:b3:71:f7:34:e3:28:e6:61:8a:c8:
         d9:91:53:d3
-----BEGIN CERTIFICATE-----
MIIFkTCCBHmgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzZE
NkY1REFGMTEwLwYDVQQFEyhEOUNDNDVDREM0RkM1RjgyMUIwQjU3MDQ0ODQxOTAz
RTlDQ0QwQkEwMB4XDTI2MTAyOTE0MjczMVoXDTMwMTIzMTE0MjczMVowGDEWMBQG
A1UEAxMNNmFlMzU3ZDgtN2U1ZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJMjdZclHQWQlqeZRImexqveZyvcEZUfa7B95vcef8g5JkrcT7haKo46Ib/h
KFWcb8qe5fJMjdqA1/xi7lZyQELkrhk+r7EQ3es3sLFkSncwAPKeBjasE4L6TG8B
TUMom8N9t+teOjKdqJyqqkLuZc2wAd2K9n1t346NU6ayvY/NCOL99ZYSI1mDEvvC
xX2ecU4Pm+1+bnnSmqZx6REosiUs4m/p86+Qd3mkRG/TsFExRD1M5V1k8GfQW3Yn
uhseded4kGQDV8j/MORF+0j1qUi1Br/cGCSiErw8OtYbRw0hfpaDnK0dm9If5Sj6
gmmeROJ5h3c2eRkift0QBQHWkacCAwEAAaOCArQwggKwMB0GA1UdDgQWBBTuFhvu
Ql5PEd44NIia/52ahe1L/zAfBgNVHSMEGDAWgBTZzEXNxPxfghsLVwRIQZA+nM0L
oDAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2RDZGNUQvOTI4RDcxRkVEM0EzMTFGMUFCNDAyQjE4Q0YxRDM4QjAvMmN4Rnpj
VDhYNEliQzFjRVNFR1FQcHpOQzZBLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvMmN4RnpjVDhYNEliQzFjRVNFR1FQcHpOQzZBLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RDZGNUQvOTI4RDcxRkVEM0EzMTFGMUFCNDAyQjE4Q0Yx
RDM4QjAvRTJCOTMwQ0NEM0E0MTFGMUEzNkUzMEEwQ0UxRDM4QjAucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEBMT6sDANBAIAAjAHAwUALA/t
wDANBgkqhkiG9w0BAQsFAAOCAQEAr4cSuFnrZGWSv2CMsmgtWW8pDIvdFZ7FFGy1
uRNKrFh47r3vZP3zzSVn9WMmqdSkWfe8JGz8TUkClO/hK8SW1iuma6tmjaaD9viA
ku989f3G21ItW050yjr9Mt074iIg8vI4+T5LUoNN5++x+Zp5AujyQYNIKXV8tD9P
RKGaJtCh2mq3lngrWlQUM3Q6uRX9Logxs2q49hG5RTAbP+cY640GjrNZA1fa+bU1
vSvr/nRdYO/rRDFdXa95EjCcDjYdHX8VI1NK/ac2XxxHMzXSc4H6996/MaysebDh
w9Pg8rkj99k+NeyoKHHw5sJvUo8faZuzcfc04yjmYYrI2ZFT0w==
-----END CERTIFICATE-----