Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3610F96/5233202E10D611EE975DEC154AD9E6FC/08A8A4CCC30411F1A156BBE6CE1D38B0.roa
File:                     08A8A4CCC30411F1A156BBE6CE1D38B0.roa (raw, json)
Hash identifier:          mOjLjWpbK0v5LfYcOQ4upv7EwGqnrUNEizqzZA/QHxo=
Subject key identifier:   C8:74:F8:B0:2E:78:3A:D7:0A:8E:30:B9:63:FF:16:BD:06:C5:03:EF
Certificate issuer:       /CN=F3610F96AF/serialNumber=3941634F7D9565B56B197A10EC34C50AA9473559
Certificate serial:       04E3
Authority key identifier: 39:41:63:4F:7D:95:65:B5:6B:19:7A:10:EC:34:C5:0A:A9:47:35:59
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/OUFjT32VZbVrGXoQ7DTFCqlHNVk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3610F96/5233202E10D611EE975DEC154AD9E6FC/08A8A4CCC30411F1A156BBE6CE1D38B0.roa
Signing time:             Thu 08 Oct 2026 10:35:52 +0000
ROA not before:           Thu 08 Oct 2026 10:35:47 +0000
ROA not after:            Fri 08 Oct 2027 10:35:47 +0000
asID:                     36963
IP address blocks:        41.74.48.0/20 maxlen: 20
                          105.235.240.0/20 maxlen: 20
                          2c0f:1020::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3610F96/5233202E10D611EE975DEC154AD9E6FC/OUFjT32VZbVrGXoQ7DTFCqlHNVk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3610F96/5233202E10D611EE975DEC154AD9E6FC/OUFjT32VZbVrGXoQ7DTFCqlHNVk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/OUFjT32VZbVrGXoQ7DTFCqlHNVk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 26 Oct 2026 03:33:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1251 (0x4e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3610F96AF, serialNumber=3941634F7D9565B56B197A10EC34C50AA9473559
        Validity
            Not Before: Oct  8 10:35:47 2026 GMT
            Not After : Oct  8 10:35:47 2027 GMT
        Subject: CN=6ac77208-b9d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:5d:d8:c9:67:63:66:51:65:d1:e9:4d:26:cf:
                    62:d1:01:f8:99:e1:72:67:6f:6c:13:b6:87:e0:c3:
                    98:cc:50:8e:be:ac:67:ff:f8:51:42:f6:23:f1:e7:
                    85:8c:57:9c:8a:64:40:69:1d:f9:0f:75:de:ae:88:
                    46:92:18:54:ed:3c:11:fd:9f:b7:14:7b:33:f1:02:
                    a7:32:ac:27:4f:5b:c4:87:01:c6:01:e5:90:a6:96:
                    92:c1:79:e8:61:e5:65:5a:d4:ab:62:8d:0d:36:a5:
                    69:5c:59:ab:bd:b9:4e:32:28:ad:66:3e:73:56:dd:
                    3f:4a:9d:6e:cb:fe:8b:e7:3b:03:88:48:7b:f1:49:
                    48:e4:6e:47:39:5f:29:3e:b4:12:34:29:9a:d0:9b:
                    d6:00:14:11:bb:b2:77:2e:e2:b7:a6:62:3a:54:c2:
                    ce:4a:f8:3e:10:0b:97:df:2a:22:84:9d:ba:d6:c7:
                    4c:03:50:e7:94:d7:b6:bc:c0:b2:81:1c:c0:94:92:
                    78:3d:f8:bd:08:ad:0b:b3:c8:f8:0f:64:ab:b4:9e:
                    80:51:1a:67:b9:fd:67:09:79:3d:04:67:41:3e:cc:
                    63:9c:b8:72:0f:03:b2:69:e9:89:be:4c:ab:32:15:
                    a6:f7:39:97:c9:92:6f:fe:fc:54:a3:ca:48:24:47:
                    81:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:74:F8:B0:2E:78:3A:D7:0A:8E:30:B9:63:FF:16:BD:06:C5:03:EF
            X509v3 Authority Key Identifier:
                keyid:39:41:63:4F:7D:95:65:B5:6B:19:7A:10:EC:34:C5:0A:A9:47:35:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3610F96/5233202E10D611EE975DEC154AD9E6FC/OUFjT32VZbVrGXoQ7DTFCqlHNVk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OUFjT32VZbVrGXoQ7DTFCqlHNVk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3610F96/5233202E10D611EE975DEC154AD9E6FC/08A8A4CCC30411F1A156BBE6CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.74.48.0/20
                  105.235.240.0/20
                IPv6:
                  2c0f:1020::/32

    Signature Algorithm: sha256WithRSAEncryption
         4d:9a:f6:ef:82:c2:f0:c5:5e:7b:4c:4b:33:0b:80:27:6c:81:
         31:00:aa:e3:ef:8d:32:d5:b7:a9:1d:86:e7:c4:66:e3:87:77:
         f8:d7:cf:61:de:4a:fd:7e:32:03:44:e0:3b:d2:80:e9:7c:41:
         93:4c:eb:49:d6:23:a3:50:7e:b0:96:76:49:5b:e0:c1:41:13:
         22:6c:03:17:e8:5e:6a:83:13:78:76:e6:88:2b:c7:e0:38:85:
         c3:97:e9:ba:ad:45:9e:43:0e:b4:4f:65:31:ab:53:eb:43:8a:
         ff:ed:36:77:f3:99:c1:2c:03:36:53:9e:b0:6d:81:d0:51:58:
         9c:be:b1:c1:43:7d:e8:47:71:02:f1:3d:61:a1:aa:c2:45:89:
         f1:4d:a0:10:78:2c:89:fe:63:b9:a2:d6:fc:b0:65:70:e6:fb:
         25:75:73:64:42:52:64:57:ef:ea:e0:86:88:e1:c3:79:c3:b6:
         fc:79:56:c9:cf:84:f2:98:25:1e:d8:b0:13:64:0b:58:73:f6:
         9a:1e:9b:db:c9:fe:0f:9b:aa:3a:62:30:e8:bb:09:c4:f9:71:
         26:09:bd:af:01:7d:e9:88:24:92:b7:c3:0e:5e:f3:b9:0c:8f:
         72:b2:cc:2d:6e:b3:75:fb:52:22:de:a7:43:36:7c:4d:57:2d:
         c2:d5:e0:1b
-----BEGIN CERTIFICATE-----
MIIFmDCCBICgAwIBAgICBOMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MTBGOTZBRjExMC8GA1UEBRMoMzk0MTYzNEY3RDk1NjVCNTZCMTk3QTEwRUMzNEM1
MEFBOTQ3MzU1OTAeFw0yNjEwMDgxMDM1NDdaFw0yNzEwMDgxMDM1NDdaMBgxFjAU
BgNVBAMTDTZhYzc3MjA4LWI5ZDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDDXdjJZ2NmUWXR6U0mz2LRAfiZ4XJnb2wTtofgw5jMUI6+rGf/+FFC9iPx
54WMV5yKZEBpHfkPdd6uiEaSGFTtPBH9n7cUezPxAqcyrCdPW8SHAcYB5ZCmlpLB
eehh5WVa1KtijQ02pWlcWau9uU4yKK1mPnNW3T9KnW7L/ovnOwOISHvxSUjkbkc5
Xyk+tBI0KZrQm9YAFBG7sncu4remYjpUws5K+D4QC5ffKiKEnbrWx0wDUOeU17a8
wLKBHMCUkng9+L0IrQuzyPgPZKu0noBRGme5/WcJeT0EZ0E+zGOcuHIPA7Jp6Ym+
TKsyFab3OZfJkm/+/FSjykgkR4HZAgMBAAGjggK6MIICtjAdBgNVHQ4EFgQUyHT4
sC54OtcKjjC5Y/8WvQbFA+8wHwYDVR0jBBgwFoAUOUFjT32VZbVrGXoQ7DTFCqlH
NVkwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjEwRjk2LzUyMzMyMDJFMTBENjExRUU5NzVERUMxNTRBRDlFNkZDL09VRmpU
MzJWWmJWckdYb1E3RFRGQ3FsSE5Way5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL09VRmpUMzJWWmJWckdYb1E3RFRGQ3FsSE5Way5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjEwRjk2LzUyMzMyMDJFMTBENjExRUU5NzVERUMxNTRB
RDlFNkZDLzA4QThBNENDQzMwNDExRjFBMTU2QkJFNkNFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwDBAQpSjADBARp6/AwDQQCAAIw
BwMFACwPECAwDQYJKoZIhvcNAQELBQADggEBAE2a9u+CwvDFXntMSzMLgCdsgTEA
quPvjTLVt6kdhufEZuOHd/jXz2HeSv1+MgNE4DvSgOl8QZNM60nWI6NQfrCWdklb
4MFBEyJsAxfoXmqDE3h25ogrx+A4hcOX6bqtRZ5DDrRPZTGrU+tDiv/tNnfzmcEs
AzZTnrBtgdBRWJy+scFDfehHcQLxPWGhqsJFifFNoBB4LIn+Y7mi1vywZXDm+yV1
c2RCUmRX7+rghojhw3nDtvx5VsnPhPKYJR7YsBNkC1hz9poem9vJ/g+bqjpiMOi7
CcT5cSYJva8BfemIJJK3ww5e87kMj3KyzC1us3X7UiLep0M2fE1XLcLV4Bs=
-----END CERTIFICATE-----