Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F361A88E/86D64BD2B91911F181EB6110CF1D38B0/051F8D2CBD7B11F1AA9AD7B1CE1D38B0.roa
File:                     051F8D2CBD7B11F1AA9AD7B1CE1D38B0.roa (raw, json)
Hash identifier:          i6y1B6HtR7ZOumE0hmbO1Wy73BFpw2iwcD+rCu9vZxI=
Subject key identifier:   F1:5B:EF:68:09:61:7B:3A:38:C5:39:09:C2:ED:9E:1C:4E:89:B7:2B
Certificate issuer:       /CN=F361A88EAF/serialNumber=ABC747703B3C3A6125056D1399878FAF84B990B9
Certificate serial:       09
Authority key identifier: AB:C7:47:70:3B:3C:3A:61:25:05:6D:13:99:87:8F:AF:84:B9:90:B9
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/q8dHcDs8OmElBW0TmYePr4S5kLk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361A88E/86D64BD2B91911F181EB6110CF1D38B0/051F8D2CBD7B11F1AA9AD7B1CE1D38B0.roa
Signing time:             Thu 01 Oct 2026 09:32:29 +0000
ROA not before:           Thu 01 Oct 2026 09:32:25 +0000
ROA not after:            Fri 01 Oct 2027 09:32:25 +0000
asID:                     36901
IP address blocks:        41.220.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361A88E/86D64BD2B91911F181EB6110CF1D38B0/q8dHcDs8OmElBW0TmYePr4S5kLk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361A88E/86D64BD2B91911F181EB6110CF1D38B0/q8dHcDs8OmElBW0TmYePr4S5kLk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/q8dHcDs8OmElBW0TmYePr4S5kLk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 00:08:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9 (0x9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361A88EAF, serialNumber=ABC747703B3C3A6125056D1399878FAF84B990B9
        Validity
            Not Before: Oct  1 09:32:25 2026 GMT
            Not After : Oct  1 09:32:25 2027 GMT
        Subject: CN=6abe28ad-36d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:29:04:14:2a:38:d5:cc:cd:9d:10:d0:33:6c:
                    f2:d8:fa:e3:f3:68:88:6e:b3:c5:33:ee:b3:c6:0d:
                    b4:1e:a5:05:dc:fc:48:e6:ef:7c:77:3d:d8:ac:7d:
                    c4:bc:83:bb:f0:ab:35:9f:8f:25:f0:20:fd:f0:86:
                    c9:31:ac:8b:27:95:6f:f4:42:52:b8:c4:81:2b:91:
                    c3:e2:e6:c2:49:3c:4e:35:4a:18:4a:49:bc:bc:a2:
                    36:f8:15:8b:be:82:b5:c0:1e:c0:84:93:84:6e:4e:
                    0d:a3:f8:f9:06:e4:33:dc:b8:21:ad:d8:a5:97:f8:
                    5c:eb:51:6c:ab:d4:a8:dd:c8:87:3b:b0:81:5a:89:
                    84:09:f6:15:cd:03:8d:d0:bd:1c:f9:bc:6c:c9:9d:
                    37:90:ad:30:f2:2f:19:26:50:17:0c:7c:9a:92:1f:
                    d0:68:45:53:85:ad:7a:f4:af:e3:a9:e4:f0:a3:d5:
                    ba:c6:fd:65:f1:4f:95:c4:fb:d5:d3:08:e9:3d:bf:
                    e4:6a:01:3a:ac:2e:ca:dc:ca:25:b9:3e:5e:bb:21:
                    54:60:ff:a1:df:0b:f3:f4:45:8d:aa:88:7b:66:25:
                    25:07:16:90:5c:1d:d1:dc:8b:7a:31:3d:bb:40:e7:
                    0f:22:f8:a9:fe:99:90:8b:3e:84:7e:64:31:fc:ba:
                    30:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:5B:EF:68:09:61:7B:3A:38:C5:39:09:C2:ED:9E:1C:4E:89:B7:2B
            X509v3 Authority Key Identifier:
                keyid:AB:C7:47:70:3B:3C:3A:61:25:05:6D:13:99:87:8F:AF:84:B9:90:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361A88E/86D64BD2B91911F181EB6110CF1D38B0/q8dHcDs8OmElBW0TmYePr4S5kLk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/q8dHcDs8OmElBW0TmYePr4S5kLk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361A88E/86D64BD2B91911F181EB6110CF1D38B0/051F8D2CBD7B11F1AA9AD7B1CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.220.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:7f:9e:0a:38:35:e6:2e:b1:99:24:05:7d:cd:36:7b:c2:85:
         ef:a3:b1:27:e3:ed:8a:48:4c:c1:cb:73:de:d7:29:dc:8e:47:
         ae:fe:90:fc:8d:db:62:87:9f:3d:26:14:ac:78:82:e4:1d:3c:
         f8:b5:ac:3a:48:d5:34:e9:38:9e:39:16:20:cd:22:bd:c0:0d:
         0a:02:2f:3f:86:20:ac:81:41:3e:25:9a:16:11:60:b4:14:11:
         b3:51:70:8c:0e:6f:27:e3:aa:b5:f7:ff:d7:b0:01:aa:70:bb:
         ae:14:9f:90:e9:0b:5f:20:46:1c:46:e7:d8:84:c6:6f:a5:c7:
         23:a8:91:3a:db:11:fd:6d:4f:ce:f7:1e:85:82:25:10:c7:74:
         58:14:85:05:71:a1:51:6b:f4:e9:dc:33:a0:92:14:b4:46:87:
         42:44:36:d9:0b:4b:0b:61:b7:bb:b5:f9:ef:bd:e8:72:34:a0:
         2b:a5:9e:86:a9:64:b7:13:32:96:a0:01:5d:94:b6:b0:82:85:
         36:59:2a:c5:a5:b5:da:d4:18:11:e0:ee:61:a4:ab:7f:2f:6f:
         86:ff:3d:cd:45:ec:cd:2c:61:9e:93:34:be:c0:55:b2:f1:0c:
         58:4e:3f:d5:57:c2:1b:16:dd:2f:a9:1d:5b:34:21:5d:b0:54:
         26:b2:30:bd
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBCTANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzYx
QTg4RUFGMTEwLwYDVQQFEyhBQkM3NDc3MDNCM0MzQTYxMjUwNTZEMTM5OTg3OEZB
Rjg0Qjk5MEI5MB4XDTI2MTAwMTA5MzIyNVoXDTI3MTAwMTA5MzIyNVowGDEWMBQG
A1UEAxMNNmFiZTI4YWQtMzZkODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANIpBBQqONXMzZ0Q0DNs8tj64/NoiG6zxTPus8YNtB6lBdz8SObvfHc92Kx9
xLyDu/CrNZ+PJfAg/fCGyTGsiyeVb/RCUrjEgSuRw+Lmwkk8TjVKGEpJvLyiNvgV
i76CtcAewISThG5ODaP4+QbkM9y4Ia3YpZf4XOtRbKvUqN3IhzuwgVqJhAn2Fc0D
jdC9HPm8bMmdN5CtMPIvGSZQFwx8mpIf0GhFU4WtevSv46nk8KPVusb9ZfFPlcT7
1dMI6T2/5GoBOqwuytzKJbk+XrshVGD/od8L8/RFjaqIe2YlJQcWkFwd0dyLejE9
u0DnDyL4qf6ZkIs+hH5kMfy6MFkCAwEAAaOCAqUwggKhMB0GA1UdDgQWBBTxW+9o
CWF7OjjFOQnC7Z4cTom3KzAfBgNVHSMEGDAWgBSrx0dwOzw6YSUFbROZh4+vhLmQ
uTAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2MUE4OEUvODZENjRCRDJCOTE5MTFGMTgxRUI2MTEwQ0YxRDM4QjAvcThkSGNE
czhPbUVsQlcwVG1ZZVByNFM1a0xrLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvcThkSGNEczhPbUVsQlcwVG1ZZVByNFM1a0xrLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MUE4OEUvODZENjRCRDJCOTE5MTFGMTgxRUI2MTEwQ0Yx
RDM4QjAvMDUxRjhEMkNCRDdCMTFGMUFBOUFEN0IxQ0UxRDM4QjAucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEACnc3jANBgkqhkiG9w0BAQsF
AAOCAQEAPX+eCjg15i6xmSQFfc02e8KF76OxJ+PtikhMwctz3tcp3I5Hrv6Q/I3b
YoefPSYUrHiC5B08+LWsOkjVNOk4njkWIM0ivcANCgIvP4YgrIFBPiWaFhFgtBQR
s1FwjA5vJ+Oqtff/17ABqnC7rhSfkOkLXyBGHEbn2ITGb6XHI6iROtsR/W1Pzvce
hYIlEMd0WBSFBXGhUWv06dwzoJIUtEaHQkQ22QtLC2G3u7X5773ocjSgK6Wehqlk
txMylqABXZS2sIKFNlkqxaW12tQYEeDuYaSrfy9vhv89zUXszSxhnpM0vsBVsvEM
WE4/1VfCGxbdL6kdWzQhXbBUJrIwvQ==
-----END CERTIFICATE-----