Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36297A8/FDC41778AB6411F1810BD2C1CE1D38B0/EBAC716AAB6511F193033AC8CE1D38B0.roa
File:                     EBAC716AAB6511F193033AC8CE1D38B0.roa (raw, json)
Hash identifier:          7Idq3YwjiHdERP1x0fXbeTuTnxcNWtbWLH9CE2SMjo4=
Subject key identifier:   07:97:94:8D:3A:2A:9C:0C:86:81:E3:80:90:79:59:20:84:0B:ED:B2
Certificate issuer:       /CN=F36297A8AF/serialNumber=07E66530BA5425ECEAC5E3C30A927818CDFFADBF
Certificate serial:       02
Authority key identifier: 07:E6:65:30:BA:54:25:EC:EA:C5:E3:C3:0A:92:78:18:CD:FF:AD:BF
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/B-ZlMLpUJezqxePDCpJ4GM3_rb8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36297A8/FDC41778AB6411F1810BD2C1CE1D38B0/EBAC716AAB6511F193033AC8CE1D38B0.roa
Signing time:             Tue 08 Sep 2026 09:16:06 +0000
ROA not before:           Tue 08 Sep 2026 09:16:02 +0000
ROA not after:            Wed 31 Dec 2036 09:16:02 +0000
asID:                     37145
IP address blocks:        41.217.192.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36297A8/FDC41778AB6411F1810BD2C1CE1D38B0/B-ZlMLpUJezqxePDCpJ4GM3_rb8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36297A8/FDC41778AB6411F1810BD2C1CE1D38B0/B-ZlMLpUJezqxePDCpJ4GM3_rb8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/B-ZlMLpUJezqxePDCpJ4GM3_rb8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 20 Sep 2026 00:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36297A8AF, serialNumber=07E66530BA5425ECEAC5E3C30A927818CDFFADBF
        Validity
            Not Before: Sep  8 09:16:02 2026 GMT
            Not After : Dec 31 09:16:02 2036 GMT
        Subject: CN=6a9fd256-a9e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:9b:12:c5:d1:5f:bc:8e:95:a5:42:6b:f1:c5:
                    16:90:c6:02:cc:12:27:65:ee:2b:f6:25:4f:44:2e:
                    03:2a:40:2f:c1:e3:bc:59:3e:97:0f:e4:8f:66:aa:
                    69:a4:b1:3c:16:f6:45:36:ad:e9:d0:75:32:90:80:
                    c5:e5:61:1b:54:86:1e:bc:bd:0b:4f:3b:42:d9:b5:
                    7c:73:7a:36:63:4f:4a:0c:51:31:f7:2a:03:ef:aa:
                    f4:f9:91:16:0d:10:a2:9a:30:5a:d4:11:73:c9:10:
                    b9:a4:e3:e3:ae:b7:32:06:62:7f:22:21:d7:01:ad:
                    11:f4:f4:21:d0:23:d9:8d:11:69:f2:71:a1:ef:25:
                    dd:74:db:e5:a8:e5:a3:94:02:5c:29:7b:1b:04:d0:
                    b0:05:2e:f7:02:3e:e1:93:0d:89:69:0b:b4:4f:d2:
                    eb:35:7a:04:5b:f0:74:f4:44:2c:4f:a2:7d:a0:d3:
                    57:f8:5c:99:84:1e:bd:60:15:88:eb:09:f1:40:02:
                    fa:fa:de:c5:38:28:86:18:91:5b:9d:a2:07:16:bc:
                    03:4d:fa:94:22:d1:2e:ef:3b:bd:ba:e6:73:a9:6f:
                    b5:ad:56:f4:10:c5:bd:1a:56:29:fb:e6:ff:8f:26:
                    ce:27:db:d7:79:85:bc:a3:7d:01:f4:4a:d8:0f:c3:
                    27:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:97:94:8D:3A:2A:9C:0C:86:81:E3:80:90:79:59:20:84:0B:ED:B2
            X509v3 Authority Key Identifier:
                keyid:07:E6:65:30:BA:54:25:EC:EA:C5:E3:C3:0A:92:78:18:CD:FF:AD:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36297A8/FDC41778AB6411F1810BD2C1CE1D38B0/B-ZlMLpUJezqxePDCpJ4GM3_rb8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/B-ZlMLpUJezqxePDCpJ4GM3_rb8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36297A8/FDC41778AB6411F1810BD2C1CE1D38B0/EBAC716AAB6511F193033AC8CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.217.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8e:5c:12:ef:ea:52:ee:a1:65:d5:29:0a:cf:c2:18:55:cd:fe:
         91:20:01:26:43:7b:4a:26:31:25:e8:1f:f2:5f:a9:37:84:e7:
         88:3e:ca:80:bf:4d:89:01:60:20:82:92:57:60:95:57:d2:bb:
         c4:dd:e9:c0:ab:e5:74:3d:92:5c:86:49:a9:da:26:87:b9:0d:
         87:a9:cc:b0:57:ba:f7:60:ae:56:35:57:fc:96:64:5f:38:34:
         9c:68:bf:9e:06:5f:69:ea:41:7e:9a:0a:bc:67:2b:62:8e:b0:
         f2:c6:ae:ed:46:5c:97:88:a1:15:30:7e:c7:0f:6b:35:44:2b:
         b6:b2:e3:e2:6e:6d:29:9a:f0:6e:91:a7:12:cf:46:98:d3:5d:
         c5:83:93:38:c4:8f:d0:40:65:20:80:f9:58:71:3f:5d:dc:8c:
         40:fa:b2:0e:91:d6:0d:4c:4f:ee:ff:96:b8:af:f0:b5:e2:c7:
         ac:64:aa:90:0e:75:15:05:3b:00:25:d7:0c:a2:69:83:a6:00:
         44:64:42:ad:df:03:d6:49:78:4d:0b:77:64:46:a8:da:de:11:
         c3:4f:b5:cd:d4:b9:9a:48:c4:e1:80:cc:2d:60:1e:b9:07:a2:
         0b:e7:ab:ad:0d:45:60:48:4a:cb:44:7e:f7:d3:10:83:78:52:
         c8:a0:ff:9e
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzYy
OTdBOEFGMTEwLwYDVQQFEygwN0U2NjUzMEJBNTQyNUVDRUFDNUUzQzMwQTkyNzgx
OENERkZBREJGMB4XDTI2MDkwODA5MTYwMloXDTM2MTIzMTA5MTYwMlowGDEWMBQG
A1UEAxMNNmE5ZmQyNTYtYTllMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJqbEsXRX7yOlaVCa/HFFpDGAswSJ2XuK/YlT0QuAypAL8HjvFk+lw/kj2aq
aaSxPBb2RTat6dB1MpCAxeVhG1SGHry9C087Qtm1fHN6NmNPSgxRMfcqA++q9PmR
Fg0QopowWtQRc8kQuaTj4663MgZifyIh1wGtEfT0IdAj2Y0RafJxoe8l3XTb5ajl
o5QCXCl7GwTQsAUu9wI+4ZMNiWkLtE/S6zV6BFvwdPRELE+ifaDTV/hcmYQevWAV
iOsJ8UAC+vrexTgohhiRW52iBxa8A036lCLRLu87vbrmc6lvta1W9BDFvRpWKfvm
/48mzifb13mFvKN9AfRK2A/DJy8CAwEAAaOCAqUwggKhMB0GA1UdDgQWBBQHl5SN
OiqcDIaB44CQeVkghAvtsjAfBgNVHSMEGDAWgBQH5mUwulQl7OrF48MKkngYzf+t
vzAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2Mjk3QTgvRkRDNDE3NzhBQjY0MTFGMTgxMEJEMkMxQ0UxRDM4QjAvQi1abE1M
cFVKZXpxeGVQRENwSjRHTTNfcmI4LmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvQi1abE1McFVKZXpxeGVQRENwSjRHTTNfcmI4LmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2Mjk3QTgvRkRDNDE3NzhBQjY0MTFGMTgxMEJEMkMxQ0Ux
RDM4QjAvRUJBQzcxNkFBQjY1MTFGMTkzMDMzQUM4Q0UxRDM4QjAucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAinZwDANBgkqhkiG9w0BAQsF
AAOCAQEAjlwS7+pS7qFl1SkKz8IYVc3+kSABJkN7SiYxJegf8l+pN4TniD7KgL9N
iQFgIIKSV2CVV9K7xN3pwKvldD2SXIZJqdomh7kNh6nMsFe692CuVjVX/JZkXzg0
nGi/ngZfaepBfpoKvGcrYo6w8sau7UZcl4ihFTB+xw9rNUQrtrLj4m5tKZrwbpGn
Es9GmNNdxYOTOMSP0EBlIID5WHE/XdyMQPqyDpHWDUxP7v+WuK/wteLHrGSqkA51
FQU7ACXXDKJpg6YARGRCrd8D1kl4TQt3ZEao2t4Rw0+1zdS5mkjE4YDMLWAeuQei
C+errQ1FYEhKy0R+99MQg3hSyKD/ng==
-----END CERTIFICATE-----