Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/3DAAF158BBC411F1A5F43D02CF1D38B0.roa
File:                     3DAAF158BBC411F1A5F43D02CF1D38B0.roa (raw, json)
Hash identifier:          uKjaJtzq1vG3ypUVlLe81TAjqHiz+FJeQ/PC13j0NB4=
Subject key identifier:   10:11:D1:D7:15:D3:19:E0:5B:29:34:A0:11:30:84:90:D9:38:2A:42
Certificate issuer:       /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial:       12E6
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/3DAAF158BBC411F1A5F43D02CF1D38B0.roa
Signing time:             Tue 29 Sep 2026 05:11:35 +0000
ROA not before:           Tue 29 Sep 2026 05:11:29 +0000
ROA not after:            Thu 30 Sep 2027 05:11:29 +0000
asID:                     403005
IP address blocks:        196.251.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 08 Oct 2026 02:37:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4838 (0x12e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
        Validity
            Not Before: Sep 29 05:11:29 2026 GMT
            Not After : Sep 30 05:11:29 2027 GMT
        Subject: CN=6abb4887-ec9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:ca:1f:26:73:10:bf:7b:ce:7d:62:26:cc:47:
                    b8:01:a6:e9:be:8e:0d:61:70:94:ed:2c:4c:a8:95:
                    ef:78:ee:59:a7:3a:0d:10:5e:cf:11:81:38:f4:a7:
                    33:b9:56:28:12:9c:1c:7a:09:21:2a:ab:33:b4:4b:
                    26:ea:c2:95:7e:fa:fe:53:7b:94:57:35:c4:c2:85:
                    d3:63:aa:b1:ca:2c:fb:3f:eb:24:e4:86:43:27:32:
                    d9:4c:61:76:94:dc:10:b9:8b:00:0e:a1:c9:68:43:
                    14:cf:59:02:52:a9:b3:53:b3:f1:99:96:30:b3:14:
                    a8:62:80:ab:f3:81:cc:d7:c5:99:aa:86:e9:81:6b:
                    0a:ba:e9:80:09:20:6a:bf:4f:3f:b5:27:c8:8f:49:
                    fa:b8:9b:a5:98:61:f5:b3:e9:86:c1:3b:16:a1:a8:
                    0c:49:4b:ff:16:74:36:77:86:6d:4c:35:ed:f5:ec:
                    98:48:3b:ae:7a:ca:85:fc:ba:d2:38:4f:3f:a7:98:
                    bd:ae:1e:68:b2:9a:35:f2:c6:d3:16:a4:b4:92:35:
                    d0:59:2b:68:7d:d6:6a:fc:12:17:26:e5:53:c2:77:
                    0e:80:e5:1b:d6:dc:28:b5:4d:b6:eb:a6:b0:b7:8b:
                    4c:7b:fd:1c:c0:2a:04:04:6e:2d:92:f8:62:79:1f:
                    3f:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:11:D1:D7:15:D3:19:E0:5B:29:34:A0:11:30:84:90:D9:38:2A:42
            X509v3 Authority Key Identifier:
                keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/3DAAF158BBC411F1A5F43D02CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.251.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:36:ce:9a:af:4c:4f:71:c1:8d:b1:15:c0:2e:98:8d:25:74:
         67:a4:62:10:6f:3a:e9:99:ec:41:a7:a9:f9:33:59:94:a1:2a:
         2e:41:89:aa:90:3b:11:9b:26:e3:61:06:b0:7d:60:fc:4f:55:
         a7:94:18:5f:d6:4d:81:48:cc:f4:90:19:2b:b2:2d:fe:34:56:
         34:b5:60:7b:2c:27:e1:75:27:ef:1f:d8:bf:d3:5d:c1:2c:d3:
         86:43:9a:12:45:d8:9a:4a:9c:4f:ed:7e:ed:2b:bf:d9:f8:09:
         c5:a3:39:3e:d9:aa:91:e2:8e:2c:12:6c:c7:03:5c:51:f5:3e:
         f4:c7:5a:e9:4c:9a:1f:d1:ee:cb:6f:d4:76:cf:95:c4:83:62:
         b9:87:da:a9:bd:b2:01:ea:1a:25:8e:ac:0e:90:3f:7f:b0:9a:
         5d:68:d2:89:d5:f3:d2:18:e9:1f:2e:23:02:47:1c:d5:8b:7c:
         52:d4:e4:a1:35:92:78:7f:21:50:52:00:03:bc:07:e5:43:96:
         72:05:2d:11:4e:c9:19:1c:64:9c:8a:a5:2b:a0:32:23:55:db:
         04:ea:e7:56:ee:af:81:9d:ae:32:5c:f3:dd:6b:f3:c4:ef:b4:
         4f:f7:06:56:52:ad:11:a0:7f:48:6a:b2:e0:a1:0c:73:07:9d:
         b9:5b:9c:1a
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICEuYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
M0JBMTlBRjExMC8GA1UEBRMoNkFFQTI0QjA5OUMzMkIyMkU0RTQ4QkI5RjI2Q0Y1
NzhCRUY2QkZGMzAeFw0yNjA5MjkwNTExMjlaFw0yNzA5MzAwNTExMjlaMBgxFjAU
BgNVBAMTDTZhYmI0ODg3LWVjOWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDYyh8mcxC/e859YibMR7gBpum+jg1hcJTtLEyole947lmnOg0QXs8RgTj0
pzO5VigSnBx6CSEqqzO0SybqwpV++v5Te5RXNcTChdNjqrHKLPs/6yTkhkMnMtlM
YXaU3BC5iwAOocloQxTPWQJSqbNTs/GZljCzFKhigKvzgczXxZmqhumBawq66YAJ
IGq/Tz+1J8iPSfq4m6WYYfWz6YbBOxahqAxJS/8WdDZ3hm1MNe317JhIO656yoX8
utI4Tz+nmL2uHmiymjXyxtMWpLSSNdBZK2h91mr8Ehcm5VPCdw6A5RvW3Ci1Tbbr
prC3i0x7/RzAKgQEbi2S+GJ5Hz/zAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUEBHR
1xXTGeBbKTSgETCEkNk4KkIwHwYDVR0jBBgwFoAUauoksJnDKyLk5Iu58mz1eL72
v/MwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVBNDBENTc3L2F1b2tz
Sm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2F1b2tzSm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVB
NDBENTc3LzNEQUFGMTU4QkJDNDExRjFBNUY0M0QwMkNGMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADE+3kwDQYJKoZIhvcNAQEL
BQADggEBAFE2zpqvTE9xwY2xFcAumI0ldGekYhBvOumZ7EGnqfkzWZShKi5BiaqQ
OxGbJuNhBrB9YPxPVaeUGF/WTYFIzPSQGSuyLf40VjS1YHssJ+F1J+8f2L/TXcEs
04ZDmhJF2JpKnE/tfu0rv9n4CcWjOT7ZqpHijiwSbMcDXFH1PvTHWulMmh/R7stv
1HbPlcSDYrmH2qm9sgHqGiWOrA6QP3+wml1o0onV89IY6R8uIwJHHNWLfFLU5KE1
knh/IVBSAAO8B+VDlnIFLRFOyRkcZJyKpSugMiNV2wTq51bur4GdrjJc891r88Tv
tE/3BlZSrRGgf0hqsuChDHMHnblbnBo=
-----END CERTIFICATE-----