Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36BE2ED/06324CD897DF11EDA719F9F2F1222468/36842E6C930B11F1964414FCCE1D38B0.roa
File:                     36842E6C930B11F1964414FCCE1D38B0.roa (raw, json)
Hash identifier:          xm0/INcnvqpioHRaQkmrxZd0pJ8+9E3Ylz2YfMXkiec=
Subject key identifier:   55:BF:E1:AE:37:C1:98:DA:01:D2:51:2D:E1:6C:85:8F:C5:C3:76:6C
Certificate issuer:       /CN=F36BE2EDRI/serialNumber=81067BA09AC67344F02CD4E64B6BF5E4CD73B810
Certificate serial:       053C
Authority key identifier: 81:06:7B:A0:9A:C6:73:44:F0:2C:D4:E6:4B:6B:F5:E4:CD:73:B8:10
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/gQZ7oJrGc0TwLNTmS2v15M1zuBA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BE2ED/06324CD897DF11EDA719F9F2F1222468/36842E6C930B11F1964414FCCE1D38B0.roa
Signing time:             Sat 08 Aug 2026 09:26:20 +0000
ROA not before:           Sat 08 Aug 2026 09:26:16 +0000
ROA not after:            Sat 31 Dec 2033 09:26:16 +0000
asID:                     33779
IP address blocks:        80.88.12.0/22 maxlen: 27
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36BE2ED/06324CD897DF11EDA719F9F2F1222468/gQZ7oJrGc0TwLNTmS2v15M1zuBA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36BE2ED/06324CD897DF11EDA719F9F2F1222468/gQZ7oJrGc0TwLNTmS2v15M1zuBA.mft
                          rsync://rpki.afrinic.net/repository/ripe/gQZ7oJrGc0TwLNTmS2v15M1zuBA.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 12 Sep 2026 00:45:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1340 (0x53c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BE2EDRI, serialNumber=81067BA09AC67344F02CD4E64B6BF5E4CD73B810
        Validity
            Not Before: Aug  8 09:26:16 2026 GMT
            Not After : Dec 31 09:26:16 2033 GMT
        Subject: CN=6a76f63c-2d63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:8f:7f:d7:69:40:e5:fc:ef:9f:ab:d5:ff:d2:
                    a3:4f:c5:d7:f8:77:4d:7e:ae:19:91:ac:3d:1a:0c:
                    5a:9a:ab:e6:8d:f1:24:27:02:cd:c9:54:17:56:52:
                    b6:b3:19:1f:c2:e8:ae:c4:78:46:6d:fd:07:66:ba:
                    6b:46:08:b9:04:d1:41:42:6c:14:88:c8:de:aa:6c:
                    3a:fb:7d:12:aa:56:14:fa:df:d8:4f:e1:0c:94:3b:
                    37:8d:5c:8f:b2:e4:c5:c3:b3:d2:3d:0c:48:e0:e4:
                    0c:13:39:95:56:85:47:1c:ed:dd:2f:0b:4d:a5:aa:
                    dc:89:60:8e:ac:d7:f7:1a:41:7c:a3:c8:76:89:30:
                    af:d8:d1:67:dc:59:4a:ff:ba:59:a2:7e:53:86:91:
                    97:c7:4b:4d:5e:d9:8b:7f:4a:b2:a6:77:08:7a:2d:
                    2a:e9:64:ed:19:fa:b6:a8:e1:05:4b:e8:28:68:43:
                    71:2e:9f:59:ba:ac:17:f1:85:02:22:71:fc:7a:fd:
                    48:04:d6:52:15:4a:4e:1d:33:bf:f4:0b:00:c2:3e:
                    69:c4:28:e0:eb:1b:01:07:38:cb:67:45:e5:ea:4d:
                    0a:d8:0a:28:f5:90:7f:54:a0:98:e7:8c:91:4d:86:
                    9b:ed:cf:a2:c4:b7:8f:1c:8a:c4:93:ff:c8:a8:cb:
                    1a:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:BF:E1:AE:37:C1:98:DA:01:D2:51:2D:E1:6C:85:8F:C5:C3:76:6C
            X509v3 Authority Key Identifier:
                keyid:81:06:7B:A0:9A:C6:73:44:F0:2C:D4:E6:4B:6B:F5:E4:CD:73:B8:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BE2ED/06324CD897DF11EDA719F9F2F1222468/gQZ7oJrGc0TwLNTmS2v15M1zuBA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/gQZ7oJrGc0TwLNTmS2v15M1zuBA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BE2ED/06324CD897DF11EDA719F9F2F1222468/36842E6C930B11F1964414FCCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.88.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         00:76:2b:28:66:44:c6:ae:b4:5e:b7:b8:74:1f:20:2c:42:11:
         cb:ba:c3:31:00:0b:81:76:12:5c:44:76:ec:6e:11:40:03:05:
         d2:be:f6:5b:d7:98:bd:ed:fe:48:35:de:2a:a0:af:91:11:e8:
         60:32:a9:da:c6:0f:8b:c6:a2:8d:7c:4d:93:62:bf:f1:42:93:
         3e:d8:07:9f:f6:86:28:73:f2:b5:6d:19:aa:f5:0a:88:3d:2d:
         87:1a:36:1d:dd:0c:c2:70:7e:12:d5:9e:6d:aa:ea:82:bb:69:
         79:70:d2:3b:5d:a7:66:b7:40:03:31:f8:79:b8:1b:09:66:6e:
         72:59:ec:bd:51:f6:8c:59:b0:df:bf:5b:f7:e3:b2:82:c1:be:
         09:77:59:2b:93:fd:46:65:31:50:d3:2e:01:32:79:1e:45:4b:
         37:dc:ee:5e:d7:4a:8b:d6:65:09:52:70:c4:1a:11:b9:55:98:
         04:01:07:b1:16:70:e2:68:35:4c:8a:59:fd:d1:dd:32:99:d6:
         00:5d:2e:1c:7f:d5:73:57:31:ac:5a:eb:38:d8:38:b4:c2:6a:
         97:bf:d7:78:69:e2:47:90:ed:64:4a:20:7a:5d:bb:fa:cb:d5:
         97:90:b4:88:34:43:2a:63:5b:48:fe:21:7c:1c:5b:ed:bd:bb:
         75:e8:2e:37
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICBTwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QkUyRURSSTExMC8GA1UEBRMoODEwNjdCQTA5QUM2NzM0NEYwMkNENEU2NEI2QkY1
RTRDRDczQjgxMDAeFw0yNjA4MDgwOTI2MTZaFw0zMzEyMzEwOTI2MTZaMBgxFjAU
BgNVBAMTDTZhNzZmNjNjLTJkNjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCej3/XaUDl/O+fq9X/0qNPxdf4d01+rhmRrD0aDFqaq+aN8SQnAs3JVBdW
UrazGR/C6K7EeEZt/QdmumtGCLkE0UFCbBSIyN6qbDr7fRKqVhT639hP4QyUOzeN
XI+y5MXDs9I9DEjg5AwTOZVWhUcc7d0vC02lqtyJYI6s1/caQXyjyHaJMK/Y0Wfc
WUr/ulmiflOGkZfHS01e2Yt/SrKmdwh6LSrpZO0Z+rao4QVL6ChoQ3Eun1m6rBfx
hQIicfx6/UgE1lIVSk4dM7/0CwDCPmnEKODrGwEHOMtnReXqTQrYCij1kH9UoJjn
jJFNhpvtz6LEt48cisST/8ioyxqrAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUVb/h
rjfBmNoB0lEt4WyFj8XDdmwwHwYDVR0jBBgwFoAUgQZ7oJrGc0TwLNTmS2v15M1z
uBAwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkJFMkVELzA2MzI0Q0Q4OTdERjExRURBNzE5RjlGMkYxMjIyNDY4L2dRWjdv
SnJHYzBUd0xOVG1TMnYxNU0xenVCQS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9yaXBl
L2dRWjdvSnJHYzBUd0xOVG1TMnYxNU0xenVCQS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNkJFMkVELzA2MzI0Q0Q4OTdERjExRURBNzE5RjlGMkYxMjIy
NDY4LzM2ODQyRTZDOTMwQjExRjE5NjQ0MTRGQ0NFMUQzOEIwLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJQWAwwDQYJKoZIhvcNAQELBQAD
ggEBAAB2KyhmRMautF63uHQfICxCEcu6wzEAC4F2ElxEduxuEUADBdK+9lvXmL3t
/kg13iqgr5ER6GAyqdrGD4vGoo18TZNiv/FCkz7YB5/2hihz8rVtGar1Cog9LYca
Nh3dDMJwfhLVnm2q6oK7aXlw0jtdp2a3QAMx+Hm4GwlmbnJZ7L1R9oxZsN+/W/fj
soLBvgl3WSuT/UZlMVDTLgEyeR5FSzfc7l7XSovWZQlScMQaEblVmAQBB7EWcOJo
NUyKWf3R3TKZ1gBdLhx/1XNXMaxa6zjYOLTCape/13hp4keQ7WRKIHpdu/rL1ZeQ
tIg0QypjW0j+IXwcW+29u3XoLjc=
-----END CERTIFICATE-----