Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36BEA8C/A04721CE94C811F1BAD326FDCE1D38B0/1571351C9EEB11F1850919B0CE1D38B0.roa
File:                     1571351C9EEB11F1850919B0CE1D38B0.roa (raw, json)
Hash identifier:          n3MPiy7N3ph6ILem7Y9/gGcxRnxypKVHwzDs3NQKiLM=
Subject key identifier:   C7:BC:61:F2:DF:39:82:85:BE:F8:55:1D:22:18:C5:C3:51:2C:6B:26
Certificate issuer:       /CN=F36BEA8CAF/serialNumber=F757E38D5437DF7FFD9D9FF627CACBBB190456E0
Certificate serial:       11
Authority key identifier: F7:57:E3:8D:54:37:DF:7F:FD:9D:9F:F6:27:CA:CB:BB:19:04:56:E0
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/91fjjVQ333_9nZ_2J8rLuxkEVuA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BEA8C/A04721CE94C811F1BAD326FDCE1D38B0/1571351C9EEB11F1850919B0CE1D38B0.roa
Signing time:             Sun 23 Aug 2026 12:06:34 +0000
ROA not before:           Sun 23 Aug 2026 12:06:30 +0000
ROA not after:            Wed 23 Aug 2028 12:06:30 +0000
asID:                     37020
IP address blocks:        2c0f:4400::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36BEA8C/A04721CE94C811F1BAD326FDCE1D38B0/91fjjVQ333_9nZ_2J8rLuxkEVuA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36BEA8C/A04721CE94C811F1BAD326FDCE1D38B0/91fjjVQ333_9nZ_2J8rLuxkEVuA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/91fjjVQ333_9nZ_2J8rLuxkEVuA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 20 Sep 2026 00:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17 (0x11)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BEA8CAF, serialNumber=F757E38D5437DF7FFD9D9FF627CACBBB190456E0
        Validity
            Not Before: Aug 23 12:06:30 2026 GMT
            Not After : Aug 23 12:06:30 2028 GMT
        Subject: CN=6a8ae24a-4dea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:82:8d:79:93:78:2e:d7:fc:c3:1d:6d:39:38:
                    f2:33:a5:8a:af:65:22:91:95:af:7f:94:77:05:34:
                    f9:08:76:cf:dd:98:0c:d2:7e:2e:7e:9b:3d:90:df:
                    ab:bd:15:6f:aa:68:ef:87:01:20:8a:6e:df:16:0b:
                    ac:ab:fd:f2:38:50:8e:cb:a0:b0:e9:6d:56:d5:ea:
                    54:3b:eb:12:70:09:f3:5c:92:fa:fe:86:cd:45:94:
                    7b:d5:44:49:11:19:ba:49:f3:45:a2:c7:6c:5c:ab:
                    28:fc:8e:a7:df:e0:01:9f:fb:ce:25:bd:8f:49:15:
                    e1:10:b1:48:09:f3:6c:93:6d:34:b4:b5:8e:14:1e:
                    2c:8a:13:f8:17:bd:bf:5f:54:66:e3:52:3d:b4:49:
                    dc:df:fa:4d:a5:8e:71:a2:c6:5e:d5:36:c9:ac:09:
                    4a:fa:3a:37:a6:73:f2:25:7a:71:6e:f2:1e:97:4b:
                    0a:78:8b:88:86:f8:0b:b2:c2:0a:86:b0:46:a9:24:
                    72:ea:51:8b:2e:b3:eb:ae:85:2a:f3:a0:5c:06:1d:
                    60:f1:a4:f1:13:e8:9f:12:a1:32:e0:56:ba:ee:3c:
                    0b:3c:60:68:a0:44:df:4b:29:d1:36:1d:81:79:c9:
                    0e:2f:75:17:f9:29:71:33:a7:06:60:a0:1c:60:07:
                    ae:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:BC:61:F2:DF:39:82:85:BE:F8:55:1D:22:18:C5:C3:51:2C:6B:26
            X509v3 Authority Key Identifier:
                keyid:F7:57:E3:8D:54:37:DF:7F:FD:9D:9F:F6:27:CA:CB:BB:19:04:56:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BEA8C/A04721CE94C811F1BAD326FDCE1D38B0/91fjjVQ333_9nZ_2J8rLuxkEVuA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/91fjjVQ333_9nZ_2J8rLuxkEVuA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BEA8C/A04721CE94C811F1BAD326FDCE1D38B0/1571351C9EEB11F1850919B0CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:4400::/32

    Signature Algorithm: sha256WithRSAEncryption
         7e:42:b2:5d:f4:85:61:a0:8c:88:73:d8:5c:bc:83:38:98:f7:
         93:aa:4a:54:36:5f:74:eb:69:e2:a2:b1:6f:0f:c4:7a:01:c7:
         16:d8:5a:3a:ad:43:c0:6e:01:d9:a3:00:81:30:83:ba:43:1c:
         21:42:e9:05:19:35:f4:a2:c2:26:97:b8:f9:f4:12:54:28:03:
         83:f7:81:d3:4e:91:38:d6:4b:a9:1f:ac:47:ec:63:ec:ba:fd:
         1e:cc:a9:4f:c8:3c:74:0c:60:f4:85:1d:9a:f0:dd:52:88:53:
         82:8b:1b:b0:44:85:e5:e8:b6:14:fe:15:6f:5a:6d:5b:4e:6a:
         1c:44:7e:cd:0c:21:b7:ec:2d:4b:ce:bd:9c:c7:bd:13:96:43:
         95:5b:b2:23:21:ca:02:ad:cc:3b:b8:a8:fc:f6:74:e6:4f:b6:
         62:18:af:a7:ca:15:7b:db:6c:de:e4:42:45:9e:a7:16:d5:53:
         16:50:7f:a2:35:20:62:ab:15:99:13:76:8e:45:57:1f:90:d7:
         b4:f4:d5:82:19:1a:b9:69:a0:f9:96:39:0e:62:e6:65:11:3e:
         06:f6:e6:16:79:36:7e:27:0a:31:76:8f:f7:8e:56:dd:f1:cb:
         ff:ac:93:92:ed:64:bb:26:df:56:c4:5d:55:42:a0:cb:b8:e4:
         81:49:08:74
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBETANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzZC
RUE4Q0FGMTEwLwYDVQQFEyhGNzU3RTM4RDU0MzdERjdGRkQ5RDlGRjYyN0NBQ0JC
QjE5MDQ1NkUwMB4XDTI2MDgyMzEyMDYzMFoXDTI4MDgyMzEyMDYzMFowGDEWMBQG
A1UEAxMNNmE4YWUyNGEtNGRlYTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMuCjXmTeC7X/MMdbTk48jOliq9lIpGVr3+UdwU0+Qh2z92YDNJ+Ln6bPZDf
q70Vb6po74cBIIpu3xYLrKv98jhQjsugsOltVtXqVDvrEnAJ81yS+v6GzUWUe9VE
SREZuknzRaLHbFyrKPyOp9/gAZ/7ziW9j0kV4RCxSAnzbJNtNLS1jhQeLIoT+Be9
v19UZuNSPbRJ3N/6TaWOcaLGXtU2yawJSvo6N6Zz8iV6cW7yHpdLCniLiIb4C7LC
CoawRqkkcupRiy6z666FKvOgXAYdYPGk8RPonxKhMuBWuu48CzxgaKBE30sp0TYd
gXnJDi91F/kpcTOnBmCgHGAHriUCAwEAAaOCAqYwggKiMB0GA1UdDgQWBBTHvGHy
3zmChb74VR0iGMXDUSxrJjAfBgNVHSMEGDAWgBT3V+ONVDfff/2dn/Ynysu7GQRW
4DAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2QkVBOEMvQTA0NzIxQ0U5NEM4MTFGMUJBRDMyNkZEQ0UxRDM4QjAvOTFmampW
UTMzM185blpfMko4ckx1eGtFVnVBLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvOTFmampWUTMzM185blpfMko4ckx1eGtFVnVBLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QkVBOEMvQTA0NzIxQ0U5NEM4MTFGMUJBRDMyNkZEQ0Ux
RDM4QjAvMTU3MTM1MUM5RUVCMTFGMTg1MDkxOUIwQ0UxRDM4QjAucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACwPRAAwDQYJKoZIhvcNAQEL
BQADggEBAH5Csl30hWGgjIhz2Fy8gziY95OqSlQ2X3TraeKisW8PxHoBxxbYWjqt
Q8BuAdmjAIEwg7pDHCFC6QUZNfSiwiaXuPn0ElQoA4P3gdNOkTjWS6kfrEfsY+y6
/R7MqU/IPHQMYPSFHZrw3VKIU4KLG7BEheXothT+FW9abVtOahxEfs0MIbfsLUvO
vZzHvROWQ5VbsiMhygKtzDu4qPz2dOZPtmIYr6fKFXvbbN7kQkWepxbVUxZQf6I1
IGKrFZkTdo5FVx+Q17T01YIZGrlpoPmWOQ5i5mURPgb25hZ5Nn4nCjF2j/eOVt3x
y/+sk5LtZLsm31bEXVVCoMu45IFJCHQ=
-----END CERTIFICATE-----