Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36C6E36/649470B09BA211F1BB3A7E0FCF1D38B0/C53660ACB2D311F19EF6E7B6CE1D38B0.roa
File:                     C53660ACB2D311F19EF6E7B6CE1D38B0.roa (raw, json)
Hash identifier:          5Dj/UiotHDT3B1x2BeMhtWpFuhLdGfHWKGcnmB6uC1c=
Subject key identifier:   EF:D3:B6:96:93:43:10:E7:C6:2C:49:35:44:E0:BC:66:A8:43:B6:68
Certificate issuer:       /CN=F36C6E36AF/serialNumber=6E2422C2A7E3DF07CCE0D1FD01D146DB5678D1DB
Certificate serial:       21
Authority key identifier: 6E:24:22:C2:A7:E3:DF:07:CC:E0:D1:FD:01:D1:46:DB:56:78:D1:DB
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/biQiwqfj3wfM4NH9AdFG21Z40ds.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C6E36/649470B09BA211F1BB3A7E0FCF1D38B0/C53660ACB2D311F19EF6E7B6CE1D38B0.roa
Signing time:             Thu 17 Sep 2026 20:10:04 +0000
ROA not before:           Thu 17 Sep 2026 20:09:57 +0000
ROA not after:            Wed 31 Dec 2036 20:09:57 +0000
asID:                     329792
IP address blocks:        2c0f:1320::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C6E36/649470B09BA211F1BB3A7E0FCF1D38B0/biQiwqfj3wfM4NH9AdFG21Z40ds.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C6E36/649470B09BA211F1BB3A7E0FCF1D38B0/biQiwqfj3wfM4NH9AdFG21Z40ds.mft
                          rsync://rpki.afrinic.net/repository/afrinic/biQiwqfj3wfM4NH9AdFG21Z40ds.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 20 Sep 2026 00:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 33 (0x21)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C6E36AF, serialNumber=6E2422C2A7E3DF07CCE0D1FD01D146DB5678D1DB
        Validity
            Not Before: Sep 17 20:09:57 2026 GMT
            Not After : Dec 31 20:09:57 2036 GMT
        Subject: CN=6aac491c-f118
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:c9:5c:e2:96:44:43:6f:41:e0:02:6a:37:99:
                    9d:79:17:3a:28:a2:3d:71:10:9e:68:a9:93:0d:2e:
                    7e:cc:dc:72:d1:87:3a:11:2c:03:44:1c:3c:ea:cf:
                    8a:54:19:53:5d:74:7a:ca:c4:8b:84:20:2c:58:49:
                    93:a3:e7:23:50:e3:e8:d0:5e:55:dd:1e:42:e5:a5:
                    57:f0:03:ff:4d:d1:0b:9e:87:3c:f3:ae:3f:91:52:
                    b7:52:3b:f1:bd:11:3f:70:5b:4a:50:fe:0e:37:0d:
                    8d:eb:93:5c:96:48:30:08:58:f9:6b:66:f9:93:72:
                    29:b6:44:f7:2a:55:a8:f8:49:e9:6e:6a:9c:32:1f:
                    22:01:fe:d7:29:b0:8e:4c:b7:59:0b:77:cf:17:ff:
                    29:75:31:f1:4b:e5:f2:f5:0f:0a:21:3d:50:94:6f:
                    06:db:ec:8e:3b:e6:60:ec:02:5a:ab:7d:2a:2c:9a:
                    26:63:98:78:9e:14:82:12:3b:f7:f1:50:9e:37:b0:
                    2e:3e:cf:ec:e5:fb:05:31:50:50:1a:b9:c3:20:c7:
                    16:5f:ae:6f:67:4d:e9:20:92:a5:94:b2:73:6e:08:
                    17:98:9e:88:ef:d0:b5:6d:e6:19:bd:a0:5f:49:d9:
                    37:18:1d:1b:96:a9:d7:a9:34:e3:56:77:ba:92:61:
                    6b:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:D3:B6:96:93:43:10:E7:C6:2C:49:35:44:E0:BC:66:A8:43:B6:68
            X509v3 Authority Key Identifier:
                keyid:6E:24:22:C2:A7:E3:DF:07:CC:E0:D1:FD:01:D1:46:DB:56:78:D1:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C6E36/649470B09BA211F1BB3A7E0FCF1D38B0/biQiwqfj3wfM4NH9AdFG21Z40ds.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/biQiwqfj3wfM4NH9AdFG21Z40ds.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C6E36/649470B09BA211F1BB3A7E0FCF1D38B0/C53660ACB2D311F19EF6E7B6CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:1320::/32

    Signature Algorithm: sha256WithRSAEncryption
         88:a8:35:16:27:31:34:c1:58:b6:89:be:7b:9d:a2:4d:b0:24:
         d9:e8:5b:9f:a5:de:3d:2c:19:24:da:c2:0f:ce:b0:44:3e:73:
         23:c8:42:2b:d4:e4:82:27:e2:ea:18:78:0b:ef:b1:e6:cf:9e:
         b7:12:97:24:aa:f5:12:f7:68:8f:37:68:d3:fd:a6:cb:ce:53:
         34:66:c9:68:bf:c5:d7:c9:bf:16:d4:54:18:00:ff:9f:49:c0:
         56:c2:06:28:b1:6f:29:5d:8a:90:a8:20:d7:e4:c3:f3:ef:11:
         59:d3:b7:89:27:2f:97:b5:cb:98:b0:1b:bd:31:8e:47:12:51:
         d6:68:6f:3d:34:66:2e:61:3d:14:66:23:ef:c2:07:7b:a1:4d:
         85:63:1b:4c:69:57:76:ea:8f:d1:10:87:72:b2:5b:38:7a:77:
         7a:1b:d5:23:4f:7e:93:35:d1:9b:f9:19:05:1a:0c:eb:89:c0:
         c5:60:e7:23:24:59:81:61:dc:f4:14:7c:e6:a7:56:c1:8d:55:
         f2:9d:2d:10:5a:ce:78:e9:1b:a7:15:35:ad:5a:7b:10:1c:97:
         88:f7:e9:54:32:f2:4e:7a:3d:55:29:c0:0d:5a:9b:d3:71:2c:
         ac:93:79:4a:87:c0:5b:9a:87:bd:bb:42:b1:27:94:f7:d5:42:
         f1:ad:05:28
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBITANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzZD
NkUzNkFGMTEwLwYDVQQFEyg2RTI0MjJDMkE3RTNERjA3Q0NFMEQxRkQwMUQxNDZE
QjU2NzhEMURCMB4XDTI2MDkxNzIwMDk1N1oXDTM2MTIzMTIwMDk1N1owGDEWMBQG
A1UEAxMNNmFhYzQ5MWMtZjExODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANzJXOKWRENvQeACajeZnXkXOiiiPXEQnmipkw0ufszcctGHOhEsA0QcPOrP
ilQZU110esrEi4QgLFhJk6PnI1Dj6NBeVd0eQuWlV/AD/03RC56HPPOuP5FSt1I7
8b0RP3BbSlD+DjcNjeuTXJZIMAhY+Wtm+ZNyKbZE9ypVqPhJ6W5qnDIfIgH+1ymw
jky3WQt3zxf/KXUx8Uvl8vUPCiE9UJRvBtvsjjvmYOwCWqt9KiyaJmOYeJ4UghI7
9/FQnjewLj7P7OX7BTFQUBq5wyDHFl+ub2dN6SCSpZSyc24IF5ieiO/QtW3mGb2g
X0nZNxgdG5ap16k041Z3upJha8sCAwEAAaOCAqYwggKiMB0GA1UdDgQWBBTv07aW
k0MQ58YsSTVE4LxmqEO2aDAfBgNVHSMEGDAWgBRuJCLCp+PfB8zg0f0B0UbbVnjR
2zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2QzZFMzYvNjQ5NDcwQjA5QkEyMTFGMUJCM0E3RTBGQ0YxRDM4QjAvYmlRaXdx
Zmozd2ZNNE5IOUFkRkcyMVo0MGRzLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvYmlRaXdxZmozd2ZNNE5IOUFkRkcyMVo0MGRzLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QzZFMzYvNjQ5NDcwQjA5QkEyMTFGMUJCM0E3RTBGQ0Yx
RDM4QjAvQzUzNjYwQUNCMkQzMTFGMTlFRjZFN0I2Q0UxRDM4QjAucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACwPEyAwDQYJKoZIhvcNAQEL
BQADggEBAIioNRYnMTTBWLaJvnudok2wJNnoW5+l3j0sGSTawg/OsEQ+cyPIQivU
5IIn4uoYeAvvsebPnrcSlySq9RL3aI83aNP9psvOUzRmyWi/xdfJvxbUVBgA/59J
wFbCBiixbyldipCoINfkw/PvEVnTt4knL5e1y5iwG70xjkcSUdZobz00Zi5hPRRm
I+/CB3uhTYVjG0xpV3bqj9EQh3KyWzh6d3ob1SNPfpM10Zv5GQUaDOuJwMVg5yMk
WYFh3PQUfOanVsGNVfKdLRBaznjpG6cVNa1aexAcl4j36VQy8k56PVUpwA1am9Nx
LKyTeUqHwFuah727QrEnlPfVQvGtBSg=
-----END CERTIFICATE-----