Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36C6E36/649470B09BA211F1BB3A7E0FCF1D38B0/E2095C86B2D611F182DB22CBCE1D38B0.roa
File:                     E2095C86B2D611F182DB22CBCE1D38B0.roa (raw, json)
Hash identifier:          0QotgG4JTFYIzqDDSEaZjrPBe1AsQnW20uL0HP117RM=
Subject key identifier:   D1:E0:75:A9:34:9A:4B:42:ED:92:A7:F9:FA:67:35:1F:AE:05:2A:B4
Certificate issuer:       /CN=F36C6E36AF/serialNumber=6E2422C2A7E3DF07CCE0D1FD01D146DB5678D1DB
Certificate serial:       2C
Authority key identifier: 6E:24:22:C2:A7:E3:DF:07:CC:E0:D1:FD:01:D1:46:DB:56:78:D1:DB
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/biQiwqfj3wfM4NH9AdFG21Z40ds.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C6E36/649470B09BA211F1BB3A7E0FCF1D38B0/E2095C86B2D611F182DB22CBCE1D38B0.roa
Signing time:             Thu 17 Sep 2026 20:32:21 +0000
ROA not before:           Thu 17 Sep 2026 20:32:17 +0000
ROA not after:            Wed 31 Dec 2036 20:32:17 +0000
asID:                     329792
IP address blocks:        2c0f:1320:2001::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C6E36/649470B09BA211F1BB3A7E0FCF1D38B0/biQiwqfj3wfM4NH9AdFG21Z40ds.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C6E36/649470B09BA211F1BB3A7E0FCF1D38B0/biQiwqfj3wfM4NH9AdFG21Z40ds.mft
                          rsync://rpki.afrinic.net/repository/afrinic/biQiwqfj3wfM4NH9AdFG21Z40ds.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 20 Sep 2026 00:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 44 (0x2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C6E36AF, serialNumber=6E2422C2A7E3DF07CCE0D1FD01D146DB5678D1DB
        Validity
            Not Before: Sep 17 20:32:17 2026 GMT
            Not After : Dec 31 20:32:17 2036 GMT
        Subject: CN=6aac4e55-f6e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:bb:da:d3:f7:ab:d0:3f:03:f5:ba:b4:ab:70:
                    bb:ca:f7:73:76:09:43:4a:52:9d:a3:12:b4:7e:84:
                    2e:95:d1:97:00:c1:65:64:d8:64:54:3b:f9:b0:6a:
                    3a:01:59:7e:39:c3:27:fd:cc:80:10:43:42:25:7a:
                    f0:b2:6a:cc:10:9b:dd:8c:f7:9c:8d:4d:57:5b:6d:
                    27:a2:ab:58:c1:af:c6:89:4d:29:a9:3a:5a:be:57:
                    25:0a:72:c6:66:c4:90:4e:e3:a5:a4:7a:da:d0:04:
                    66:b8:8c:a2:7a:d8:4e:43:06:3c:21:df:a2:ca:31:
                    a7:06:d6:40:5f:62:61:48:25:22:5c:e2:e7:33:20:
                    c2:90:81:d6:29:26:f4:8b:8d:96:a9:a5:d7:5e:58:
                    ab:03:13:3c:c4:c2:3a:78:2f:82:9d:19:9a:27:c0:
                    0d:e5:f2:6a:61:a1:b6:b5:6d:b1:12:70:d0:21:af:
                    2d:91:64:f2:d9:6c:04:60:94:2a:a7:15:c7:82:31:
                    16:da:bc:b0:a1:9e:c7:a3:83:13:91:2f:d1:6a:14:
                    17:ac:44:50:74:52:b2:f5:6b:d6:b4:7d:38:3b:f1:
                    61:c4:b7:5b:9d:e6:54:04:cd:f9:16:f7:5b:aa:09:
                    45:85:98:88:c4:f8:da:1f:49:d4:a4:d5:3b:66:29:
                    92:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:E0:75:A9:34:9A:4B:42:ED:92:A7:F9:FA:67:35:1F:AE:05:2A:B4
            X509v3 Authority Key Identifier:
                keyid:6E:24:22:C2:A7:E3:DF:07:CC:E0:D1:FD:01:D1:46:DB:56:78:D1:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C6E36/649470B09BA211F1BB3A7E0FCF1D38B0/biQiwqfj3wfM4NH9AdFG21Z40ds.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/biQiwqfj3wfM4NH9AdFG21Z40ds.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C6E36/649470B09BA211F1BB3A7E0FCF1D38B0/E2095C86B2D611F182DB22CBCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:1320:2001::/48

    Signature Algorithm: sha256WithRSAEncryption
         d8:ad:3a:f6:8d:b8:63:04:9a:64:c8:63:e5:0c:77:ce:85:51:
         c2:53:63:6c:6c:51:5d:a0:51:35:37:9d:5b:e7:cb:b5:5c:cb:
         82:b1:2c:2e:13:4f:3d:70:0b:e5:4c:6e:65:c4:83:bd:01:a2:
         91:e3:38:b8:ab:73:ac:5d:ec:d1:7f:8b:b6:f8:f7:27:46:05:
         76:76:77:7f:ca:e9:e9:8c:17:e0:01:c2:fb:73:a8:fd:f5:db:
         dd:dd:d9:43:2e:02:0d:96:9d:f1:d1:b8:c2:2c:c1:6c:92:14:
         0f:1f:3d:9a:fc:03:96:b6:ed:85:26:0d:33:58:39:55:96:81:
         87:dd:a3:d8:0c:3e:ab:87:66:cb:ca:79:d7:6a:97:4f:e3:40:
         d1:a3:99:75:fa:f8:28:47:d2:d8:f9:dd:57:ea:13:bb:7c:8a:
         08:64:2e:23:33:16:a4:5b:0d:e6:c0:66:3f:43:80:fc:49:d7:
         2e:06:73:7a:57:e2:3b:13:f4:7d:0b:a9:4a:9b:98:b5:b6:3b:
         3b:42:1b:16:1b:59:98:f3:75:65:ba:0d:17:db:3c:8d:bf:e7:
         47:3d:98:a8:3d:b2:da:83:9b:47:73:9d:57:5c:5e:ef:cd:b2:
         14:2a:70:ca:ae:47:2b:c0:be:c9:73:f5:8b:6e:b9:34:98:e0:
         72:44:e3:bc
-----BEGIN CERTIFICATE-----
MIIFhTCCBG2gAwIBAgIBLDANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzZD
NkUzNkFGMTEwLwYDVQQFEyg2RTI0MjJDMkE3RTNERjA3Q0NFMEQxRkQwMUQxNDZE
QjU2NzhEMURCMB4XDTI2MDkxNzIwMzIxN1oXDTM2MTIzMTIwMzIxN1owGDEWMBQG
A1UEAxMNNmFhYzRlNTUtZjZlMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALG72tP3q9A/A/W6tKtwu8r3c3YJQ0pSnaMStH6ELpXRlwDBZWTYZFQ7+bBq
OgFZfjnDJ/3MgBBDQiV68LJqzBCb3Yz3nI1NV1ttJ6KrWMGvxolNKak6Wr5XJQpy
xmbEkE7jpaR62tAEZriMonrYTkMGPCHfosoxpwbWQF9iYUglIlzi5zMgwpCB1ikm
9IuNlqml115YqwMTPMTCOngvgp0ZmifADeXyamGhtrVtsRJw0CGvLZFk8tlsBGCU
KqcVx4IxFtq8sKGex6ODE5Ev0WoUF6xEUHRSsvVr1rR9ODvxYcS3W53mVATN+Rb3
W6oJRYWYiMT42h9J1KTVO2Ypkh0CAwEAAaOCAqgwggKkMB0GA1UdDgQWBBTR4HWp
NJpLQu2Sp/n6ZzUfrgUqtDAfBgNVHSMEGDAWgBRuJCLCp+PfB8zg0f0B0UbbVnjR
2zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2QzZFMzYvNjQ5NDcwQjA5QkEyMTFGMUJCM0E3RTBGQ0YxRDM4QjAvYmlRaXdx
Zmozd2ZNNE5IOUFkRkcyMVo0MGRzLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvYmlRaXdxZmozd2ZNNE5IOUFkRkcyMVo0MGRzLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QzZFMzYvNjQ5NDcwQjA5QkEyMTFGMUJCM0E3RTBGQ0Yx
RDM4QjAvRTIwOTVDODZCMkQ2MTFGMTgyREIyMkNCQ0UxRDM4QjAucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACwPEyAgATANBgkqhkiG9w0B
AQsFAAOCAQEA2K069o24YwSaZMhj5Qx3zoVRwlNjbGxRXaBRNTedW+fLtVzLgrEs
LhNPPXAL5UxuZcSDvQGikeM4uKtzrF3s0X+Ltvj3J0YFdnZ3f8rp6YwX4AHC+3Oo
/fXb3d3ZQy4CDZad8dG4wizBbJIUDx89mvwDlrbthSYNM1g5VZaBh92j2Aw+q4dm
y8p512qXT+NA0aOZdfr4KEfS2PndV+oTu3yKCGQuIzMWpFsN5sBmP0OA/EnXLgZz
elfiOxP0fQupSpuYtbY7O0IbFhtZmPN1ZboNF9s8jb/nRz2YqD2y2oObR3OdV1xe
782yFCpwyq5HK8C+yXP1i265NJjgckTjvA==
-----END CERTIFICATE-----