Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36EBDD7/59907460BE1D11EB9A348B42F8AEA228/BC2736C68C1D11F1B9162CE2CE1D38B0.roa
File:                     BC2736C68C1D11F1B9162CE2CE1D38B0.roa (raw, json)
Hash identifier:          1PlQo8FzqujBW7LOnLXLqOyXp4HW9LnbXLI0V7zZNLY=
Subject key identifier:   DF:F9:E4:17:B5:6F:01:CD:AD:FC:F3:F1:9C:B2:FF:AC:7A:DB:5D:3A
Certificate issuer:       /CN=F36EBDD7AF/serialNumber=671762DF2F4B65E8350EF43DFE6E347765751B67
Certificate serial:       07A9
Authority key identifier: 67:17:62:DF:2F:4B:65:E8:35:0E:F4:3D:FE:6E:34:77:65:75:1B:67
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Zxdi3y9LZeg1DvQ9_m40d2V1G2c.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36EBDD7/59907460BE1D11EB9A348B42F8AEA228/BC2736C68C1D11F1B9162CE2CE1D38B0.roa
Signing time:             Thu 30 Jul 2026 13:51:17 +0000
ROA not before:           Thu 30 Jul 2026 13:51:13 +0000
ROA not after:            Wed 30 Jul 2036 13:51:13 +0000
asID:                     37349
IP address blocks:        196.200.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36EBDD7/59907460BE1D11EB9A348B42F8AEA228/Zxdi3y9LZeg1DvQ9_m40d2V1G2c.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36EBDD7/59907460BE1D11EB9A348B42F8AEA228/Zxdi3y9LZeg1DvQ9_m40d2V1G2c.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Zxdi3y9LZeg1DvQ9_m40d2V1G2c.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 12 Sep 2026 02:08:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1961 (0x7a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36EBDD7AF, serialNumber=671762DF2F4B65E8350EF43DFE6E347765751B67
        Validity
            Not Before: Jul 30 13:51:13 2026 GMT
            Not After : Jul 30 13:51:13 2036 GMT
        Subject: CN=6a6b56d5-4b0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:3b:11:ec:4a:6a:72:c2:c0:41:96:ba:2f:57:
                    6b:82:01:3a:51:40:63:e3:cf:b0:94:57:3e:64:d1:
                    aa:f0:98:b1:74:41:28:26:84:60:ca:3f:7e:83:18:
                    62:33:39:e5:ca:27:8e:f3:2e:c9:1d:43:28:bc:d1:
                    45:37:eb:fa:d0:5e:02:c1:b0:71:67:e7:70:05:63:
                    c7:ad:d1:75:ed:21:ce:0c:4e:d8:40:e5:da:bb:c3:
                    8e:4b:32:5a:9e:28:f8:9a:54:5c:b9:52:74:d2:7a:
                    db:ea:b7:e2:aa:6d:0e:02:e6:5e:bf:0e:a4:d3:c9:
                    31:35:81:65:8b:6f:ce:a2:6e:60:ec:67:a0:2a:8d:
                    a5:23:77:e9:c3:d7:7e:4d:fb:ac:2e:26:3d:fe:83:
                    0c:f4:99:b4:81:b0:dd:22:c8:8f:35:43:5b:27:fa:
                    3b:78:45:3b:da:c5:e1:53:3e:6a:43:8a:c9:73:fc:
                    95:9d:5d:60:70:d5:03:68:75:64:ea:57:d9:62:72:
                    48:94:42:5c:44:7f:63:06:e6:fe:04:47:23:0f:2a:
                    5b:f5:3f:b3:c2:ed:9d:21:56:bb:70:00:2e:e6:a4:
                    79:72:8d:bf:6e:89:35:aa:7e:5e:c0:bb:3c:32:6c:
                    cf:6a:b2:b4:9e:41:d8:28:c6:50:65:33:1a:bf:21:
                    60:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:F9:E4:17:B5:6F:01:CD:AD:FC:F3:F1:9C:B2:FF:AC:7A:DB:5D:3A
            X509v3 Authority Key Identifier:
                keyid:67:17:62:DF:2F:4B:65:E8:35:0E:F4:3D:FE:6E:34:77:65:75:1B:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36EBDD7/59907460BE1D11EB9A348B42F8AEA228/Zxdi3y9LZeg1DvQ9_m40d2V1G2c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Zxdi3y9LZeg1DvQ9_m40d2V1G2c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EBDD7/59907460BE1D11EB9A348B42F8AEA228/BC2736C68C1D11F1B9162CE2CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.200.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         9f:f7:41:39:6c:f8:ce:03:6f:3b:5b:4b:cf:82:fe:d8:9c:76:
         97:22:83:72:e0:e2:a1:0c:93:03:be:35:3f:80:b5:3b:07:4c:
         24:69:6a:75:ee:d0:9f:4c:c0:b5:ed:f9:01:18:f5:e3:e1:36:
         23:82:97:1a:35:e2:fd:68:cd:ba:79:f8:75:23:4e:a8:68:7e:
         3a:14:35:ff:40:6f:7e:58:e7:9d:12:0e:99:8b:cc:11:93:28:
         ec:68:9b:96:a8:6e:f9:da:38:26:77:6b:e9:78:5f:6b:64:c5:
         3b:26:29:8d:0d:58:39:9d:91:57:23:4c:c7:47:06:4d:c0:01:
         dd:aa:1e:0a:ff:d7:8e:86:86:b1:3c:5c:f5:a9:e2:c3:71:5c:
         e4:58:a3:17:04:47:3f:a9:ca:de:18:c5:ea:f3:ea:cd:18:eb:
         87:e3:7f:26:bb:e9:67:9a:43:26:0f:1d:79:d3:00:da:9d:1f:
         2a:6e:a0:58:b8:53:08:1c:86:fe:60:ca:8c:ec:08:54:61:fc:
         4a:12:3b:de:c9:34:f7:e4:ff:d1:0e:e1:fa:5c:60:fd:91:b7:
         cf:8d:c8:73:e6:69:39:33:83:6f:a7:06:2b:52:e8:64:ac:33:
         2d:6a:fe:6d:3d:2f:68:f2:fb:50:88:de:ce:88:d5:28:e7:d3:
         1d:34:0e:7f
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICB6kwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RUJERDdBRjExMC8GA1UEBRMoNjcxNzYyREYyRjRCNjVFODM1MEVGNDNERkU2RTM0
Nzc2NTc1MUI2NzAeFw0yNjA3MzAxMzUxMTNaFw0zNjA3MzAxMzUxMTNaMBgxFjAU
BgNVBAMTDTZhNmI1NmQ1LTRiMGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCoOxHsSmpywsBBlrovV2uCATpRQGPjz7CUVz5k0arwmLF0QSgmhGDKP36D
GGIzOeXKJ47zLskdQyi80UU36/rQXgLBsHFn53AFY8et0XXtIc4MTthA5dq7w45L
MlqeKPiaVFy5UnTSetvqt+KqbQ4C5l6/DqTTyTE1gWWLb86ibmDsZ6AqjaUjd+nD
135N+6wuJj3+gwz0mbSBsN0iyI81Q1sn+jt4RTvaxeFTPmpDislz/JWdXWBw1QNo
dWTqV9lickiUQlxEf2MG5v4ERyMPKlv1P7PC7Z0hVrtwAC7mpHlyjb9uiTWqfl7A
uzwybM9qsrSeQdgoxlBlMxq/IWDdAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU3/nk
F7VvAc2t/PPxnLL/rHrbXTowHwYDVR0jBBgwFoAUZxdi3y9LZeg1DvQ9/m40d2V1
G2cwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkVCREQ3LzU5OTA3NDYwQkUxRDExRUI5QTM0OEI0MkY4QUVBMjI4L1p4ZGkz
eTlMWmVnMUR2UTlfbTQwZDJWMUcyYy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1p4ZGkzeTlMWmVnMUR2UTlfbTQwZDJWMUcyYy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkVCREQ3LzU5OTA3NDYwQkUxRDExRUI5QTM0OEI0MkY4
QUVBMjI4L0JDMjczNkM2OEMxRDExRjFCOTE2MkNFMkNFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBATEyOAwDQYJKoZIhvcNAQEL
BQADggEBAJ/3QTls+M4DbztbS8+C/ticdpcig3Lg4qEMkwO+NT+AtTsHTCRpanXu
0J9MwLXt+QEY9ePhNiOClxo14v1ozbp5+HUjTqhofjoUNf9Ab35Y550SDpmLzBGT
KOxom5aobvnaOCZ3a+l4X2tkxTsmKY0NWDmdkVcjTMdHBk3AAd2qHgr/146GhrE8
XPWp4sNxXORYoxcERz+pyt4Yxerz6s0Y64fjfya76WeaQyYPHXnTANqdHypuoFi4
Uwgchv5gyozsCFRh/EoSO97JNPfk/9EO4fpcYP2Rt8+NyHPmaTkzg2+nBitS6GSs
My1q/m09L2jy+1CI3s6I1Sjn0x00Dn8=
-----END CERTIFICATE-----