Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36F3383/263C9DE2B8C611F1854C24FDCE1D38B0/28630CB2C24111F1B3174CD8CE1D38B0.roa
File:                     28630CB2C24111F1B3174CD8CE1D38B0.roa (raw, json)
Hash identifier:          EgR9lrpz6yE2pJ40k4By5GVkmXaaQaJpw9UuVJJ6tYw=
Subject key identifier:   D8:EB:C3:3D:2B:22:D5:27:00:FE:0B:C6:CA:30:54:94:04:C6:48:9E
Certificate issuer:       /CN=F36F3383AF/serialNumber=898B866259C952B0E9A5C19E41189FCBAC76BC83
Certificate serial:       1B
Authority key identifier: 89:8B:86:62:59:C9:52:B0:E9:A5:C1:9E:41:18:9F:CB:AC:76:BC:83
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/iYuGYlnJUrDppcGeQRify6x2vIM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F3383/263C9DE2B8C611F1854C24FDCE1D38B0/28630CB2C24111F1B3174CD8CE1D38B0.roa
Signing time:             Wed 07 Oct 2026 11:20:53 +0000
ROA not before:           Wed 07 Oct 2026 11:20:49 +0000
ROA not after:            Tue 07 Oct 2036 11:20:49 +0000
asID:                     37136
IP address blocks:        41.138.88.0/22 maxlen: 22
                          41.138.88.0/23 maxlen: 23
                          41.138.88.0/24 maxlen: 24
                          41.138.89.0/24 maxlen: 24
                          41.138.90.0/23 maxlen: 23
                          41.138.90.0/24 maxlen: 24
                          41.138.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F3383/263C9DE2B8C611F1854C24FDCE1D38B0/iYuGYlnJUrDppcGeQRify6x2vIM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F3383/263C9DE2B8C611F1854C24FDCE1D38B0/iYuGYlnJUrDppcGeQRify6x2vIM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/iYuGYlnJUrDppcGeQRify6x2vIM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 28 Oct 2026 05:52:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27 (0x1b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F3383AF, serialNumber=898B866259C952B0E9A5C19E41189FCBAC76BC83
        Validity
            Not Before: Oct  7 11:20:49 2026 GMT
            Not After : Oct  7 11:20:49 2036 GMT
        Subject: CN=6ac62b15-d7cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:ea:cc:e9:71:52:4c:e7:12:eb:6f:89:d1:1b:
                    82:57:86:85:f1:0c:8b:f7:23:37:4d:95:27:1b:e2:
                    1a:e6:dd:16:e6:c4:1f:9a:95:3d:1a:2e:28:a0:5e:
                    bb:4b:98:bd:ec:21:2c:9b:53:4f:19:88:b1:a2:4f:
                    61:4e:70:e9:25:e8:f9:01:5b:20:a5:5b:97:91:60:
                    73:45:9b:47:42:b9:fc:8a:88:0e:30:fd:cb:a2:08:
                    ae:97:90:8d:fb:4f:bc:c3:20:8c:e9:30:04:4a:52:
                    ca:0a:47:78:52:ae:6d:fe:36:c9:33:0c:ac:e2:69:
                    de:21:62:b9:1f:af:a1:32:84:64:57:b7:e6:3d:e5:
                    44:16:43:cb:2a:14:88:68:e6:c4:ae:92:6f:c6:ea:
                    6e:f0:07:5e:e6:6d:56:43:bb:01:38:9b:e0:5f:15:
                    a6:f8:e8:07:cc:6e:32:62:08:2d:cd:d0:05:47:54:
                    e7:5e:6b:74:91:81:23:13:53:23:d4:04:05:39:86:
                    07:a7:cb:ea:a3:6e:7f:93:82:5b:53:5f:13:e3:f7:
                    ef:4e:b8:c6:59:de:89:3d:13:f1:14:fd:86:29:a3:
                    e0:f3:83:63:9b:e0:81:d0:a0:91:6d:4e:be:82:aa:
                    80:f8:60:3f:8e:22:55:ee:a1:d4:14:fc:5b:f5:da:
                    18:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:EB:C3:3D:2B:22:D5:27:00:FE:0B:C6:CA:30:54:94:04:C6:48:9E
            X509v3 Authority Key Identifier:
                keyid:89:8B:86:62:59:C9:52:B0:E9:A5:C1:9E:41:18:9F:CB:AC:76:BC:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F3383/263C9DE2B8C611F1854C24FDCE1D38B0/iYuGYlnJUrDppcGeQRify6x2vIM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/iYuGYlnJUrDppcGeQRify6x2vIM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F3383/263C9DE2B8C611F1854C24FDCE1D38B0/28630CB2C24111F1B3174CD8CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.138.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         52:21:39:1c:85:ad:9c:98:86:df:ca:38:d5:dc:ba:62:0b:2d:
         0d:e2:1d:43:af:09:3e:60:2c:50:14:f2:14:3d:63:2b:20:b2:
         10:13:d3:98:7c:c4:7c:7a:e6:73:af:c8:83:fe:13:75:bf:bc:
         44:e9:b7:2f:cf:b8:ea:5c:1f:b1:2d:ff:15:47:1f:8f:d4:9c:
         b3:98:54:35:6b:39:ba:19:df:00:0c:97:9c:2c:3a:f6:99:c3:
         6c:d6:43:cc:bc:2c:13:ee:72:a0:d6:de:96:d2:99:1d:60:fd:
         3a:e6:9d:04:0f:a5:f8:25:68:e2:4b:4e:46:ad:13:a0:1c:7c:
         a7:59:c8:0a:49:a2:4f:b8:09:ed:cd:88:61:53:d0:2d:95:73:
         89:45:d2:80:20:01:98:1c:24:31:f6:cd:fd:f3:2a:26:a2:cf:
         bb:3a:bc:f8:51:6f:46:4b:03:c8:cb:5b:26:b6:2d:aa:c5:99:
         7b:a2:10:29:ac:42:91:28:a0:82:f8:f5:e1:e8:c5:4e:4f:f3:
         35:08:15:23:fb:17:dc:4d:ac:14:52:45:83:12:38:be:bd:78:
         7c:71:2b:ae:d6:01:3f:5d:1c:c3:dd:0a:0a:d0:4d:84:f8:c3:
         bf:18:32:0e:20:fb:9a:78:fd:94:d2:fd:81:db:bf:22:18:7a:
         e2:8c:eb:31
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBGzANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzZG
MzM4M0FGMTEwLwYDVQQFEyg4OThCODY2MjU5Qzk1MkIwRTlBNUMxOUU0MTE4OUZD
QkFDNzZCQzgzMB4XDTI2MTAwNzExMjA0OVoXDTM2MTAwNzExMjA0OVowGDEWMBQG
A1UEAxMNNmFjNjJiMTUtZDdjYzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANvqzOlxUkznEutvidEbgleGhfEMi/cjN02VJxviGubdFubEH5qVPRouKKBe
u0uYvewhLJtTTxmIsaJPYU5w6SXo+QFbIKVbl5Fgc0WbR0K5/IqIDjD9y6IIrpeQ
jftPvMMgjOkwBEpSygpHeFKubf42yTMMrOJp3iFiuR+voTKEZFe35j3lRBZDyyoU
iGjmxK6Sb8bqbvAHXuZtVkO7ATib4F8VpvjoB8xuMmIILc3QBUdU515rdJGBIxNT
I9QEBTmGB6fL6qNuf5OCW1NfE+P37064xlneiT0T8RT9himj4PODY5vggdCgkW1O
voKqgPhgP44iVe6h1BT8W/XaGB0CAwEAAaOCAqUwggKhMB0GA1UdDgQWBBTY68M9
KyLVJwD+C8bKMFSUBMZInjAfBgNVHSMEGDAWgBSJi4ZiWclSsOmlwZ5BGJ/LrHa8
gzAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2RjMzODMvMjYzQzlERTJCOEM2MTFGMTg1NEMyNEZEQ0UxRDM4QjAvaVl1R1ls
bkpVckRwcGNHZVFSaWZ5NngydklNLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvaVl1R1lsbkpVckRwcGNHZVFSaWZ5NngydklNLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RjMzODMvMjYzQzlERTJCOEM2MTFGMTg1NEMyNEZEQ0Ux
RDM4QjAvMjg2MzBDQjJDMjQxMTFGMUIzMTc0Q0Q4Q0UxRDM4QjAucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAimKWDANBgkqhkiG9w0BAQsF
AAOCAQEAUiE5HIWtnJiG38o41dy6YgstDeIdQ68JPmAsUBTyFD1jKyCyEBPTmHzE
fHrmc6/Ig/4Tdb+8ROm3L8+46lwfsS3/FUcfj9Scs5hUNWs5uhnfAAyXnCw69pnD
bNZDzLwsE+5yoNbeltKZHWD9OuadBA+l+CVo4ktORq0ToBx8p1nICkmiT7gJ7c2I
YVPQLZVziUXSgCABmBwkMfbN/fMqJqLPuzq8+FFvRksDyMtbJrYtqsWZe6IQKaxC
kSiggvj14ejFTk/zNQgVI/sX3E2sFFJFgxI4vr14fHErrtYBP10cw90KCtBNhPjD
vxgyDiD7mnj9lNL9gdu/Ihh64ozrMQ==
-----END CERTIFICATE-----