Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36FEA6B/7B27920E8B8211E9888B6F73F8AEA228/2C657F88958811F19565AA04CF1D38B0.roa
File:                     2C657F88958811F19565AA04CF1D38B0.roa (raw, json)
Hash identifier:          D87TM0giV+0DWOAmJ22pHAEcl9l7JcZYRoDDL9i+LNg=
Subject key identifier:   F9:09:F7:81:A1:3E:99:03:B3:3E:52:93:61:EA:37:BA:55:BF:0F:B7
Certificate issuer:       /CN=F36FEA6BAF/serialNumber=93C2C99AF0EC4D1A4643497F5F8CBDC7EC45748F
Certificate serial:       0AA1
Authority key identifier: 93:C2:C9:9A:F0:EC:4D:1A:46:43:49:7F:5F:8C:BD:C7:EC:45:74:8F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FEA6B/7B27920E8B8211E9888B6F73F8AEA228/2C657F88958811F19565AA04CF1D38B0.roa
Signing time:             Tue 11 Aug 2026 13:25:52 +0000
ROA not before:           Tue 11 Aug 2026 13:25:48 +0000
ROA not after:            Wed 13 Aug 2036 13:25:48 +0000
asID:                     0
IP address blocks:        196.60.0.0/24 maxlen: 24
                          196.60.48.0/24 maxlen: 24
                          196.60.50.0/24 maxlen: 24
                          196.60.52.0/24 maxlen: 24
                          196.223.5.0/24 maxlen: 24
                          196.223.6.0/24 maxlen: 24
                          2001:43f8::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FEA6B/7B27920E8B8211E9888B6F73F8AEA228/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FEA6B/7B27920E8B8211E9888B6F73F8AEA228/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 23 Aug 2026 00:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2721 (0xaa1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FEA6BAF, serialNumber=93C2C99AF0EC4D1A4643497F5F8CBDC7EC45748F
        Validity
            Not Before: Aug 11 13:25:48 2026 GMT
            Not After : Aug 13 13:25:48 2036 GMT
        Subject: CN=6a7b22e0-2013
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:07:af:11:21:6d:85:a1:4e:61:ed:b3:10:36:
                    74:f3:6d:98:93:7a:63:49:a0:3e:ed:75:87:2d:f7:
                    bf:f1:1e:9f:f0:51:bf:f6:31:ea:bf:bb:cf:ba:f1:
                    12:c4:0b:9f:60:90:ec:c9:eb:b3:45:26:b4:9a:42:
                    98:c0:0c:56:75:97:7e:f4:d1:8a:3b:fa:bb:19:18:
                    d8:db:e2:32:dc:c3:65:fe:fb:0d:b1:62:90:0a:83:
                    ce:5e:77:71:d5:d6:72:82:da:1f:79:82:d4:ff:1c:
                    b3:1b:90:ba:ac:26:28:6d:36:0d:3b:85:0e:98:44:
                    27:1f:06:4b:f9:55:ae:2d:07:89:5c:72:52:da:1d:
                    2a:98:69:2c:95:14:ee:17:71:1d:a2:b0:04:36:f9:
                    b9:03:61:6b:60:cc:40:c2:da:e5:89:fc:48:0f:81:
                    9c:56:19:7f:d7:18:56:e1:37:61:7e:39:d0:fb:5f:
                    9e:82:b6:f4:f4:84:6a:bf:94:00:77:bd:82:51:70:
                    da:17:d7:25:76:cc:34:13:7f:c7:f2:8d:61:fb:e9:
                    1b:da:cf:3f:6c:c4:6e:22:2b:5f:3c:37:90:d7:b0:
                    bc:5a:e5:9a:35:5f:d9:a6:d0:4c:a2:2f:91:50:8e:
                    a7:d6:c3:82:1f:33:e5:da:b5:9c:71:b8:10:6a:1f:
                    b3:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:09:F7:81:A1:3E:99:03:B3:3E:52:93:61:EA:37:BA:55:BF:0F:B7
            X509v3 Authority Key Identifier:
                keyid:93:C2:C9:9A:F0:EC:4D:1A:46:43:49:7F:5F:8C:BD:C7:EC:45:74:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FEA6B/7B27920E8B8211E9888B6F73F8AEA228/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FEA6B/7B27920E8B8211E9888B6F73F8AEA228/2C657F88958811F19565AA04CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.60.0.0/24
                  196.60.48.0/24
                  196.60.50.0/24
                  196.60.52.0/24
                  196.223.5.0-196.223.6.255
                IPv6:
                  2001:43f8::/48

    Signature Algorithm: sha256WithRSAEncryption
         a5:26:1f:c8:14:57:9c:bf:87:5e:77:fc:00:cf:c4:b8:50:92:
         86:13:5b:1a:bd:9d:8d:f7:e5:c9:76:3d:20:0b:10:b3:a4:33:
         7a:c9:70:72:40:fd:d5:2a:6e:eb:a0:90:4a:79:7d:b7:a6:a6:
         a1:0d:b0:ac:87:4e:a8:be:41:5f:dd:51:c9:06:9e:fa:f0:46:
         3d:cb:20:33:cc:a2:9c:6b:ac:b0:16:b2:c0:b6:06:c3:ff:51:
         9e:1e:d6:a2:7f:9f:e0:20:72:7c:41:0e:cb:a6:87:63:9d:91:
         61:ba:21:4a:f0:5d:a9:8b:13:b1:0b:e0:35:16:ae:26:ea:dc:
         35:e6:82:d0:59:fe:08:f3:8d:61:5f:c5:b2:17:d1:fe:8b:77:
         91:56:81:ed:48:01:e6:0e:f1:29:ae:cc:05:b3:3d:6a:1e:f3:
         31:56:6a:7d:03:18:4e:cf:99:7d:4c:74:2e:4d:ee:21:a6:4b:
         70:4d:cc:2e:01:a3:1d:53:ba:7d:c5:bf:49:52:c0:ce:1c:76:
         e4:1c:0a:46:16:12:99:72:55:1f:cb:c9:2e:68:b7:0c:6f:b8:
         c8:e7:20:ea:7f:82:fd:95:88:53:86:17:5f:03:d3:29:65:5f:
         2c:53:f3:e1:5e:19:02:3b:b8:1f:f0:3b:13:e5:03:48:66:44:
         db:98:b6:ea
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgICCqEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RkVBNkJBRjExMC8GA1UEBRMoOTNDMkM5OUFGMEVDNEQxQTQ2NDM0OTdGNUY4Q0JE
QzdFQzQ1NzQ4RjAeFw0yNjA4MTExMzI1NDhaFw0zNjA4MTMxMzI1NDhaMBgxFjAU
BgNVBAMTDTZhN2IyMmUwLTIwMTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC/B68RIW2FoU5h7bMQNnTzbZiTemNJoD7tdYct97/xHp/wUb/2Meq/u8+6
8RLEC59gkOzJ67NFJrSaQpjADFZ1l3700Yo7+rsZGNjb4jLcw2X++w2xYpAKg85e
d3HV1nKC2h95gtT/HLMbkLqsJihtNg07hQ6YRCcfBkv5Va4tB4lcclLaHSqYaSyV
FO4XcR2isAQ2+bkDYWtgzEDC2uWJ/EgPgZxWGX/XGFbhN2F+OdD7X56CtvT0hGq/
lAB3vYJRcNoX1yV2zDQTf8fyjWH76Rvazz9sxG4iK188N5DXsLxa5Zo1X9mm0Eyi
L5FQjqfWw4IfM+XatZxxuBBqH7N3AgMBAAGjggLWMIIC0jAdBgNVHQ4EFgQU+Qn3
gaE+mQOzPlKTYeo3ulW/D7cwHwYDVR0jBBgwFoAUk8LJmvDsTRpGQ0l/X4y9x+xF
dI8wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkZFQTZCLzdCMjc5MjBFOEI4MjExRTk4ODhCNkY3M0Y4QUVBMjI4L2s4TEpt
dkRzVFJwR1EwbF9YNHk5eC14RmRJOC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2s4TEptdkRzVFJwR1EwbF9YNHk5eC14RmRJOC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkZFQTZCLzdCMjc5MjBFOEI4MjExRTk4ODhCNkY3M0Y4
QUVBMjI4LzJDNjU3Rjg4OTU4ODExRjE5NTY1QUEwNENGMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwUAYIKwYBBQUHAQcBAf8EQTA/MCwEAgABMCYDBADEPAADBADEPDADBADEPDID
BADEPDQwDAMEAMTfBQMEAMTfBjAPBAIAAjAJAwcAIAFD+AAAMA0GCSqGSIb3DQEB
CwUAA4IBAQClJh/IFFecv4ded/wAz8S4UJKGE1savZ2N9+XJdj0gCxCzpDN6yXBy
QP3VKm7roJBKeX23pqahDbCsh06ovkFf3VHJBp768EY9yyAzzKKca6ywFrLAtgbD
/1GeHtaif5/gIHJ8QQ7LpodjnZFhuiFK8F2pixOxC+A1Fq4m6tw15oLQWf4I841h
X8WyF9H+i3eRVoHtSAHmDvEprswFsz1qHvMxVmp9AxhOz5l9THQuTe4hpktwTcwu
AaMdU7p9xb9JUsDOHHbkHApGFhKZclUfy8kuaLcMb7jI5yDqf4L9lYhThhdfA9Mp
ZV8sU/PhXhkCO7gf8DsT5QNIZkTbmLbq
-----END CERTIFICATE-----