Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363A203/353A12F40F3C11F1B55D76B5DAE4EC9C/FD7685AE0F3C11F1AE437FBBDAE4EC9C.roa
File:                     FD7685AE0F3C11F1AE437FBBDAE4EC9C.roa (raw, json)
Hash identifier:          DsgvYl/9xFquoIAVZuTIGhxVayNA81ChOAyEAjkTsiQ=
Subject key identifier:   2F:B0:AA:4B:00:E2:31:0E:27:1D:DC:5E:7C:C1:61:1F:AB:6C:6F:C4
Certificate issuer:       /CN=F363A203AF/serialNumber=266D494DC335DA214A4FB0F67A9851EC9E30BB6B
Certificate serial:       04
Authority key identifier: 26:6D:49:4D:C3:35:DA:21:4A:4F:B0:F6:7A:98:51:EC:9E:30:BB:6B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Jm1JTcM12iFKT7D2ephR7J4wu2s.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363A203/353A12F40F3C11F1B55D76B5DAE4EC9C/FD7685AE0F3C11F1AE437FBBDAE4EC9C.roa
Signing time:             Sat 21 Feb 2026 15:50:05 +0000
ROA not before:           Sat 21 Feb 2026 15:50:01 +0000
ROA not after:            Thu 21 Feb 2036 15:50:01 +0000
asID:                     329703
IP address blocks:        2c0f:6a0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363A203/353A12F40F3C11F1B55D76B5DAE4EC9C/Jm1JTcM12iFKT7D2ephR7J4wu2s.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363A203/353A12F40F3C11F1B55D76B5DAE4EC9C/Jm1JTcM12iFKT7D2ephR7J4wu2s.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Jm1JTcM12iFKT7D2ephR7J4wu2s.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Mar 2026 03:42:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363A203AF, serialNumber=266D494DC335DA214A4FB0F67A9851EC9E30BB6B
        Validity
            Not Before: Feb 21 15:50:01 2026 GMT
            Not After : Feb 21 15:50:01 2036 GMT
        Subject: CN=6999d42d-49cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:bb:73:93:21:b1:73:bd:c4:94:41:09:75:23:
                    e5:74:8f:ac:96:9e:29:b6:b3:2e:58:4b:90:2c:81:
                    45:ba:14:4c:14:e5:3a:f2:be:3c:30:fb:e0:19:6d:
                    52:65:0b:aa:54:6b:89:37:bb:6a:fa:83:67:99:77:
                    1d:d7:e7:ae:cf:0f:4e:86:06:05:4f:c2:23:88:0e:
                    9e:e9:6e:b4:45:29:32:1c:6e:bc:d9:92:b3:79:99:
                    51:70:4a:89:0e:b3:37:ad:c0:fb:93:6f:e8:fd:4d:
                    60:f5:2e:12:15:88:83:0e:57:87:5c:3a:92:35:07:
                    4c:29:b0:f6:b1:6e:a9:08:88:6f:76:fa:48:78:a2:
                    67:4e:20:72:1d:e2:02:77:91:fe:e6:d7:a0:45:91:
                    c2:aa:cb:9f:79:9b:b1:9b:1d:2e:cb:97:11:1e:d9:
                    1b:57:ba:8f:e9:74:ae:86:79:8a:5d:0a:41:f4:ca:
                    da:c0:26:cb:a8:91:1c:9b:34:54:a8:5c:30:d7:c5:
                    cd:d2:28:3c:34:ab:65:2c:62:74:da:81:25:26:d5:
                    42:ff:08:2c:a3:b6:73:b3:0a:56:c9:74:33:d0:5a:
                    0a:87:71:a8:78:42:cc:ad:65:8f:79:ba:c9:88:93:
                    ff:1a:ef:51:ca:33:ff:62:0f:a4:e6:61:2c:55:6f:
                    b7:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:B0:AA:4B:00:E2:31:0E:27:1D:DC:5E:7C:C1:61:1F:AB:6C:6F:C4
            X509v3 Authority Key Identifier:
                keyid:26:6D:49:4D:C3:35:DA:21:4A:4F:B0:F6:7A:98:51:EC:9E:30:BB:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363A203/353A12F40F3C11F1B55D76B5DAE4EC9C/Jm1JTcM12iFKT7D2ephR7J4wu2s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Jm1JTcM12iFKT7D2ephR7J4wu2s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363A203/353A12F40F3C11F1B55D76B5DAE4EC9C/FD7685AE0F3C11F1AE437FBBDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:6a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         a8:ed:44:19:f7:07:b7:c6:55:6c:ee:91:07:5d:37:2b:04:00:
         97:38:59:3b:9e:7a:50:ab:81:38:3e:82:b1:a4:9e:bb:44:3c:
         c0:e1:db:03:82:ff:69:07:c8:40:00:01:c8:dc:f9:e5:32:66:
         f3:47:a8:f5:26:0f:39:a8:25:bd:29:98:60:1a:97:60:be:27:
         83:a7:9e:fa:33:a1:e1:81:60:66:14:4f:99:26:55:85:17:68:
         f5:38:44:c2:9e:90:c6:81:99:86:e3:f8:07:27:5c:ea:cf:ec:
         64:1f:38:a6:55:73:f4:8e:00:76:da:43:18:cc:be:e9:5c:41:
         b1:5b:8f:28:d1:75:d8:8a:5c:2b:71:2c:ff:f9:93:ed:c1:5c:
         6e:3a:a8:57:5e:7e:ca:14:2f:fc:e4:74:bd:ec:25:ae:52:1d:
         65:c1:0e:9c:ce:34:1e:3a:32:e3:15:1f:6b:be:89:05:41:23:
         63:5d:ab:c6:a4:b6:50:78:dc:14:43:cf:dd:d2:d0:56:9c:be:
         6d:7e:af:0d:f3:92:fc:6e:46:28:d6:45:5f:ab:05:f6:11:0a:
         45:f8:1d:76:b5:a7:32:40:14:b8:26:57:bd:03:19:89:11:76:
         f8:d2:6c:5f:da:16:05:5e:e0:4f:6f:28:33:14:7f:0e:f9:cb:
         23:fa:4a:24
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBBDANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzYz
QTIwM0FGMTEwLwYDVQQFEygyNjZENDk0REMzMzVEQTIxNEE0RkIwRjY3QTk4NTFF
QzlFMzBCQjZCMB4XDTI2MDIyMTE1NTAwMVoXDTM2MDIyMTE1NTAwMVowGDEWMBQG
A1UEAxMNNjk5OWQ0MmQtNDljZDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALa7c5MhsXO9xJRBCXUj5XSPrJaeKbazLlhLkCyBRboUTBTlOvK+PDD74Blt
UmULqlRriTe7avqDZ5l3Hdfnrs8PToYGBU/CI4gOnulutEUpMhxuvNmSs3mZUXBK
iQ6zN63A+5Nv6P1NYPUuEhWIgw5Xh1w6kjUHTCmw9rFuqQiIb3b6SHiiZ04gch3i
AneR/ubXoEWRwqrLn3mbsZsdLsuXER7ZG1e6j+l0roZ5il0KQfTK2sAmy6iRHJs0
VKhcMNfFzdIoPDSrZSxidNqBJSbVQv8ILKO2c7MKVsl0M9BaCodxqHhCzK1lj3m6
yYiT/xrvUcoz/2IPpOZhLFVvt6UCAwEAAaOCAqYwggKiMB0GA1UdDgQWBBQvsKpL
AOIxDicd3F58wWEfq2xvxDAfBgNVHSMEGDAWgBQmbUlNwzXaIUpPsPZ6mFHsnjC7
azAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2M0EyMDMvMzUzQTEyRjQwRjNDMTFGMUI1NUQ3NkI1REFFNEVDOUMvSm0xSlRj
TTEyaUZLVDdEMmVwaFI3SjR3dTJzLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvSm0xSlRjTTEyaUZLVDdEMmVwaFI3SjR3dTJzLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2M0EyMDMvMzUzQTEyRjQwRjNDMTFGMUI1NUQ3NkI1REFF
NEVDOUMvRkQ3Njg1QUUwRjNDMTFGMUFFNDM3RkJCREFFNEVDOUMucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACwPBqAwDQYJKoZIhvcNAQEL
BQADggEBAKjtRBn3B7fGVWzukQddNysEAJc4WTueelCrgTg+grGknrtEPMDh2wOC
/2kHyEAAAcjc+eUyZvNHqPUmDzmoJb0pmGAal2C+J4OnnvozoeGBYGYUT5kmVYUX
aPU4RMKekMaBmYbj+AcnXOrP7GQfOKZVc/SOAHbaQxjMvulcQbFbjyjRddiKXCtx
LP/5k+3BXG46qFdefsoUL/zkdL3sJa5SHWXBDpzONB46MuMVH2u+iQVBI2Ndq8ak
tlB43BRDz93S0Facvm1+rw3zkvxuRijWRV+rBfYRCkX4HXa1pzJAFLgmV70DGYkR
dvjSbF/aFgVe4E9vKDMUfw75yyP6SiQ=
-----END CERTIFICATE-----