Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F364386B/58D5B756EE0511EC98EDA389F1222468/D34D76AAA39011F1B63C8FE3CE1D38B0.roa
File:                     D34D76AAA39011F1B63C8FE3CE1D38B0.roa (raw, json)
Hash identifier:          fnJY6qM/XgZeiDqjF9qeQjNp6VvA4rCuICciFhfFGCg=
Subject key identifier:   9D:DE:56:31:5F:21:B5:5C:BA:A2:8B:45:AC:6F:71:F3:70:5D:53:40
Certificate issuer:       /CN=F364386BAF/serialNumber=211E5B988632F53D4CC1220CE2930FED82D04C9C
Certificate serial:       0641
Authority key identifier: 21:1E:5B:98:86:32:F5:3D:4C:C1:22:0C:E2:93:0F:ED:82:D0:4C:9C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/IR5bmIYy9T1MwSIM4pMP7YLQTJw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364386B/58D5B756EE0511EC98EDA389F1222468/D34D76AAA39011F1B63C8FE3CE1D38B0.roa
Signing time:             Sat 29 Aug 2026 10:03:04 +0000
ROA not before:           Sat 29 Aug 2026 10:03:00 +0000
ROA not after:            Fri 31 Aug 2046 10:03:00 +0000
asID:                     36930
IP address blocks:        41.222.176.0/21 maxlen: 24
                          154.74.0.0/15 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364386B/58D5B756EE0511EC98EDA389F1222468/IR5bmIYy9T1MwSIM4pMP7YLQTJw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364386B/58D5B756EE0511EC98EDA389F1222468/IR5bmIYy9T1MwSIM4pMP7YLQTJw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/IR5bmIYy9T1MwSIM4pMP7YLQTJw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 02:46:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1601 (0x641)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364386BAF, serialNumber=211E5B988632F53D4CC1220CE2930FED82D04C9C
        Validity
            Not Before: Aug 29 10:03:00 2026 GMT
            Not After : Aug 31 10:03:00 2046 GMT
        Subject: CN=6a92ae58-6a21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:26:66:36:77:d3:a2:00:43:83:dc:99:3c:88:
                    ee:c2:bb:49:e4:65:2c:84:7b:94:0d:53:0c:09:d4:
                    77:e0:74:c7:84:1b:f3:23:6c:6b:b1:a5:3b:8b:20:
                    a0:4a:6f:64:ce:ec:5e:7f:a7:04:28:6f:73:2c:db:
                    98:cf:61:9c:61:2f:9d:e7:f1:45:58:15:67:f7:a5:
                    cf:56:70:9a:23:01:ef:92:ec:69:b6:f2:da:2f:ce:
                    a1:a4:57:8c:7a:e2:c9:bd:77:fe:0f:4d:f3:ea:dd:
                    d1:98:89:1a:fd:93:98:01:db:13:28:4b:6d:43:7a:
                    9a:7d:4c:77:ec:2b:26:37:47:3f:36:45:0a:35:65:
                    9c:51:b8:2b:23:47:ca:ae:aa:9f:5e:9a:f3:c1:0d:
                    c3:ca:a5:f1:71:ef:57:83:3b:cb:c9:1e:89:88:0f:
                    89:15:e1:a2:6a:4c:39:67:fd:a8:86:41:73:49:05:
                    c4:35:48:e6:6c:52:53:05:91:52:e0:8a:03:93:da:
                    82:c2:a0:54:df:6f:a3:31:e8:18:b6:c9:df:f4:31:
                    29:a6:80:a0:e2:cc:d9:0b:61:97:e7:b7:88:71:1e:
                    93:1f:b2:03:c2:1f:8e:2d:75:08:05:2b:9b:a3:7d:
                    78:af:1a:ad:b7:97:58:35:1c:4d:3b:20:ba:70:4b:
                    f3:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:DE:56:31:5F:21:B5:5C:BA:A2:8B:45:AC:6F:71:F3:70:5D:53:40
            X509v3 Authority Key Identifier:
                keyid:21:1E:5B:98:86:32:F5:3D:4C:C1:22:0C:E2:93:0F:ED:82:D0:4C:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364386B/58D5B756EE0511EC98EDA389F1222468/IR5bmIYy9T1MwSIM4pMP7YLQTJw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/IR5bmIYy9T1MwSIM4pMP7YLQTJw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364386B/58D5B756EE0511EC98EDA389F1222468/D34D76AAA39011F1B63C8FE3CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.222.176.0/21
                  154.74.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         00:ea:31:92:98:cd:e7:56:23:c0:d7:6a:cc:9a:01:9b:9a:1f:
         0f:6d:dc:be:a3:cb:d1:34:e9:0b:e3:a8:07:79:c1:d2:09:d2:
         2b:a1:f0:5e:5b:22:b3:be:06:26:d6:70:13:42:11:79:ba:42:
         d6:9a:7d:1c:94:31:93:a4:6c:7b:61:ff:39:c3:d3:c6:a0:a3:
         17:8c:34:8e:06:eb:f4:57:bf:16:6c:a4:a0:00:03:d4:20:64:
         55:01:9f:e2:83:00:36:0c:d0:82:32:7a:5e:e3:72:92:b2:b6:
         e3:96:bd:d5:ed:2a:91:97:f5:0c:20:d5:3d:d7:0d:fe:85:df:
         89:55:09:ff:a5:1a:d1:cb:5c:d1:fe:ee:e4:b4:ec:fc:4b:c3:
         6a:f3:0f:f7:5a:0a:ab:ed:d6:c2:26:62:31:e2:2c:73:f9:4f:
         e7:08:1c:bc:5b:eb:2a:b3:ea:92:e0:68:ec:df:f6:d0:a1:aa:
         9b:92:c0:34:2e:47:bd:6a:aa:45:22:3c:8c:6c:0b:76:17:68:
         93:b9:1d:3b:ea:4d:f5:1b:a5:29:48:e2:96:30:35:84:83:c8:
         83:e0:58:23:5b:a3:80:53:7d:a3:f4:60:e0:d8:88:53:5d:d2:
         e8:2a:ab:bd:e8:10:24:9c:c3:8a:62:f0:a8:95:95:5b:a7:ef:
         1a:6a:8d:e9
-----BEGIN CERTIFICATE-----
MIIFiDCCBHCgAwIBAgICBkEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NDM4NkJBRjExMC8GA1UEBRMoMjExRTVCOTg4NjMyRjUzRDRDQzEyMjBDRTI5MzBG
RUQ4MkQwNEM5QzAeFw0yNjA4MjkxMDAzMDBaFw00NjA4MzExMDAzMDBaMBgxFjAU
BgNVBAMTDTZhOTJhZTU4LTZhMjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDCJmY2d9OiAEOD3Jk8iO7Cu0nkZSyEe5QNUwwJ1HfgdMeEG/MjbGuxpTuL
IKBKb2TO7F5/pwQob3Ms25jPYZxhL53n8UVYFWf3pc9WcJojAe+S7Gm28tovzqGk
V4x64sm9d/4PTfPq3dGYiRr9k5gB2xMoS21Depp9THfsKyY3Rz82RQo1ZZxRuCsj
R8quqp9emvPBDcPKpfFx71eDO8vJHomID4kV4aJqTDln/aiGQXNJBcQ1SOZsUlMF
kVLgigOT2oLCoFTfb6Mx6Bi2yd/0MSmmgKDizNkLYZfnt4hxHpMfsgPCH44tdQgF
K5ujfXivGq23l1g1HE07ILpwS/PZAgMBAAGjggKqMIICpjAdBgNVHQ4EFgQUnd5W
MV8htVy6ootFrG9x83BdU0AwHwYDVR0jBBgwFoAUIR5bmIYy9T1MwSIM4pMP7YLQ
TJwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjQzODZCLzU4RDVCNzU2RUUwNTExRUM5OEVEQTM4OUYxMjIyNDY4L0lSNWJt
SVl5OVQxTXdTSU00cE1QN1lMUVRKdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0lSNWJtSVl5OVQxTXdTSU00cE1QN1lMUVRKdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjQzODZCLzU4RDVCNzU2RUUwNTExRUM5OEVEQTM4OUYx
MjIyNDY4L0QzNEQ3NkFBQTM5MDExRjFCNjNDOEZFM0NFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwJAYIKwYBBQUHAQcBAf8EFTATMBEEAgABMAsDBAMp3rADAwGaSjANBgkqhkiG
9w0BAQsFAAOCAQEAAOoxkpjN51YjwNdqzJoBm5ofD23cvqPL0TTpC+OoB3nB0gnS
K6HwXlsis74GJtZwE0IRebpC1pp9HJQxk6Rse2H/OcPTxqCjF4w0jgbr9Fe/Fmyk
oAAD1CBkVQGf4oMANgzQgjJ6XuNykrK245a91e0qkZf1DCDVPdcN/oXfiVUJ/6Ua
0ctc0f7u5LTs/EvDavMP91oKq+3WwiZiMeIsc/lP5wgcvFvrKrPqkuBo7N/20KGq
m5LANC5HvWqqRSI8jGwLdhdok7kdO+pN9RulKUjiljA1hIPIg+BYI1ujgFN9o/Rg
4NiIU13S6CqrvegQJJzDimLwqJWVW6fvGmqN6Q==
-----END CERTIFICATE-----