Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F365BBDA/0C3AA9B073DF11F1931D9EB6CE1D38B0/763AA698B2B011F1A0A5E9E8CE1D38B0.roa
File:                     763AA698B2B011F1A0A5E9E8CE1D38B0.roa (raw, json)
Hash identifier:          f1EzEvOJM51WdQleA7NLcVBr5xI58ejbgvs5g3oD3t0=
Subject key identifier:   9B:DD:4B:B7:96:2D:E6:93:4D:B5:6D:91:51:F1:36:56:25:A3:2D:AA
Certificate issuer:       /CN=F365BBDAAF/serialNumber=2B9374F53672AE4C133CDBB6FBC61951819D32B4
Certificate serial:       5A
Authority key identifier: 2B:93:74:F5:36:72:AE:4C:13:3C:DB:B6:FB:C6:19:51:81:9D:32:B4
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/K5N09TZyrkwTPNu2-8YZUYGdMrQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365BBDA/0C3AA9B073DF11F1931D9EB6CE1D38B0/763AA698B2B011F1A0A5E9E8CE1D38B0.roa
Signing time:             Thu 17 Sep 2026 15:57:19 +0000
ROA not before:           Thu 17 Sep 2026 15:57:16 +0000
ROA not after:            Fri 31 Dec 2027 15:57:16 +0000
asID:                     329470
IP address blocks:        2001:43ff:b000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365BBDA/0C3AA9B073DF11F1931D9EB6CE1D38B0/K5N09TZyrkwTPNu2-8YZUYGdMrQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365BBDA/0C3AA9B073DF11F1931D9EB6CE1D38B0/K5N09TZyrkwTPNu2-8YZUYGdMrQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/K5N09TZyrkwTPNu2-8YZUYGdMrQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Sep 2026 00:07:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 90 (0x5a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365BBDAAF, serialNumber=2B9374F53672AE4C133CDBB6FBC61951819D32B4
        Validity
            Not Before: Sep 17 15:57:16 2026 GMT
            Not After : Dec 31 15:57:16 2027 GMT
        Subject: CN=6aac0ddf-7d2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:4a:41:98:cc:4b:44:78:f9:00:cd:ee:8f:d7:
                    2a:b8:67:4f:90:2e:e4:ba:e9:ab:51:bf:1f:70:7d:
                    35:2d:f5:72:30:8d:7d:1c:08:2c:46:2b:fc:3b:00:
                    c5:62:85:97:9b:86:38:5f:41:19:5e:f1:cf:d0:8b:
                    87:c1:33:76:d1:20:65:d0:93:7c:e6:45:d3:1e:d0:
                    86:9a:4e:4b:eb:92:04:fe:ff:ac:43:9f:a6:48:27:
                    c9:29:fc:6e:79:d0:a5:83:05:c0:3a:d3:c8:5f:29:
                    2d:9d:ac:85:aa:7f:2f:ac:0b:ca:da:71:a5:05:ee:
                    d4:94:48:9d:e3:90:f7:76:15:7e:72:85:bf:1c:33:
                    72:7d:c7:1e:bf:5d:19:e5:15:c9:91:d7:5e:78:92:
                    a7:76:42:03:97:df:0f:36:93:a0:b9:44:3f:c5:ed:
                    08:1b:7e:5f:1e:8a:bb:ea:2f:cb:5c:cc:16:db:0a:
                    34:8d:7c:ed:05:ad:f4:18:74:2f:d2:5c:fe:ec:23:
                    d3:e9:af:21:4d:fe:e2:37:9c:5e:68:c5:ba:9b:98:
                    c7:12:4a:12:6f:61:96:aa:3b:05:78:dd:5a:24:fe:
                    c1:9e:ae:66:c6:c8:e8:9f:4a:c4:43:53:a0:6c:93:
                    65:ae:7b:48:ee:1f:dc:a7:d0:79:03:83:b4:7e:02:
                    db:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:DD:4B:B7:96:2D:E6:93:4D:B5:6D:91:51:F1:36:56:25:A3:2D:AA
            X509v3 Authority Key Identifier:
                keyid:2B:93:74:F5:36:72:AE:4C:13:3C:DB:B6:FB:C6:19:51:81:9D:32:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365BBDA/0C3AA9B073DF11F1931D9EB6CE1D38B0/K5N09TZyrkwTPNu2-8YZUYGdMrQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/K5N09TZyrkwTPNu2-8YZUYGdMrQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365BBDA/0C3AA9B073DF11F1931D9EB6CE1D38B0/763AA698B2B011F1A0A5E9E8CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:43ff:b000::/48

    Signature Algorithm: sha256WithRSAEncryption
         86:c1:bf:9e:5b:f8:da:7f:78:2d:44:69:13:85:8f:96:ca:5d:
         5f:cc:21:52:cd:fa:3f:40:b1:58:6e:76:72:df:4c:ef:52:b1:
         c7:46:0e:07:17:02:a2:27:4f:ba:ed:38:d7:89:2d:a9:5f:bf:
         b4:2e:bc:e9:01:87:72:fd:9f:a3:71:87:69:b7:32:50:f0:06:
         8e:b0:cb:36:1f:0b:59:aa:49:28:07:cc:e5:89:3c:78:72:3f:
         7b:59:76:e6:d6:74:33:37:81:ec:e5:f0:a8:ca:13:37:f8:4d:
         2b:0c:57:d3:95:02:fb:71:cc:00:af:44:e6:3b:21:2b:a4:6d:
         d6:4f:dc:c1:3e:a7:72:0f:6c:a8:8e:79:9c:1b:e8:29:fb:5a:
         de:dd:ec:61:66:4f:3c:08:72:4c:b5:b0:c2:0a:96:f4:c0:52:
         80:77:01:03:f1:2c:1a:34:73:50:80:2e:07:29:2b:7d:c2:90:
         02:0c:1b:24:35:1e:9c:67:79:01:3c:2f:d9:d2:54:d3:cc:53:
         66:55:11:92:bb:2a:a1:d0:02:40:25:18:14:a6:66:3a:ea:3f:
         e4:d6:9d:bc:cf:ae:85:5f:1c:07:10:f2:1e:2e:d1:dd:8a:fc:
         93:f7:1a:55:bb:5d:ef:64:17:18:7b:77:bf:f2:80:b4:c6:dc:
         50:9b:a4:10
-----BEGIN CERTIFICATE-----
MIIFhTCCBG2gAwIBAgIBWjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY1
QkJEQUFGMTEwLwYDVQQFEygyQjkzNzRGNTM2NzJBRTRDMTMzQ0RCQjZGQkM2MTk1
MTgxOUQzMkI0MB4XDTI2MDkxNzE1NTcxNloXDTI3MTIzMTE1NTcxNlowGDEWMBQG
A1UEAxMNNmFhYzBkZGYtN2QyYzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAPBKQZjMS0R4+QDN7o/XKrhnT5Au5Lrpq1G/H3B9NS31cjCNfRwILEYr/DsA
xWKFl5uGOF9BGV7xz9CLh8EzdtEgZdCTfOZF0x7QhppOS+uSBP7/rEOfpkgnySn8
bnnQpYMFwDrTyF8pLZ2shap/L6wLytpxpQXu1JRIneOQ93YVfnKFvxwzcn3HHr9d
GeUVyZHXXniSp3ZCA5ffDzaToLlEP8XtCBt+Xx6Ku+ovy1zMFtsKNI187QWt9Bh0
L9Jc/uwj0+mvIU3+4jecXmjFupuYxxJKEm9hlqo7BXjdWiT+wZ6uZsbI6J9KxENT
oGyTZa57SO4f3KfQeQODtH4C29UCAwEAAaOCAqgwggKkMB0GA1UdDgQWBBSb3Uu3
li3mk021bZFR8TZWJaMtqjAfBgNVHSMEGDAWgBQrk3T1NnKuTBM827b7xhlRgZ0y
tDAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2NUJCREEvMEMzQUE5QjA3M0RGMTFGMTkzMUQ5RUI2Q0UxRDM4QjAvSzVOMDlU
Wnlya3dUUE51Mi04WVpVWUdkTXJRLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvSzVOMDlUWnlya3dUUE51Mi04WVpVWUdkTXJRLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NUJCREEvMEMzQUE5QjA3M0RGMTFGMTkzMUQ5RUI2Q0Ux
RDM4QjAvNzYzQUE2OThCMkIwMTFGMUEwQTVFOUU4Q0UxRDM4QjAucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACABQ/+wADANBgkqhkiG9w0B
AQsFAAOCAQEAhsG/nlv42n94LURpE4WPlspdX8whUs36P0CxWG52ct9M71Kxx0YO
BxcCoidPuu0414ktqV+/tC686QGHcv2fo3GHabcyUPAGjrDLNh8LWapJKAfM5Yk8
eHI/e1l25tZ0MzeB7OXwqMoTN/hNKwxX05UC+3HMAK9E5jshK6Rt1k/cwT6ncg9s
qI55nBvoKfta3t3sYWZPPAhyTLWwwgqW9MBSgHcBA/EsGjRzUIAuBykrfcKQAgwb
JDUenGd5ATwv2dJU08xTZlURkrsqodACQCUYFKZmOuo/5NadvM+uhV8cBxDyHi7R
3Yr8k/caVbtd72QXGHt3v/KAtMbcUJukEA==
-----END CERTIFICATE-----