Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/1B0CB2C4965011F1B9BFD8C4CE1D38B0.roa
File:                     1B0CB2C4965011F1B9BFD8C4CE1D38B0.roa (raw, json)
Hash identifier:          BM4MwkU5kxGeZnZ9A0z5MKng3av6eYK6XmnEPpPwTGo=
Subject key identifier:   9B:17:03:4E:D6:12:6A:91:16:3B:70:DD:B1:87:BE:79:01:57:76:6F
Certificate issuer:       /CN=F366B0C9AF/serialNumber=A20E2067F0DB783DE3723E231517DC7E9FE5BAD3
Certificate serial:       05A9
Authority key identifier: A2:0E:20:67:F0:DB:78:3D:E3:72:3E:23:15:17:DC:7E:9F:E5:BA:D3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/og4gZ_DbeD3jcj4jFRfcfp_lutM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/1B0CB2C4965011F1B9BFD8C4CE1D38B0.roa
Signing time:             Wed 12 Aug 2026 13:17:02 +0000
ROA not before:           Wed 12 Aug 2026 13:16:58 +0000
ROA not after:            Thu 31 Mar 2033 13:16:58 +0000
asID:                     37182
IP address blocks:        41.93.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/og4gZ_DbeD3jcj4jFRfcfp_lutM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/og4gZ_DbeD3jcj4jFRfcfp_lutM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/og4gZ_DbeD3jcj4jFRfcfp_lutM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Sep 2026 03:17:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1449 (0x5a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366B0C9AF, serialNumber=A20E2067F0DB783DE3723E231517DC7E9FE5BAD3
        Validity
            Not Before: Aug 12 13:16:58 2026 GMT
            Not After : Mar 31 13:16:58 2033 GMT
        Subject: CN=6a7c724e-f260
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e5:3a:f2:dc:50:73:ba:8a:d8:1b:9a:00:4c:
                    56:f5:77:ea:0f:80:a6:08:60:61:6f:9f:ba:24:95:
                    0e:93:85:d4:1f:32:3b:b5:7f:6e:70:a5:ea:88:b7:
                    08:b6:9c:51:42:44:d1:49:a2:c0:1c:8c:bb:94:5b:
                    bd:28:a9:70:ac:23:42:07:3e:1b:63:55:0b:13:fe:
                    61:4b:10:29:88:de:fe:0a:cc:4d:56:37:fd:2a:52:
                    26:41:09:fe:b6:04:39:43:e7:70:31:09:d2:61:7c:
                    82:03:f0:52:b6:6c:3b:f6:fc:d8:97:9c:1f:30:aa:
                    fb:49:eb:e0:1a:7e:20:57:68:b5:38:ea:d6:b6:0d:
                    30:b5:90:c7:e4:9a:f8:4b:bb:96:7f:d9:f5:4e:79:
                    0f:45:4d:7b:0c:a4:ad:7b:dd:b4:eb:18:79:97:77:
                    75:ba:95:74:ea:47:f6:e0:14:ee:c4:25:25:8e:00:
                    0e:4a:e6:3b:66:82:09:15:39:01:25:f7:b0:f7:2e:
                    21:a5:0d:06:a6:b5:f4:a3:64:00:5e:a2:0f:67:df:
                    5d:4a:9e:ef:32:80:72:e4:ed:7d:9e:43:2e:0c:5a:
                    27:27:ba:30:a9:6a:74:7c:c2:42:7d:88:e4:ec:85:
                    3f:eb:2f:68:d9:69:c3:ff:21:30:25:98:12:92:3b:
                    ad:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:17:03:4E:D6:12:6A:91:16:3B:70:DD:B1:87:BE:79:01:57:76:6F
            X509v3 Authority Key Identifier:
                keyid:A2:0E:20:67:F0:DB:78:3D:E3:72:3E:23:15:17:DC:7E:9F:E5:BA:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/og4gZ_DbeD3jcj4jFRfcfp_lutM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/og4gZ_DbeD3jcj4jFRfcfp_lutM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/1B0CB2C4965011F1B9BFD8C4CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.93.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:b2:bb:14:9f:a1:68:c1:b0:fa:d8:3b:bb:02:42:41:59:a4:
         be:8a:7d:f4:40:12:b4:49:b2:18:04:a7:da:30:4a:4b:e4:1e:
         5c:ab:08:6a:b1:d8:52:09:d5:01:46:c8:71:c0:e6:40:87:06:
         db:78:47:d3:12:03:f1:07:9a:97:f2:37:a9:93:a3:03:1d:7a:
         e1:69:c9:16:96:22:50:84:92:74:57:43:90:0c:68:69:0f:54:
         42:8f:f0:1c:10:f7:a7:5f:50:e7:c6:a2:73:e3:b4:22:47:48:
         d8:56:bc:c2:df:a2:bd:f7:aa:fd:8b:3a:d1:16:8a:67:99:42:
         73:f4:27:c7:e8:02:15:b4:21:90:71:99:9a:12:da:ed:20:d0:
         89:36:ea:df:ba:19:b1:61:97:1c:cd:4d:9f:31:10:eb:5b:85:
         b5:0b:0f:ce:59:fe:04:4f:a3:01:52:09:5b:8d:32:21:6d:8a:
         4d:f7:90:b6:5f:c8:be:3d:34:fe:11:d0:f3:cb:f8:6a:43:f5:
         21:dd:cb:e3:c6:af:d5:5a:e1:48:15:47:9b:ad:e9:e6:c6:50:
         0b:c9:02:d2:3a:78:5e:10:b0:13:4b:2a:62:a6:24:9d:1f:ff:
         d4:8b:4b:6f:48:8e:b3:ac:6d:5d:93:0d:81:0f:30:0a:5f:c0:
         55:38:ed:16
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBakwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NkIwQzlBRjExMC8GA1UEBRMoQTIwRTIwNjdGMERCNzgzREUzNzIzRTIzMTUxN0RD
N0U5RkU1QkFEMzAeFw0yNjA4MTIxMzE2NThaFw0zMzAzMzExMzE2NThaMBgxFjAU
BgNVBAMTDTZhN2M3MjRlLWYyNjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC+5Try3FBzuorYG5oATFb1d+oPgKYIYGFvn7oklQ6ThdQfMju1f25wpeqI
twi2nFFCRNFJosAcjLuUW70oqXCsI0IHPhtjVQsT/mFLECmI3v4KzE1WN/0qUiZB
Cf62BDlD53AxCdJhfIID8FK2bDv2/NiXnB8wqvtJ6+AafiBXaLU46ta2DTC1kMfk
mvhLu5Z/2fVOeQ9FTXsMpK173bTrGHmXd3W6lXTqR/bgFO7EJSWOAA5K5jtmggkV
OQEl97D3LiGlDQamtfSjZABeog9n311Knu8ygHLk7X2eQy4MWicnujCpanR8wkJ9
iOTshT/rL2jZacP/ITAlmBKSO60HAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUmxcD
TtYSapEWO3DdsYe+eQFXdm8wHwYDVR0jBBgwFoAUog4gZ/DbeD3jcj4jFRfcfp/l
utMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjZCMEM5L0YxMjY1MThDQkM0MDExRURBQjU5NEVEQ0YxMjIyNDY4L29nNGda
X0RiZUQzamNqNGpGUmZjZnBfbHV0TS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL29nNGdaX0RiZUQzamNqNGpGUmZjZnBfbHV0TS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjZCMEM5L0YxMjY1MThDQkM0MDExRURBQjU5NEVEQ0Yx
MjIyNDY4LzFCMENCMkM0OTY1MDExRjFCOUJGRDhDNENFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAApXVEwDQYJKoZIhvcNAQEL
BQADggEBAGSyuxSfoWjBsPrYO7sCQkFZpL6KffRAErRJshgEp9owSkvkHlyrCGqx
2FIJ1QFGyHHA5kCHBtt4R9MSA/EHmpfyN6mTowMdeuFpyRaWIlCEknRXQ5AMaGkP
VEKP8BwQ96dfUOfGonPjtCJHSNhWvMLfor33qv2LOtEWimeZQnP0J8foAhW0IZBx
mZoS2u0g0Ik26t+6GbFhlxzNTZ8xEOtbhbULD85Z/gRPowFSCVuNMiFtik33kLZf
yL49NP4R0PPL+GpD9SHdy+PGr9Va4UgVR5ut6ebGUAvJAtI6eF4QsBNLKmKmJJ0f
/9SLS29IjrOsbV2TDYEPMApfwFU47RY=
-----END CERTIFICATE-----