Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/4A5966C6964B11F1974C98A7CE1D38B0.roa
File:                     4A5966C6964B11F1974C98A7CE1D38B0.roa (raw, json)
Hash identifier:          3lUysCJ7KKok/t8ftl1wKV8RNNYxC42RDDmAVCv2Tlc=
Subject key identifier:   76:F0:82:96:67:3E:F2:A9:00:3E:61:37:32:A6:CF:FE:2F:1A:7D:4B
Certificate issuer:       /CN=F366B0C9AF/serialNumber=A20E2067F0DB783DE3723E231517DC7E9FE5BAD3
Certificate serial:       0585
Authority key identifier: A2:0E:20:67:F0:DB:78:3D:E3:72:3E:23:15:17:DC:7E:9F:E5:BA:D3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/og4gZ_DbeD3jcj4jFRfcfp_lutM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/4A5966C6964B11F1974C98A7CE1D38B0.roa
Signing time:             Wed 12 Aug 2026 12:42:34 +0000
ROA not before:           Wed 12 Aug 2026 12:42:30 +0000
ROA not after:            Thu 10 Mar 2033 12:42:30 +0000
asID:                     37182
IP address blocks:        41.93.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/og4gZ_DbeD3jcj4jFRfcfp_lutM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/og4gZ_DbeD3jcj4jFRfcfp_lutM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/og4gZ_DbeD3jcj4jFRfcfp_lutM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Sep 2026 03:17:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1413 (0x585)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366B0C9AF, serialNumber=A20E2067F0DB783DE3723E231517DC7E9FE5BAD3
        Validity
            Not Before: Aug 12 12:42:30 2026 GMT
            Not After : Mar 10 12:42:30 2033 GMT
        Subject: CN=6a7c6a3a-f468
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:1b:49:af:9c:9e:7e:9a:ba:b2:43:e5:6d:b3:
                    49:5a:c7:0a:bc:92:92:94:5f:0f:7c:6b:eb:7b:84:
                    9f:0c:b3:fd:18:07:bc:81:39:ca:f4:47:d0:8f:2d:
                    d6:8b:07:b3:a7:5b:dd:ec:28:0f:da:90:ff:38:f9:
                    fc:5b:18:ec:bb:01:09:b3:a5:63:a2:21:6d:ee:be:
                    fc:7d:60:0c:62:f0:f8:ec:2c:3b:bf:71:cf:c5:2c:
                    bf:5c:6d:fa:5b:46:d9:2e:64:e4:90:ae:c3:e6:76:
                    3d:1a:39:7f:d7:4f:72:33:26:24:32:d2:db:02:cd:
                    0f:7a:35:fa:3d:e0:93:94:3f:44:05:cd:2c:1e:7e:
                    97:65:74:a9:67:5d:f7:35:af:12:65:92:4a:7c:7f:
                    35:01:94:42:f2:65:50:88:17:ba:18:a7:4c:ed:e9:
                    e3:e5:7a:17:a1:07:3c:49:16:12:4a:2b:1a:02:3d:
                    80:85:c4:60:a9:3d:7e:6c:94:7a:c6:64:c6:f7:1b:
                    ed:fe:89:84:50:8c:e3:a4:ae:ad:87:09:88:01:4f:
                    51:38:e1:b8:4f:5e:0b:69:4b:29:14:a4:f6:a4:15:
                    8b:16:01:cf:d1:77:98:26:4c:95:8d:00:52:28:08:
                    8e:51:a8:1c:bc:72:e9:93:33:51:da:93:ce:f1:e9:
                    61:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:F0:82:96:67:3E:F2:A9:00:3E:61:37:32:A6:CF:FE:2F:1A:7D:4B
            X509v3 Authority Key Identifier:
                keyid:A2:0E:20:67:F0:DB:78:3D:E3:72:3E:23:15:17:DC:7E:9F:E5:BA:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/og4gZ_DbeD3jcj4jFRfcfp_lutM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/og4gZ_DbeD3jcj4jFRfcfp_lutM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/4A5966C6964B11F1974C98A7CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.93.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:eb:d5:74:85:f5:46:1c:ef:52:e2:33:9b:d0:d1:ce:fa:40:
         c0:22:c9:d8:d2:9b:91:eb:68:78:1e:c1:37:a6:f7:e2:1d:cd:
         ec:d5:eb:22:dc:10:c8:25:02:19:8b:65:5f:5d:1e:c5:33:5e:
         5d:3b:fd:90:84:df:b0:b3:73:ad:c8:37:0d:57:70:b5:ee:7a:
         75:82:98:b4:5b:70:0d:3a:d4:1a:d0:34:5c:56:00:86:d1:3a:
         98:77:bb:f6:f5:47:18:c2:d7:36:5a:06:88:87:8f:94:69:64:
         a9:91:61:e6:44:0a:7b:46:53:71:e1:83:51:53:15:7e:2b:fa:
         c7:8d:08:64:2c:dc:45:f7:a0:43:05:9b:33:c5:dc:27:64:34:
         28:26:1a:a7:7d:69:4f:06:30:85:9e:7c:52:f7:6a:ee:b4:54:
         9a:73:40:8d:2f:97:1a:cc:ed:bc:42:ac:41:e8:be:df:1f:70:
         91:4c:52:0d:c4:c4:15:28:9d:4b:3f:52:e0:e1:23:6e:e5:55:
         a1:15:d2:a1:65:04:54:a8:55:b6:53:5a:a1:f3:12:62:7e:2c:
         a6:9d:66:bd:69:c9:95:92:54:40:32:fe:7e:75:71:0d:ae:f6:
         c4:1c:d1:6d:13:2f:79:cf:3f:59:d8:f0:92:9c:5f:9f:80:33:
         8e:fa:28:09
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBYUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NkIwQzlBRjExMC8GA1UEBRMoQTIwRTIwNjdGMERCNzgzREUzNzIzRTIzMTUxN0RD
N0U5RkU1QkFEMzAeFw0yNjA4MTIxMjQyMzBaFw0zMzAzMTAxMjQyMzBaMBgxFjAU
BgNVBAMTDTZhN2M2YTNhLWY0NjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDNG0mvnJ5+mrqyQ+Vts0laxwq8kpKUXw98a+t7hJ8Ms/0YB7yBOcr0R9CP
LdaLB7OnW93sKA/akP84+fxbGOy7AQmzpWOiIW3uvvx9YAxi8PjsLDu/cc/FLL9c
bfpbRtkuZOSQrsPmdj0aOX/XT3IzJiQy0tsCzQ96Nfo94JOUP0QFzSwefpdldKln
Xfc1rxJlkkp8fzUBlELyZVCIF7oYp0zt6ePlehehBzxJFhJKKxoCPYCFxGCpPX5s
lHrGZMb3G+3+iYRQjOOkrq2HCYgBT1E44bhPXgtpSykUpPakFYsWAc/Rd5gmTJWN
AFIoCI5RqBy8cumTM1Hak87x6WFnAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUdvCC
lmc+8qkAPmE3MqbP/i8afUswHwYDVR0jBBgwFoAUog4gZ/DbeD3jcj4jFRfcfp/l
utMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjZCMEM5L0YxMjY1MThDQkM0MDExRURBQjU5NEVEQ0YxMjIyNDY4L29nNGda
X0RiZUQzamNqNGpGUmZjZnBfbHV0TS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL29nNGdaX0RiZUQzamNqNGpGUmZjZnBfbHV0TS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjZCMEM5L0YxMjY1MThDQkM0MDExRURBQjU5NEVEQ0Yx
MjIyNDY4LzRBNTk2NkM2OTY0QjExRjE5NzRDOThBN0NFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAApXSswDQYJKoZIhvcNAQEL
BQADggEBABLr1XSF9UYc71LiM5vQ0c76QMAiydjSm5HraHgewTem9+IdzezV6yLc
EMglAhmLZV9dHsUzXl07/ZCE37Czc63INw1XcLXuenWCmLRbcA061BrQNFxWAIbR
Oph3u/b1RxjC1zZaBoiHj5RpZKmRYeZECntGU3Hhg1FTFX4r+seNCGQs3EX3oEMF
mzPF3CdkNCgmGqd9aU8GMIWefFL3au60VJpzQI0vlxrM7bxCrEHovt8fcJFMUg3E
xBUonUs/UuDhI27lVaEV0qFlBFSoVbZTWqHzEmJ+LKadZr1pyZWSVEAy/n51cQ2u
9sQc0W0TL3nPP1nY8JKcX5+AM476KAk=
-----END CERTIFICATE-----