Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/D1B35C4A964A11F1A9334AA5CE1D38B0.roa
File:                     D1B35C4A964A11F1A9334AA5CE1D38B0.roa (raw, json)
Hash identifier:          CywFwXwO57V+G+qKXanYKXzslXo+pvmgnB0sPfz4Qlg=
Subject key identifier:   60:EF:67:BD:5F:D1:3B:2E:A2:3B:B0:AF:6C:2C:1A:3A:3D:AA:B3:A9
Certificate issuer:       /CN=F366B0C9AF/serialNumber=A20E2067F0DB783DE3723E231517DC7E9FE5BAD3
Certificate serial:       0582
Authority key identifier: A2:0E:20:67:F0:DB:78:3D:E3:72:3E:23:15:17:DC:7E:9F:E5:BA:D3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/og4gZ_DbeD3jcj4jFRfcfp_lutM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/D1B35C4A964A11F1A9334AA5CE1D38B0.roa
Signing time:             Wed 12 Aug 2026 12:39:12 +0000
ROA not before:           Wed 12 Aug 2026 12:39:08 +0000
ROA not after:            Thu 10 Mar 2033 12:39:08 +0000
asID:                     37182
IP address blocks:        41.93.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/og4gZ_DbeD3jcj4jFRfcfp_lutM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/og4gZ_DbeD3jcj4jFRfcfp_lutM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/og4gZ_DbeD3jcj4jFRfcfp_lutM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Sep 2026 00:08:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1410 (0x582)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366B0C9AF, serialNumber=A20E2067F0DB783DE3723E231517DC7E9FE5BAD3
        Validity
            Not Before: Aug 12 12:39:08 2026 GMT
            Not After : Mar 10 12:39:08 2033 GMT
        Subject: CN=6a7c6970-7eef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:b6:ea:79:a3:81:01:a9:55:b2:9c:58:88:f6:
                    44:6f:cd:6e:8f:e9:e0:d1:10:59:ce:ca:34:aa:3f:
                    ef:72:31:60:aa:73:c6:ca:bb:13:34:31:9a:c9:23:
                    23:e2:41:86:8b:ea:da:95:a0:4b:87:2b:c5:45:8c:
                    ea:32:dc:1b:eb:1d:09:1a:7c:b7:ba:a9:6a:06:c4:
                    1d:b2:ea:21:ba:e8:54:f5:be:6a:64:18:a4:8b:d4:
                    b5:e1:64:7d:7e:28:84:b8:2c:e1:79:f9:28:90:12:
                    66:50:3d:8f:5b:ad:58:91:2d:8c:0d:87:23:b0:42:
                    6b:b8:f5:39:21:e7:81:9e:ab:8c:6a:f3:a3:a2:57:
                    6c:d1:e4:0b:21:0c:65:84:ab:79:aa:ee:45:2f:8d:
                    cc:9e:61:fc:ef:cb:32:98:3e:80:7b:4e:e0:fa:a0:
                    7e:33:c9:81:da:0b:e5:00:9b:f4:6f:cf:f1:ec:cb:
                    5c:6e:5b:80:e9:e7:c5:72:bd:27:63:3f:de:32:fc:
                    8a:be:f0:12:6d:93:ed:8f:47:40:29:3f:ff:de:0e:
                    e9:f8:df:4e:08:20:03:78:17:41:53:ed:fc:4f:a4:
                    f2:18:f0:7e:39:45:16:d6:fa:3d:ad:e6:7d:3a:b9:
                    ee:45:54:ea:9a:c7:cb:66:fe:22:3b:70:2e:ea:ae:
                    7d:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:EF:67:BD:5F:D1:3B:2E:A2:3B:B0:AF:6C:2C:1A:3A:3D:AA:B3:A9
            X509v3 Authority Key Identifier:
                keyid:A2:0E:20:67:F0:DB:78:3D:E3:72:3E:23:15:17:DC:7E:9F:E5:BA:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/og4gZ_DbeD3jcj4jFRfcfp_lutM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/og4gZ_DbeD3jcj4jFRfcfp_lutM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/D1B35C4A964A11F1A9334AA5CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.93.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:cc:59:a5:ab:37:ca:f9:30:95:09:29:c4:5c:33:44:5c:31:
         ab:3b:a5:3b:fa:33:b0:76:74:6a:41:a6:3f:80:59:c6:d9:83:
         84:04:42:97:98:5d:55:40:79:0f:6c:10:28:83:12:5f:c0:f2:
         92:fc:8d:f8:be:db:57:92:72:72:6c:9f:0d:b1:07:b2:d8:b3:
         22:95:6f:36:00:34:a5:a0:c9:87:5d:0f:72:0c:1f:82:42:72:
         b8:65:61:0c:13:15:41:59:91:88:99:06:87:23:f3:3b:1d:ed:
         1e:c0:1e:3c:d1:da:29:aa:06:c7:fe:c6:69:d1:07:1e:89:14:
         de:85:f5:e2:40:89:0f:4e:c5:4d:74:0a:b5:ee:d2:17:92:a0:
         0d:0d:77:0b:b9:46:d9:0e:3e:3a:be:bb:fb:77:50:81:54:a6:
         9d:b3:0c:fd:20:80:d6:de:16:60:74:a7:b0:ab:01:fb:72:c2:
         a1:c1:4f:d4:93:a8:b9:ae:56:8a:ab:93:20:6e:8c:bd:38:0f:
         a2:21:7a:45:99:17:f9:ea:6e:ff:54:b8:3c:1e:aa:92:2f:d7:
         de:97:cb:2f:05:c8:f4:6b:12:0b:a7:6e:9e:c0:a3:15:c2:0a:
         12:74:40:d8:36:4f:c3:f2:8f:09:f5:0a:24:37:73:5d:6f:23:
         69:4e:45:b3
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBYIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NkIwQzlBRjExMC8GA1UEBRMoQTIwRTIwNjdGMERCNzgzREUzNzIzRTIzMTUxN0RD
N0U5RkU1QkFEMzAeFw0yNjA4MTIxMjM5MDhaFw0zMzAzMTAxMjM5MDhaMBgxFjAU
BgNVBAMTDTZhN2M2OTcwLTdlZWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDjtup5o4EBqVWynFiI9kRvzW6P6eDREFnOyjSqP+9yMWCqc8bKuxM0MZrJ
IyPiQYaL6tqVoEuHK8VFjOoy3BvrHQkafLe6qWoGxB2y6iG66FT1vmpkGKSL1LXh
ZH1+KIS4LOF5+SiQEmZQPY9brViRLYwNhyOwQmu49Tkh54Geq4xq86OiV2zR5Ash
DGWEq3mq7kUvjcyeYfzvyzKYPoB7TuD6oH4zyYHaC+UAm/Rvz/Hsy1xuW4Dp58Vy
vSdjP94y/Iq+8BJtk+2PR0ApP//eDun4304IIAN4F0FT7fxPpPIY8H45RRbW+j2t
5n06ue5FVOqax8tm/iI7cC7qrn1rAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUYO9n
vV/ROy6iO7CvbCwaOj2qs6kwHwYDVR0jBBgwFoAUog4gZ/DbeD3jcj4jFRfcfp/l
utMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjZCMEM5L0YxMjY1MThDQkM0MDExRURBQjU5NEVEQ0YxMjIyNDY4L29nNGda
X0RiZUQzamNqNGpGUmZjZnBfbHV0TS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL29nNGdaX0RiZUQzamNqNGpGUmZjZnBfbHV0TS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjZCMEM5L0YxMjY1MThDQkM0MDExRURBQjU5NEVEQ0Yx
MjIyNDY4L0QxQjM1QzRBOTY0QTExRjFBOTMzNEFBNUNFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAApXSowDQYJKoZIhvcNAQEL
BQADggEBAF3MWaWrN8r5MJUJKcRcM0RcMas7pTv6M7B2dGpBpj+AWcbZg4QEQpeY
XVVAeQ9sECiDEl/A8pL8jfi+21eScnJsnw2xB7LYsyKVbzYANKWgyYddD3IMH4JC
crhlYQwTFUFZkYiZBocj8zsd7R7AHjzR2imqBsf+xmnRBx6JFN6F9eJAiQ9OxU10
CrXu0heSoA0Ndwu5RtkOPjq+u/t3UIFUpp2zDP0ggNbeFmB0p7CrAftywqHBT9ST
qLmuVoqrkyBujL04D6IhekWZF/nqbv9UuDweqpIv196Xyy8FyPRrEgunbp7AoxXC
ChJ0QNg2T8Pyjwn1CiQ3c11vI2lORbM=
-----END CERTIFICATE-----