Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/D2EDFC9C964E11F199968ABCCE1D38B0.roa
File:                     D2EDFC9C964E11F199968ABCCE1D38B0.roa (raw, json)
Hash identifier:          80PKzJSUUvOfmGmgnLKimc/Cz5K72HQjxrAx+ivf+qY=
Subject key identifier:   EC:90:12:37:15:F9:D6:A9:AC:69:34:EC:62:AA:12:54:AC:7C:3D:EA
Certificate issuer:       /CN=F366B0C9AF/serialNumber=A20E2067F0DB783DE3723E231517DC7E9FE5BAD3
Certificate serial:       05A0
Authority key identifier: A2:0E:20:67:F0:DB:78:3D:E3:72:3E:23:15:17:DC:7E:9F:E5:BA:D3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/og4gZ_DbeD3jcj4jFRfcfp_lutM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/D2EDFC9C964E11F199968ABCCE1D38B0.roa
Signing time:             Wed 12 Aug 2026 13:07:52 +0000
ROA not before:           Wed 12 Aug 2026 13:07:48 +0000
ROA not after:            Thu 10 Mar 2033 13:07:48 +0000
asID:                     37182
IP address blocks:        41.93.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/og4gZ_DbeD3jcj4jFRfcfp_lutM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/og4gZ_DbeD3jcj4jFRfcfp_lutM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/og4gZ_DbeD3jcj4jFRfcfp_lutM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Sep 2026 03:17:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1440 (0x5a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366B0C9AF, serialNumber=A20E2067F0DB783DE3723E231517DC7E9FE5BAD3
        Validity
            Not Before: Aug 12 13:07:48 2026 GMT
            Not After : Mar 10 13:07:48 2033 GMT
        Subject: CN=6a7c7028-8bc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:49:cd:db:10:f8:33:4f:d8:09:41:14:a6:f3:
                    ee:73:24:ec:9b:b1:7e:61:61:3e:12:f8:66:7c:02:
                    d0:9d:8d:62:0d:44:43:04:90:7d:7d:88:3c:4a:53:
                    e7:8e:9e:5d:5d:e3:5c:b6:32:48:ac:a8:c5:5e:b4:
                    93:dc:ec:38:05:38:63:54:16:e0:27:de:e3:1c:a6:
                    2d:05:f7:3f:1c:af:fc:b2:05:21:bf:a9:d4:22:f0:
                    22:4f:84:13:f7:3e:34:8d:22:5c:b8:59:23:4e:34:
                    8e:ba:29:7b:97:d1:e0:f5:0c:1c:28:72:0e:3c:1b:
                    cc:bf:6c:73:4a:a9:11:4c:6c:0a:4f:1f:e8:06:ac:
                    fc:10:bd:64:ad:82:86:11:16:e2:c2:a8:b5:77:fa:
                    52:af:1f:f0:1f:c7:5f:00:e9:00:fe:a0:85:4e:1a:
                    a1:2a:7a:a6:d7:e6:47:b2:cc:3e:5e:20:fe:d0:67:
                    79:6f:de:4c:16:af:cd:77:76:d4:2c:be:cb:62:82:
                    05:bc:c3:00:66:19:18:b0:0b:ad:71:78:0a:af:25:
                    a4:c4:4c:7e:ba:dd:d1:e2:ad:64:44:be:0f:40:57:
                    06:5b:04:dc:2a:74:6c:88:c5:32:ad:43:b2:2b:da:
                    91:12:d0:49:a3:7d:41:c7:e0:91:82:de:c6:0e:62:
                    93:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:90:12:37:15:F9:D6:A9:AC:69:34:EC:62:AA:12:54:AC:7C:3D:EA
            X509v3 Authority Key Identifier:
                keyid:A2:0E:20:67:F0:DB:78:3D:E3:72:3E:23:15:17:DC:7E:9F:E5:BA:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/og4gZ_DbeD3jcj4jFRfcfp_lutM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/og4gZ_DbeD3jcj4jFRfcfp_lutM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/D2EDFC9C964E11F199968ABCCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.93.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:cd:ca:6b:02:00:02:30:22:1a:47:c3:5f:47:23:2b:b3:0c:
         c5:60:ec:ce:62:17:40:6a:0c:d4:63:5c:24:fb:e8:bc:e3:67:
         ce:be:3e:08:c1:83:96:ac:b5:1f:0d:1b:bc:9e:58:ac:95:0f:
         8a:dc:97:44:7a:ea:ba:c2:d4:07:42:b3:3c:a6:f3:a4:8a:83:
         71:f8:62:c4:08:bd:16:7c:87:1b:9d:0f:fc:71:56:4b:b8:d5:
         e5:16:da:c8:19:6f:eb:6e:23:4e:9d:20:63:8b:d6:c8:f8:87:
         dd:be:51:6d:e4:da:75:9d:f5:d2:fb:0a:06:0a:a2:33:18:fd:
         e3:a2:4c:bf:0d:d1:3a:a0:1b:25:37:d5:a7:87:41:67:21:da:
         39:8d:ed:47:1b:e7:bc:fa:9a:f6:b6:6b:7a:72:ff:bd:66:1a:
         fe:78:c1:e6:f9:2d:22:f4:5b:db:9f:35:3c:f1:ea:b6:de:c3:
         04:d1:91:74:bf:b9:65:47:a5:8e:ad:99:55:5b:0c:0a:51:b7:
         ce:ed:3c:f3:68:92:74:36:20:3b:dd:36:6f:8b:a0:dd:62:62:
         52:6c:62:eb:05:0c:40:32:fa:44:d6:95:8d:99:3d:66:16:65:
         c5:c3:7c:6b:67:03:08:06:13:60:16:43:68:ab:c2:16:7c:bc:
         53:b0:a0:06
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBaAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NkIwQzlBRjExMC8GA1UEBRMoQTIwRTIwNjdGMERCNzgzREUzNzIzRTIzMTUxN0RD
N0U5RkU1QkFEMzAeFw0yNjA4MTIxMzA3NDhaFw0zMzAzMTAxMzA3NDhaMBgxFjAU
BgNVBAMTDTZhN2M3MDI4LThiYzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDHSc3bEPgzT9gJQRSm8+5zJOybsX5hYT4S+GZ8AtCdjWINREMEkH19iDxK
U+eOnl1d41y2MkisqMVetJPc7DgFOGNUFuAn3uMcpi0F9z8cr/yyBSG/qdQi8CJP
hBP3PjSNIly4WSNONI66KXuX0eD1DBwocg48G8y/bHNKqRFMbApPH+gGrPwQvWSt
goYRFuLCqLV3+lKvH/Afx18A6QD+oIVOGqEqeqbX5keyzD5eIP7QZ3lv3kwWr813
dtQsvstiggW8wwBmGRiwC61xeAqvJaTETH663dHirWREvg9AVwZbBNwqdGyIxTKt
Q7Ir2pES0EmjfUHH4JGC3sYOYpNvAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU7JAS
NxX51qmsaTTsYqoSVKx8PeowHwYDVR0jBBgwFoAUog4gZ/DbeD3jcj4jFRfcfp/l
utMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjZCMEM5L0YxMjY1MThDQkM0MDExRURBQjU5NEVEQ0YxMjIyNDY4L29nNGda
X0RiZUQzamNqNGpGUmZjZnBfbHV0TS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL29nNGdaX0RiZUQzamNqNGpGUmZjZnBfbHV0TS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjZCMEM5L0YxMjY1MThDQkM0MDExRURBQjU5NEVEQ0Yx
MjIyNDY4L0QyRURGQzlDOTY0RTExRjE5OTk2OEFCQ0NFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAApXUgwDQYJKoZIhvcNAQEL
BQADggEBAFLNymsCAAIwIhpHw19HIyuzDMVg7M5iF0BqDNRjXCT76LzjZ86+PgjB
g5astR8NG7yeWKyVD4rcl0R66rrC1AdCszym86SKg3H4YsQIvRZ8hxudD/xxVku4
1eUW2sgZb+tuI06dIGOL1sj4h92+UW3k2nWd9dL7CgYKojMY/eOiTL8N0TqgGyU3
1aeHQWch2jmN7Ucb57z6mva2a3py/71mGv54web5LSL0W9ufNTzx6rbewwTRkXS/
uWVHpY6tmVVbDApRt87tPPNoknQ2IDvdNm+LoN1iYlJsYusFDEAy+kTWlY2ZPWYW
ZcXDfGtnAwgGE2AWQ2irwhZ8vFOwoAY=
-----END CERTIFICATE-----