Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/E4C5FF60965211F1906D69D5CE1D38B0.roa
File:                     E4C5FF60965211F1906D69D5CE1D38B0.roa (raw, json)
Hash identifier:          6Q3VI0zTOvrmijMD5CMU7nIvjfUcjzl1TMQp2+JoLig=
Subject key identifier:   42:4B:D7:D1:5F:3C:1B:50:DD:56:1B:89:26:C2:D8:6D:16:9C:99:06
Certificate issuer:       /CN=F366B0C9AF/serialNumber=A20E2067F0DB783DE3723E231517DC7E9FE5BAD3
Certificate serial:       05BE
Authority key identifier: A2:0E:20:67:F0:DB:78:3D:E3:72:3E:23:15:17:DC:7E:9F:E5:BA:D3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/og4gZ_DbeD3jcj4jFRfcfp_lutM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/E4C5FF60965211F1906D69D5CE1D38B0.roa
Signing time:             Wed 12 Aug 2026 13:37:00 +0000
ROA not before:           Wed 12 Aug 2026 13:36:56 +0000
ROA not after:            Thu 31 Mar 2033 13:36:56 +0000
asID:                     37182
IP address blocks:        41.93.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/og4gZ_DbeD3jcj4jFRfcfp_lutM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/og4gZ_DbeD3jcj4jFRfcfp_lutM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/og4gZ_DbeD3jcj4jFRfcfp_lutM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 03:17:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1470 (0x5be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366B0C9AF, serialNumber=A20E2067F0DB783DE3723E231517DC7E9FE5BAD3
        Validity
            Not Before: Aug 12 13:36:56 2026 GMT
            Not After : Mar 31 13:36:56 2033 GMT
        Subject: CN=6a7c76fc-d694
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a0:bb:22:fc:88:9a:ac:47:e4:df:d8:c8:58:
                    da:ff:da:5c:71:ff:4d:4f:0b:e7:4a:09:6e:62:9b:
                    77:9a:6d:cc:26:99:07:1a:c0:f4:4a:5e:54:f7:c1:
                    02:c3:86:51:af:d9:d8:b5:26:cf:65:81:6d:8e:ed:
                    85:b0:8a:0e:81:81:d9:18:6d:fc:aa:05:34:01:1c:
                    a7:2c:17:91:a2:81:c2:43:72:0a:21:13:7d:e9:ec:
                    59:bc:8d:09:d7:9c:1a:9e:1b:97:ac:c2:3a:34:ca:
                    cc:4b:fa:a4:b3:0c:b7:b4:2d:88:f6:aa:15:5f:d3:
                    71:dc:b5:c6:c9:5a:de:18:80:cf:ac:0e:c0:25:13:
                    2a:c8:c8:c6:3b:c6:2f:94:41:6f:0b:6e:f9:9d:7a:
                    b1:f8:af:c5:01:d4:3f:38:60:06:74:5d:b3:f5:4d:
                    71:39:d5:b2:b0:8d:fa:5a:08:e0:b7:72:38:9f:25:
                    62:1b:10:cc:b5:cc:28:00:95:b0:97:fe:a8:72:e3:
                    ef:c9:8c:29:fd:91:16:5f:94:af:a9:0a:47:ea:f2:
                    62:b6:71:ee:ed:46:b2:5b:a5:2a:09:c5:d2:5f:56:
                    90:2b:ab:8a:04:15:25:e5:f4:24:a5:ff:80:78:65:
                    ad:ab:53:1c:ba:b1:f4:ed:c6:92:95:2f:4c:c9:7e:
                    55:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:4B:D7:D1:5F:3C:1B:50:DD:56:1B:89:26:C2:D8:6D:16:9C:99:06
            X509v3 Authority Key Identifier:
                keyid:A2:0E:20:67:F0:DB:78:3D:E3:72:3E:23:15:17:DC:7E:9F:E5:BA:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/og4gZ_DbeD3jcj4jFRfcfp_lutM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/og4gZ_DbeD3jcj4jFRfcfp_lutM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/E4C5FF60965211F1906D69D5CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.93.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:cc:b1:09:7e:3e:14:b8:ea:f8:53:37:da:bd:b4:00:6b:e1:
         05:b1:8d:c1:68:67:d6:4c:38:10:95:a9:70:48:89:44:04:52:
         af:fc:93:e7:f6:26:51:12:ee:37:06:92:f5:70:99:96:58:5a:
         e9:94:c6:31:17:af:60:e7:11:ff:21:58:8b:0b:3f:3f:f0:86:
         55:e6:a6:41:87:a7:f9:be:5c:e6:a1:6e:e6:70:91:85:c4:8d:
         6d:37:6b:09:34:80:da:0c:27:23:03:53:8a:0e:04:c8:30:70:
         62:39:a9:ca:e8:1f:73:f9:bd:c9:12:e3:e5:09:20:6f:2c:3f:
         9e:71:5c:64:c9:88:e1:92:e9:20:6d:d7:dd:47:01:f2:05:f6:
         77:4d:9a:0f:29:59:49:99:47:37:c2:ed:6e:04:d5:1e:a0:b6:
         d0:f0:79:cb:62:46:27:b1:51:2b:a7:eb:45:b7:d3:43:b0:76:
         c7:9f:7e:e0:59:6e:b7:bf:16:98:58:76:c9:73:9d:b7:47:02:
         5f:b3:43:8d:40:90:4b:4b:9c:3e:ff:b5:86:66:64:8c:32:7f:
         13:a4:59:41:a0:c5:34:f0:ad:fe:c8:5a:66:be:a4:b8:02:df:
         a7:32:5b:46:7e:a4:89:9b:07:3f:5f:1c:b5:98:55:ae:08:6e:
         3b:78:c7:d1
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBb4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NkIwQzlBRjExMC8GA1UEBRMoQTIwRTIwNjdGMERCNzgzREUzNzIzRTIzMTUxN0RD
N0U5RkU1QkFEMzAeFw0yNjA4MTIxMzM2NTZaFw0zMzAzMzExMzM2NTZaMBgxFjAU
BgNVBAMTDTZhN2M3NmZjLWQ2OTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDBoLsi/IiarEfk39jIWNr/2lxx/01PC+dKCW5im3eabcwmmQcawPRKXlT3
wQLDhlGv2di1Js9lgW2O7YWwig6BgdkYbfyqBTQBHKcsF5GigcJDcgohE33p7Fm8
jQnXnBqeG5eswjo0ysxL+qSzDLe0LYj2qhVf03HctcbJWt4YgM+sDsAlEyrIyMY7
xi+UQW8LbvmderH4r8UB1D84YAZ0XbP1TXE51bKwjfpaCOC3cjifJWIbEMy1zCgA
lbCX/qhy4+/JjCn9kRZflK+pCkfq8mK2ce7tRrJbpSoJxdJfVpArq4oEFSXl9CSl
/4B4Za2rUxy6sfTtxpKVL0zJflVlAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUQkvX
0V88G1DdVhuJJsLYbRacmQYwHwYDVR0jBBgwFoAUog4gZ/DbeD3jcj4jFRfcfp/l
utMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjZCMEM5L0YxMjY1MThDQkM0MDExRURBQjU5NEVEQ0YxMjIyNDY4L29nNGda
X0RiZUQzamNqNGpGUmZjZnBfbHV0TS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL29nNGdaX0RiZUQzamNqNGpGUmZjZnBfbHV0TS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjZCMEM5L0YxMjY1MThDQkM0MDExRURBQjU5NEVEQ0Yx
MjIyNDY4L0U0QzVGRjYwOTY1MjExRjE5MDZENjlENUNFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAApXT0wDQYJKoZIhvcNAQEL
BQADggEBAFjMsQl+PhS46vhTN9q9tABr4QWxjcFoZ9ZMOBCVqXBIiUQEUq/8k+f2
JlES7jcGkvVwmZZYWumUxjEXr2DnEf8hWIsLPz/whlXmpkGHp/m+XOahbuZwkYXE
jW03awk0gNoMJyMDU4oOBMgwcGI5qcroH3P5vckS4+UJIG8sP55xXGTJiOGS6SBt
191HAfIF9ndNmg8pWUmZRzfC7W4E1R6gttDwectiRiexUSun60W300OwdseffuBZ
bre/FphYdslznbdHAl+zQ41AkEtLnD7/tYZmZIwyfxOkWUGgxTTwrf7IWma+pLgC
36cyW0Z+pImbBz9fHLWYVa4Ibjt4x9E=
-----END CERTIFICATE-----