Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F367FC4F/442A9E2080BF11E6AB3BA07EF8AEA228/F41E5A14AC2A11F1A3B489F0CE1D38B0.roa
File:                     F41E5A14AC2A11F1A3B489F0CE1D38B0.roa (raw, json)
Hash identifier:          bSJajOlFeD07gXvyHU9Q99GHB+S6K36/agJyJ4Aq9tA=
Subject key identifier:   72:6F:17:88:63:1C:BC:D4:92:B4:CF:F3:84:60:FB:D6:29:9F:22:C4
Certificate issuer:       /CN=F367FC4FAF/serialNumber=E1732D97D136171362B0518F6A2144545CBF3A4F
Certificate serial:       0E88
Authority key identifier: E1:73:2D:97:D1:36:17:13:62:B0:51:8F:6A:21:44:54:5C:BF:3A:4F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/4XMtl9E2FxNisFGPaiFEVFy_Ok8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367FC4F/442A9E2080BF11E6AB3BA07EF8AEA228/F41E5A14AC2A11F1A3B489F0CE1D38B0.roa
Signing time:             Wed 09 Sep 2026 08:46:31 +0000
ROA not before:           Wed 09 Sep 2026 08:46:27 +0000
ROA not after:            Tue 09 Sep 2036 08:46:27 +0000
asID:                     328039
IP address blocks:        2c0f:f288::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367FC4F/442A9E2080BF11E6AB3BA07EF8AEA228/4XMtl9E2FxNisFGPaiFEVFy_Ok8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367FC4F/442A9E2080BF11E6AB3BA07EF8AEA228/4XMtl9E2FxNisFGPaiFEVFy_Ok8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/4XMtl9E2FxNisFGPaiFEVFy_Ok8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 01:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3720 (0xe88)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367FC4FAF, serialNumber=E1732D97D136171362B0518F6A2144545CBF3A4F
        Validity
            Not Before: Sep  9 08:46:27 2026 GMT
            Not After : Sep  9 08:46:27 2036 GMT
        Subject: CN=6aa11ce7-607b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:b0:f9:fc:c1:fd:cc:92:b5:66:6e:7c:87:08:
                    b2:9f:95:ba:61:c5:32:ea:09:67:68:ab:d3:1f:46:
                    b5:ea:19:e0:b4:a7:25:c3:cf:3b:eb:6a:ca:98:44:
                    c0:db:d2:f2:fb:3b:e7:24:0e:17:bf:2a:ca:30:13:
                    8d:70:19:36:a5:4c:bc:94:f5:27:9d:bc:28:d5:29:
                    34:d1:09:20:2f:91:e3:9f:1f:65:08:51:f3:3b:04:
                    bb:a1:3f:ad:af:38:9c:4d:2d:6a:b1:3f:b5:61:ad:
                    05:15:19:87:5f:bd:07:ac:1e:c0:8e:ee:8a:97:6f:
                    34:93:00:a6:d9:18:f0:be:db:0f:18:56:a8:7b:c4:
                    21:0c:ea:49:0a:85:e9:9a:ff:22:5b:8f:e7:4c:c3:
                    18:33:34:24:60:46:d6:73:40:f9:79:28:ea:f3:1a:
                    ac:eb:27:b6:7d:54:e9:d2:35:94:e9:a1:e3:26:ce:
                    e9:ae:39:a9:c0:92:93:5c:3d:74:8c:7e:e7:f4:58:
                    84:51:1f:9a:a3:67:20:93:0b:10:23:7f:d3:0c:08:
                    16:b7:2e:31:42:05:3f:cc:c6:dc:14:63:14:07:b7:
                    32:47:09:9b:af:a5:39:59:76:82:48:36:31:63:aa:
                    a6:10:5c:0a:be:d6:5b:e9:31:ca:bb:86:30:4e:05:
                    9f:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:6F:17:88:63:1C:BC:D4:92:B4:CF:F3:84:60:FB:D6:29:9F:22:C4
            X509v3 Authority Key Identifier:
                keyid:E1:73:2D:97:D1:36:17:13:62:B0:51:8F:6A:21:44:54:5C:BF:3A:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367FC4F/442A9E2080BF11E6AB3BA07EF8AEA228/4XMtl9E2FxNisFGPaiFEVFy_Ok8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4XMtl9E2FxNisFGPaiFEVFy_Ok8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367FC4F/442A9E2080BF11E6AB3BA07EF8AEA228/F41E5A14AC2A11F1A3B489F0CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:f288::/32

    Signature Algorithm: sha256WithRSAEncryption
         40:57:e5:ae:e0:dc:78:3f:43:66:a0:89:4c:51:75:53:8f:a0:
         70:7f:f9:77:61:ad:f3:aa:cd:ad:0e:ad:a7:2d:c4:a9:fd:6a:
         cc:f4:14:ad:29:56:e2:e4:f2:88:29:9c:c8:08:93:86:9d:bd:
         18:a0:1f:da:72:1d:ef:ae:75:fa:5c:1d:2a:ce:e7:47:d3:f4:
         58:87:0f:9a:cb:8d:c3:a7:57:76:e4:6c:2d:bc:04:ef:85:f4:
         b8:2c:ed:42:40:d5:4a:93:8c:aa:34:fa:0b:80:03:f6:1d:ad:
         8e:24:ba:02:78:2c:9d:a3:ab:cb:ac:2a:28:b6:8d:6c:80:cb:
         d9:6c:36:d0:49:a3:cb:e9:f6:29:9f:5a:f8:ca:8e:2a:7f:4c:
         43:78:05:3f:5b:20:81:2c:c5:c0:fb:6e:fc:81:d3:12:81:4e:
         f8:71:88:e6:51:29:c3:f9:b9:1c:2e:18:c7:0d:fc:b4:da:e0:
         0e:27:aa:f1:a6:42:d7:67:48:8d:8b:59:95:7c:6a:6b:83:9b:
         df:56:99:2f:ed:a6:df:d4:e6:35:2c:fa:9a:54:ef:b7:99:3e:
         31:56:fc:a2:07:3d:f8:8c:90:3a:86:ee:c4:a2:e0:a7:09:e4:
         a7:91:7c:77:ea:83:57:eb:3a:3e:ed:ce:48:91:04:70:f6:e6:
         b6:04:1e:02
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDogwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
N0ZDNEZBRjExMC8GA1UEBRMoRTE3MzJEOTdEMTM2MTcxMzYyQjA1MThGNkEyMTQ0
NTQ1Q0JGM0E0RjAeFw0yNjA5MDkwODQ2MjdaFw0zNjA5MDkwODQ2MjdaMBgxFjAU
BgNVBAMTDTZhYTExY2U3LTYwN2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDYsPn8wf3MkrVmbnyHCLKflbphxTLqCWdoq9MfRrXqGeC0pyXDzzvrasqY
RMDb0vL7O+ckDhe/KsowE41wGTalTLyU9SedvCjVKTTRCSAvkeOfH2UIUfM7BLuh
P62vOJxNLWqxP7VhrQUVGYdfvQesHsCO7oqXbzSTAKbZGPC+2w8YVqh7xCEM6kkK
hema/yJbj+dMwxgzNCRgRtZzQPl5KOrzGqzrJ7Z9VOnSNZTpoeMmzumuOanAkpNc
PXSMfuf0WIRRH5qjZyCTCxAjf9MMCBa3LjFCBT/MxtwUYxQHtzJHCZuvpTlZdoJI
NjFjqqYQXAq+1lvpMcq7hjBOBZ9dAgMBAAGjggKmMIICojAdBgNVHQ4EFgQUcm8X
iGMcvNSStM/zhGD71imfIsQwHwYDVR0jBBgwFoAU4XMtl9E2FxNisFGPaiFEVFy/
Ok8wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjdGQzRGLzQ0MkE5RTIwODBCRjExRTZBQjNCQTA3RUY4QUVBMjI4LzRYTXRs
OUUyRnhOaXNGR1BhaUZFVkZ5X09rOC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzRYTXRsOUUyRnhOaXNGR1BhaUZFVkZ5X09rOC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjdGQzRGLzQ0MkE5RTIwODBCRjExRTZBQjNCQTA3RUY4
QUVBMjI4L0Y0MUU1QTE0QUMyQTExRjFBM0I0ODlGMENFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAsD/KIMA0GCSqGSIb3DQEB
CwUAA4IBAQBAV+Wu4Nx4P0NmoIlMUXVTj6Bwf/l3Ya3zqs2tDq2nLcSp/WrM9BSt
KVbi5PKIKZzICJOGnb0YoB/ach3vrnX6XB0qzudH0/RYhw+ay43Dp1d25GwtvATv
hfS4LO1CQNVKk4yqNPoLgAP2Ha2OJLoCeCydo6vLrCooto1sgMvZbDbQSaPL6fYp
n1r4yo4qf0xDeAU/WyCBLMXA+278gdMSgU74cYjmUSnD+bkcLhjHDfy02uAOJ6rx
pkLXZ0iNi1mVfGprg5vfVpkv7abf1OY1LPqaVO+3mT4xVvyiBz34jJA6hu7EouCn
CeSnkXx36oNX6zo+7c5IkQRw9ua2BB4C
-----END CERTIFICATE-----