Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3680E82/40AC46C4B72211EB9FEA891EF8AEA228/6378438CADEF11F1B06064A3CE1D38B0.roa
File:                     6378438CADEF11F1B06064A3CE1D38B0.roa (raw, json)
Hash identifier:          PAJkk9GbRkENurvt2pMeFb7ahmp2Wf33f+N9WvcQmlI=
Subject key identifier:   57:B3:B2:E3:1F:56:E8:B1:CA:A7:8F:46:62:3D:63:A7:95:3B:D4:E1
Certificate issuer:       /CN=F3680E82AF/serialNumber=902E01876DBC5C693BFE62FBBF67EE6DB6A71831
Certificate serial:       07CF
Authority key identifier: 90:2E:01:87:6D:BC:5C:69:3B:FE:62:FB:BF:67:EE:6D:B6:A7:18:31
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/kC4Bh228XGk7_mL7v2fubbanGDE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3680E82/40AC46C4B72211EB9FEA891EF8AEA228/6378438CADEF11F1B06064A3CE1D38B0.roa
Signing time:             Fri 11 Sep 2026 14:45:11 +0000
ROA not before:           Fri 11 Sep 2026 14:45:06 +0000
ROA not after:            Mon 30 Sep 2030 14:45:06 +0000
asID:                     327775
IP address blocks:        196.49.6.0/24 maxlen: 24
                          2001:43f8:391::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3680E82/40AC46C4B72211EB9FEA891EF8AEA228/kC4Bh228XGk7_mL7v2fubbanGDE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3680E82/40AC46C4B72211EB9FEA891EF8AEA228/kC4Bh228XGk7_mL7v2fubbanGDE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/kC4Bh228XGk7_mL7v2fubbanGDE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 25 Sep 2026 00:08:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1999 (0x7cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3680E82AF, serialNumber=902E01876DBC5C693BFE62FBBF67EE6DB6A71831
        Validity
            Not Before: Sep 11 14:45:06 2026 GMT
            Not After : Sep 30 14:45:06 2030 GMT
        Subject: CN=6aa413f6-c6ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:70:3e:bd:40:ee:0c:f5:24:cb:98:da:60:32:
                    86:00:3a:93:19:b0:3f:ba:d1:bd:e0:bd:54:e4:d4:
                    d2:7b:57:81:3a:d8:08:b9:46:81:51:d2:02:27:47:
                    c3:e8:4e:e7:06:8d:dd:34:71:20:4c:f2:b4:d5:bd:
                    96:3b:c6:1d:32:84:ee:e9:28:5f:3b:d3:12:68:d4:
                    a0:2e:94:b3:c1:07:84:3c:e3:d9:10:2c:e7:11:7e:
                    fa:74:e5:76:37:4c:c9:99:db:10:59:45:53:a4:1d:
                    9e:78:20:94:1e:0a:9e:6d:a2:a6:e7:91:77:ef:59:
                    70:69:f5:c7:01:5c:17:48:d9:57:7b:ba:12:b2:73:
                    4b:c2:41:97:48:13:53:b2:96:9c:04:9a:ad:0b:a2:
                    68:63:49:06:d8:19:d8:cf:14:09:3b:af:0b:4c:85:
                    e6:7b:be:30:09:0c:66:79:6d:53:77:34:e8:e9:74:
                    8c:d5:f2:c8:43:3c:28:14:09:11:ed:7b:4c:a5:28:
                    9f:11:d4:67:1a:f1:0a:2a:d6:54:d9:42:83:ec:b2:
                    2d:45:e0:9e:9b:5c:53:ab:84:2f:55:a4:35:44:8f:
                    ec:46:28:07:e5:de:b1:fb:77:de:96:bd:5a:0b:c6:
                    9c:e0:49:1e:59:21:cb:e2:c7:22:49:88:51:5f:54:
                    2a:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:B3:B2:E3:1F:56:E8:B1:CA:A7:8F:46:62:3D:63:A7:95:3B:D4:E1
            X509v3 Authority Key Identifier:
                keyid:90:2E:01:87:6D:BC:5C:69:3B:FE:62:FB:BF:67:EE:6D:B6:A7:18:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3680E82/40AC46C4B72211EB9FEA891EF8AEA228/kC4Bh228XGk7_mL7v2fubbanGDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kC4Bh228XGk7_mL7v2fubbanGDE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3680E82/40AC46C4B72211EB9FEA891EF8AEA228/6378438CADEF11F1B06064A3CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.49.6.0/24
                IPv6:
                  2001:43f8:391::/48

    Signature Algorithm: sha256WithRSAEncryption
         89:30:70:64:4f:b8:df:5c:90:2e:57:c2:1c:b5:6f:7f:92:16:
         44:65:fe:2c:e9:84:e1:3b:7d:eb:f9:5a:50:48:96:9f:e4:5c:
         a4:97:e5:f9:a0:f1:69:3a:c6:13:a6:e4:27:72:82:72:8b:61:
         02:6c:77:0e:d7:51:f5:ea:42:24:3d:a8:2a:1b:23:db:85:99:
         75:62:f3:2e:bb:bb:01:b2:b5:82:2d:5c:7c:1b:70:64:70:d3:
         ac:a8:9e:2a:57:12:06:a8:50:d8:ff:87:b0:9b:c7:92:e2:ac:
         a7:9f:4c:0b:d2:18:e9:d3:8e:17:42:4a:79:ff:99:f0:50:89:
         47:7d:60:fc:57:8a:58:0d:da:02:e9:a2:07:71:bb:a8:e4:5a:
         83:52:a6:6d:03:0e:dd:38:88:48:48:cb:7c:35:37:be:4e:7c:
         bf:c9:35:5f:9f:c2:f2:c5:2f:72:40:23:69:df:dd:0a:bc:17:
         bc:c9:ec:54:1c:e1:2d:21:07:6e:ec:e0:42:4f:05:ee:f0:b2:
         c2:da:62:6c:9f:10:bc:77:7c:a2:c7:ca:1f:67:5a:af:b3:43:
         d2:f3:e5:a7:01:a6:1c:1d:06:06:fd:d2:60:f9:f4:2d:a4:a5:
         57:2e:a4:bd:19:29:d3:9b:ec:9b:7d:98:c7:26:af:7d:cd:05:
         35:9e:ec:4f
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgICB88wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODBFODJBRjExMC8GA1UEBRMoOTAyRTAxODc2REJDNUM2OTNCRkU2MkZCQkY2N0VF
NkRCNkE3MTgzMTAeFw0yNjA5MTExNDQ1MDZaFw0zMDA5MzAxNDQ1MDZaMBgxFjAU
BgNVBAMTDTZhYTQxM2Y2LWM2Y2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDQcD69QO4M9STLmNpgMoYAOpMZsD+60b3gvVTk1NJ7V4E62Ai5RoFR0gIn
R8PoTucGjd00cSBM8rTVvZY7xh0yhO7pKF870xJo1KAulLPBB4Q849kQLOcRfvp0
5XY3TMmZ2xBZRVOkHZ54IJQeCp5toqbnkXfvWXBp9ccBXBdI2Vd7uhKyc0vCQZdI
E1OylpwEmq0LomhjSQbYGdjPFAk7rwtMheZ7vjAJDGZ5bVN3NOjpdIzV8shDPCgU
CRHte0ylKJ8R1Gca8Qoq1lTZQoPssi1F4J6bXFOrhC9VpDVEj+xGKAfl3rH7d96W
vVoLxpzgSR5ZIcvixyJJiFFfVCpHAgMBAAGjggK2MIICsjAdBgNVHQ4EFgQUV7Oy
4x9W6LHKp49GYj1jp5U71OEwHwYDVR0jBBgwFoAUkC4Bh228XGk7/mL7v2fubban
GDEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgwRTgyLzQwQUM0NkM0QjcyMjExRUI5RkVBODkxRUY4QUVBMjI4L2tDNEJo
MjI4WEdrN19tTDd2MmZ1YmJhbkdERS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2tDNEJoMjI4WEdrN19tTDd2MmZ1YmJhbkdERS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgwRTgyLzQwQUM0NkM0QjcyMjExRUI5RkVBODkxRUY4
QUVBMjI4LzYzNzg0MzhDQURFRjExRjFCMDYwNjRBM0NFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYDBADEMQYwDwQCAAIwCQMHACAB
Q/gDkTANBgkqhkiG9w0BAQsFAAOCAQEAiTBwZE+431yQLlfCHLVvf5IWRGX+LOmE
4Tt96/laUEiWn+RcpJfl+aDxaTrGE6bkJ3KCcothAmx3DtdR9epCJD2oKhsj24WZ
dWLzLru7AbK1gi1cfBtwZHDTrKieKlcSBqhQ2P+HsJvHkuKsp59MC9IY6dOOF0JK
ef+Z8FCJR31g/FeKWA3aAumiB3G7qORag1KmbQMO3TiISEjLfDU3vk58v8k1X5/C
8sUvckAjad/dCrwXvMnsVBzhLSEHbuzgQk8F7vCywtpibJ8QvHd8osfKH2dar7ND
0vPlpwGmHB0GBv3SYPn0LaSlVy6kvRkp05vsm32Yxyavfc0FNZ7sTw==
-----END CERTIFICATE-----