Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A36C8/82AA150A210E11ECA6F7CC17D8A014CE/4A1B2D24930911F1A319F3EFCE1D38B0.roa
File:                     4A1B2D24930911F1A319F3EFCE1D38B0.roa (raw, json)
Hash identifier:          AkimXIP/uS4Nccyl+y8kNe8IaUw9M0TQEHArv02dMl4=
Subject key identifier:   28:0C:A7:39:11:DD:AB:7A:54:AA:3A:5D:83:23:C1:72:05:42:78:98
Certificate issuer:       /CN=F36A36C8AF/serialNumber=47FB9F31CF4F2D19711C84D32E23BD006E002E96
Certificate serial:       0727
Authority key identifier: 47:FB:9F:31:CF:4F:2D:19:71:1C:84:D3:2E:23:BD:00:6E:00:2E:96
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/R_ufMc9PLRlxHITTLiO9AG4ALpY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A36C8/82AA150A210E11ECA6F7CC17D8A014CE/4A1B2D24930911F1A319F3EFCE1D38B0.roa
Signing time:             Sat 08 Aug 2026 09:12:33 +0000
ROA not before:           Sat 08 Aug 2026 09:12:30 +0000
ROA not after:            Wed 30 Sep 2026 09:12:30 +0000
asID:                     21491
IP address blocks:        196.0.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A36C8/82AA150A210E11ECA6F7CC17D8A014CE/R_ufMc9PLRlxHITTLiO9AG4ALpY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A36C8/82AA150A210E11ECA6F7CC17D8A014CE/R_ufMc9PLRlxHITTLiO9AG4ALpY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/R_ufMc9PLRlxHITTLiO9AG4ALpY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1831 (0x727)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A36C8AF, serialNumber=47FB9F31CF4F2D19711C84D32E23BD006E002E96
        Validity
            Not Before: Aug  8 09:12:30 2026 GMT
            Not After : Sep 30 09:12:30 2026 GMT
        Subject: CN=6a76f301-3cbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:4b:27:05:7a:36:c5:35:20:d3:44:fe:6c:36:
                    2a:4e:e5:7d:c5:7d:1e:60:f3:99:85:cc:d1:59:49:
                    04:13:a5:9f:73:44:dc:78:a1:76:e3:47:65:01:6d:
                    e2:0b:6e:06:35:27:97:8c:44:79:6d:b5:fc:cc:1e:
                    32:63:88:cb:b0:d3:b0:f5:79:a0:ca:bf:74:0f:e4:
                    b4:f9:d5:b9:c9:f0:9a:54:45:23:72:2a:54:50:09:
                    e3:da:f0:e7:61:17:cb:14:13:cd:2f:a7:72:12:71:
                    f1:78:2c:96:61:71:21:60:94:c2:a8:29:f1:5d:b0:
                    11:7a:cd:5b:fd:0e:a3:de:ea:16:67:3c:83:c6:c8:
                    7c:5e:ea:37:7a:11:98:00:58:26:d9:99:b1:bc:62:
                    db:22:d4:0f:e8:64:e1:ae:42:ad:5a:02:a4:0f:38:
                    77:df:08:03:39:23:e4:91:ec:ba:d3:29:e9:62:c2:
                    81:21:61:ee:8a:df:5b:38:f8:84:aa:9b:ee:4e:c1:
                    2e:c6:0a:d5:78:83:4d:3b:2f:ec:68:b6:21:44:65:
                    74:7f:c4:74:74:a4:57:61:24:d3:70:e5:7e:23:5c:
                    26:3a:c0:6a:49:41:7d:aa:38:52:0f:30:d4:e3:12:
                    ba:47:cb:4f:46:e1:35:e9:51:08:db:53:ab:79:22:
                    67:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:0C:A7:39:11:DD:AB:7A:54:AA:3A:5D:83:23:C1:72:05:42:78:98
            X509v3 Authority Key Identifier:
                keyid:47:FB:9F:31:CF:4F:2D:19:71:1C:84:D3:2E:23:BD:00:6E:00:2E:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A36C8/82AA150A210E11ECA6F7CC17D8A014CE/R_ufMc9PLRlxHITTLiO9AG4ALpY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/R_ufMc9PLRlxHITTLiO9AG4ALpY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A36C8/82AA150A210E11ECA6F7CC17D8A014CE/4A1B2D24930911F1A319F3EFCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.0.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         6e:3a:4d:f8:7c:fc:1d:08:69:d6:14:d7:e3:03:ae:3d:3c:2d:
         f2:c5:4c:d9:ad:29:20:55:47:5e:eb:a1:2b:d4:03:b1:16:ed:
         86:6f:d8:d2:44:3a:b6:02:44:33:af:b0:51:0e:ba:49:7f:b1:
         ca:75:3e:c1:7c:4a:d1:7a:8f:32:77:34:18:c0:27:07:22:c0:
         61:83:df:a2:a7:f2:f7:47:1c:b7:1e:98:0e:95:e9:32:96:ba:
         3a:a2:8f:65:a0:f4:2c:96:eb:6a:6e:4d:dd:df:6e:af:70:5b:
         9e:dc:f5:f5:5f:ed:0c:65:cf:1b:8a:f9:5b:bc:fc:09:67:02:
         1c:8c:ad:54:f5:c1:5e:87:7e:04:39:f7:fa:5f:1b:2f:fb:aa:
         a4:17:4e:cd:b4:5b:34:04:10:9f:c8:35:a5:0a:63:2b:54:99:
         cb:3a:64:02:cf:88:79:e4:cd:8a:5a:fb:f0:d0:ac:ef:26:39:
         b2:52:56:5a:b5:d6:36:e4:09:08:a2:7b:22:c5:c9:15:64:05:
         c6:61:3b:d5:9c:1f:8c:8e:b5:bd:0f:90:b7:c3:5f:49:66:d9:
         8f:53:8a:5d:c9:8b:3f:6f:65:8a:b1:34:7c:80:4a:bd:66:64:
         69:b5:99:8f:07:e7:44:16:33:32:3e:d6:1e:6c:eb:db:c1:c7:
         75:ee:3e:4c
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgICBycwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QTM2QzhBRjExMC8GA1UEBRMoNDdGQjlGMzFDRjRGMkQxOTcxMUM4NEQzMkUyM0JE
MDA2RTAwMkU5NjAeFw0yNjA4MDgwOTEyMzBaFw0yNjA5MzAwOTEyMzBaMBgxFjAU
BgNVBAMTDTZhNzZmMzAxLTNjYmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCZSycFejbFNSDTRP5sNipO5X3FfR5g85mFzNFZSQQTpZ9zRNx4oXbjR2UB
beILbgY1J5eMRHlttfzMHjJjiMuw07D1eaDKv3QP5LT51bnJ8JpURSNyKlRQCePa
8OdhF8sUE80vp3IScfF4LJZhcSFglMKoKfFdsBF6zVv9DqPe6hZnPIPGyHxe6jd6
EZgAWCbZmbG8Ytsi1A/oZOGuQq1aAqQPOHffCAM5I+SR7LrTKeliwoEhYe6K31s4
+ISqm+5OwS7GCtV4g007L+xotiFEZXR/xHR0pFdhJNNw5X4jXCY6wGpJQX2qOFIP
MNTjErpHy09G4TXpUQjbU6t5ImftAgMBAAGjggKkMIICoDAdBgNVHQ4EFgQUKAyn
ORHdq3pUqjpdgyPBcgVCeJgwHwYDVR0jBBgwFoAUR/ufMc9PLRlxHITTLiO9AG4A
LpYwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkEzNkM4LzgyQUExNTBBMjEwRTExRUNBNkY3Q0MxN0Q4QTAxNENFL1JfdWZN
YzlQTFJseEhJVFRMaU85QUc0QUxwWS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1JfdWZNYzlQTFJseEhJVFRMaU85QUc0QUxwWS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkEzNkM4LzgyQUExNTBBMjEwRTExRUNBNkY3Q0MxN0Q4
QTAxNENFLzRBMUIyRDI0OTMwOTExRjFBMzE5RjNFRkNFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwDEADANBgkqhkiG9w0BAQsF
AAOCAQEAbjpN+Hz8HQhp1hTX4wOuPTwt8sVM2a0pIFVHXuuhK9QDsRbthm/Y0kQ6
tgJEM6+wUQ66SX+xynU+wXxK0XqPMnc0GMAnByLAYYPfoqfy90cctx6YDpXpMpa6
OqKPZaD0LJbram5N3d9ur3Bbntz19V/tDGXPG4r5W7z8CWcCHIytVPXBXod+BDn3
+l8bL/uqpBdOzbRbNAQQn8g1pQpjK1SZyzpkAs+IeeTNilr78NCs7yY5slJWWrXW
NuQJCKJ7IsXJFWQFxmE71ZwfjI61vQ+Qt8NfSWbZj1OKXcmLP29lirE0fIBKvWZk
abWZjwfnRBYzMj7WHmzr28HHde4+TA==
-----END CERTIFICATE-----