Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A6D8B/FF55D76EB3DC11F0AD0F1FDCDAE4EC9C/AF0594D8B3DD11F09F4862E0DAE4EC9C.roa
File:                     AF0594D8B3DD11F09F4862E0DAE4EC9C.roa (raw, json)
Hash identifier:          MdmLTScnXjZOY9vtXeiIT0oj5jP4UtOXnGjxtPCm9cw=
Subject key identifier:   16:7A:79:89:3E:4C:D1:D7:A8:D6:2E:34:64:07:A1:3D:4B:EC:66:31
Certificate issuer:       /CN=F36A6D8BAF/serialNumber=45F2E2FDF3113EFC6335757CAF8F5B5EC4ACCDB3
Certificate serial:       04
Authority key identifier: 45:F2:E2:FD:F3:11:3E:FC:63:35:75:7C:AF:8F:5B:5E:C4:AC:CD:B3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/RfLi_fMRPvxjNXV8r49bXsSszbM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A6D8B/FF55D76EB3DC11F0AD0F1FDCDAE4EC9C/AF0594D8B3DD11F09F4862E0DAE4EC9C.roa
Signing time:             Tue 28 Oct 2025 09:08:36 +0000
ROA not before:           Tue 28 Oct 2025 09:08:31 +0000
ROA not after:            Mon 28 Oct 2030 09:08:31 +0000
asID:                     329643
IP address blocks:        2c0f:3cc0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A6D8B/FF55D76EB3DC11F0AD0F1FDCDAE4EC9C/RfLi_fMRPvxjNXV8r49bXsSszbM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A6D8B/FF55D76EB3DC11F0AD0F1FDCDAE4EC9C/RfLi_fMRPvxjNXV8r49bXsSszbM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/RfLi_fMRPvxjNXV8r49bXsSszbM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 06 Nov 2025 06:49:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A6D8BAF, serialNumber=45F2E2FDF3113EFC6335757CAF8F5B5EC4ACCDB3
        Validity
            Not Before: Oct 28 09:08:31 2025 GMT
            Not After : Oct 28 09:08:31 2030 GMT
        Subject: CN=69008814-984f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:8e:22:b7:76:10:ca:8b:0d:0c:12:54:19:0a:
                    59:37:d2:c2:40:f5:93:1d:70:da:1a:c5:c1:63:17:
                    3f:6f:8d:f2:52:86:bd:fb:62:9e:f8:64:c0:82:b9:
                    d4:5c:1e:fd:47:25:11:8a:1f:ee:8e:bb:3d:4c:3d:
                    ea:8a:f7:7e:30:ea:31:81:df:ac:04:1e:9a:6f:dd:
                    75:3b:4e:6e:88:8a:23:62:a7:79:36:63:87:5e:a7:
                    fb:3c:b6:21:0e:dd:b4:7c:6c:39:97:9b:65:f0:34:
                    c1:14:05:4e:da:fb:1f:5c:9b:1a:16:bd:83:b2:3a:
                    68:13:fa:3d:83:8f:96:b0:13:d5:86:57:e0:8b:e9:
                    e1:73:c0:b1:52:5c:7b:13:13:a6:3f:47:b4:03:f6:
                    26:d8:50:8a:0d:c6:68:b0:97:e2:bc:56:fc:d8:ec:
                    b2:cd:62:51:59:95:4e:e3:e6:e2:2f:d4:8e:3e:76:
                    09:6e:56:d1:e4:8f:46:92:70:00:b8:45:f7:04:da:
                    f4:6a:36:5d:97:76:38:9e:72:91:59:c2:3d:54:d6:
                    d1:02:bb:97:ef:0e:a1:a7:a7:1c:eb:b9:96:9b:a3:
                    9a:c0:54:61:4c:b7:0e:69:ee:5f:fd:e1:74:d3:59:
                    ac:1a:13:4e:38:08:c2:cf:e1:0e:e8:fb:a7:85:bb:
                    dc:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:7A:79:89:3E:4C:D1:D7:A8:D6:2E:34:64:07:A1:3D:4B:EC:66:31
            X509v3 Authority Key Identifier:
                keyid:45:F2:E2:FD:F3:11:3E:FC:63:35:75:7C:AF:8F:5B:5E:C4:AC:CD:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A6D8B/FF55D76EB3DC11F0AD0F1FDCDAE4EC9C/RfLi_fMRPvxjNXV8r49bXsSszbM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/RfLi_fMRPvxjNXV8r49bXsSszbM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A6D8B/FF55D76EB3DC11F0AD0F1FDCDAE4EC9C/AF0594D8B3DD11F09F4862E0DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:3cc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         da:e8:c4:c2:6e:15:43:c2:63:24:1c:42:5e:bd:56:f5:50:9b:
         c1:55:99:27:9f:da:be:6c:ba:76:7d:fd:36:f9:ac:48:df:eb:
         7a:61:af:d6:5d:81:d5:55:ef:ff:28:17:9a:6d:ee:59:46:93:
         26:99:55:9e:ee:8f:fb:ee:ec:e3:3e:2d:e6:64:0f:29:07:76:
         b0:d5:59:d4:b4:30:7e:11:51:e3:dd:a5:c4:71:b6:42:71:68:
         1d:68:e2:43:cd:ee:b1:ba:8e:38:f4:a7:21:0c:4c:11:26:8a:
         74:3e:34:8f:b5:74:fb:f1:b8:8a:3e:d5:b6:b2:90:ff:ce:99:
         0c:3a:ff:ce:f7:51:5b:ea:51:e7:87:02:01:bc:f8:04:2b:af:
         b6:57:a6:90:17:75:ef:b6:48:67:2b:37:74:ff:6b:19:a4:df:
         33:6d:79:9b:fb:98:42:38:66:88:9f:92:f8:25:71:84:06:c1:
         cf:1d:9e:36:da:a5:a5:b7:94:9f:a7:50:80:e9:2a:6f:ea:74:
         1c:15:7c:4a:bb:6d:37:27:73:81:7f:21:0c:86:b8:13:e5:1e:
         51:d3:fe:0d:cb:3e:1f:81:1d:2b:da:39:0d:62:9f:6b:a5:0e:
         5f:30:b7:4f:a1:f1:3b:33:b1:52:4c:7e:92:5d:42:87:97:9b:
         2b:db:10:95
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBBDANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzZB
NkQ4QkFGMTEwLwYDVQQFEyg0NUYyRTJGREYzMTEzRUZDNjMzNTc1N0NBRjhGNUI1
RUM0QUNDREIzMB4XDTI1MTAyODA5MDgzMVoXDTMwMTAyODA5MDgzMVowGDEWMBQG
A1UEAxMNNjkwMDg4MTQtOTg0ZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAPOOIrd2EMqLDQwSVBkKWTfSwkD1kx1w2hrFwWMXP2+N8lKGvftinvhkwIK5
1Fwe/UclEYof7o67PUw96or3fjDqMYHfrAQemm/ddTtOboiKI2KneTZjh16n+zy2
IQ7dtHxsOZebZfA0wRQFTtr7H1ybGha9g7I6aBP6PYOPlrAT1YZX4Ivp4XPAsVJc
exMTpj9HtAP2JthQig3GaLCX4rxW/Njsss1iUVmVTuPm4i/Ujj52CW5W0eSPRpJw
ALhF9wTa9Go2XZd2OJ5ykVnCPVTW0QK7l+8OoaenHOu5lpujmsBUYUy3DmnuX/3h
dNNZrBoTTjgIws/hDuj7p4W73FECAwEAAaOCAqYwggKiMB0GA1UdDgQWBBQWenmJ
PkzR16jWLjRkB6E9S+xmMTAfBgNVHSMEGDAWgBRF8uL98xE+/GM1dXyvj1texKzN
szAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2QTZEOEIvRkY1NUQ3NkVCM0RDMTFGMEFEMEYxRkRDREFFNEVDOUMvUmZMaV9m
TVJQdnhqTlhWOHI0OWJYc1NzemJNLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvUmZMaV9mTVJQdnhqTlhWOHI0OWJYc1NzemJNLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QTZEOEIvRkY1NUQ3NkVCM0RDMTFGMEFEMEYxRkRDREFF
NEVDOUMvQUYwNTk0RDhCM0REMTFGMDlGNDg2MkUwREFFNEVDOUMucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACwPPMAwDQYJKoZIhvcNAQEL
BQADggEBANroxMJuFUPCYyQcQl69VvVQm8FVmSef2r5sunZ9/Tb5rEjf63phr9Zd
gdVV7/8oF5pt7llGkyaZVZ7uj/vu7OM+LeZkDykHdrDVWdS0MH4RUePdpcRxtkJx
aB1o4kPN7rG6jjj0pyEMTBEminQ+NI+1dPvxuIo+1baykP/OmQw6/873UVvqUeeH
AgG8+AQrr7ZXppAXde+2SGcrN3T/axmk3zNteZv7mEI4ZoifkvglcYQGwc8dnjba
paW3lJ+nUIDpKm/qdBwVfEq7bTcnc4F/IQyGuBPlHlHT/g3LPh+BHSvaOQ1in2ul
Dl8wt0+h8TszsVJMfpJdQoeXmyvbEJU=
-----END CERTIFICATE-----