Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36AE219/52BAC3D8231011EF92871F3A7DDC24C2/3128F838389511F1B959E80BCF1D38B0.roa
File:                     3128F838389511F1B959E80BCF1D38B0.roa (raw, json)
Hash identifier:          o3mY/PHhe4PtkVQyaPKBNxFpCBc+yL0m9QVPhkGqaLs=
Subject key identifier:   97:E4:3D:94:69:06:3F:E5:7A:1D:0F:47:2D:48:89:E8:1B:E1:4D:DA
Certificate issuer:       /CN=F36AE219AF/serialNumber=91C99E457967B9929B2EDE7979728B0FE2639AD9
Certificate serial:       02D3
Authority key identifier: 91:C9:9E:45:79:67:B9:92:9B:2E:DE:79:79:72:8B:0F:E2:63:9A:D9
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/kcmeRXlnuZKbLt55eXKLD-Jjmtk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36AE219/52BAC3D8231011EF92871F3A7DDC24C2/3128F838389511F1B959E80BCF1D38B0.roa
Signing time:             Wed 15 Apr 2026 06:34:45 +0000
ROA not before:           Wed 15 Apr 2026 06:34:41 +0000
ROA not after:            Tue 15 Apr 2036 06:34:41 +0000
asID:                     329278
IP address blocks:        2c0f:4440::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36AE219/52BAC3D8231011EF92871F3A7DDC24C2/kcmeRXlnuZKbLt55eXKLD-Jjmtk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36AE219/52BAC3D8231011EF92871F3A7DDC24C2/kcmeRXlnuZKbLt55eXKLD-Jjmtk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/kcmeRXlnuZKbLt55eXKLD-Jjmtk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Apr 2026 04:12:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 723 (0x2d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36AE219AF, serialNumber=91C99E457967B9929B2EDE7979728B0FE2639AD9
        Validity
            Not Before: Apr 15 06:34:41 2026 GMT
            Not After : Apr 15 06:34:41 2036 GMT
        Subject: CN=69df3185-ede6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:4c:80:2a:c1:c8:1a:16:27:70:a8:7c:24:a5:
                    6f:cf:87:82:79:9f:d6:c5:4d:8c:d5:ba:20:ca:ed:
                    18:48:9c:01:47:38:bf:c2:8d:09:41:91:c2:d5:1f:
                    66:bd:d6:46:cf:81:5e:16:b9:fa:d6:8b:d3:18:e3:
                    ec:36:f7:6a:dc:f8:43:64:b5:4b:58:66:34:96:23:
                    41:6a:64:d4:9c:6c:b0:3b:af:7a:fd:1d:24:74:0a:
                    0b:5a:1d:2b:c3:9a:6e:d4:57:5b:7c:29:02:55:ff:
                    31:e5:47:74:2e:48:17:97:2a:66:69:16:15:47:30:
                    75:56:75:79:19:c4:2e:c0:f6:9d:01:c6:f7:87:ad:
                    f2:09:19:0f:87:ab:98:f8:31:10:d7:2c:56:33:da:
                    c3:00:59:88:59:89:bf:38:e1:c8:b6:04:60:11:40:
                    ba:d1:a4:09:89:f1:18:21:c0:bf:6d:38:34:00:e2:
                    01:95:1b:dd:73:ac:e8:61:00:9b:5b:0a:f3:34:7a:
                    6d:50:9f:49:bb:2c:04:5e:a9:41:0d:da:0b:e5:7a:
                    8e:4f:1c:19:f2:1c:c4:b8:9a:c1:1c:a4:3c:c9:1b:
                    4a:78:41:e0:7e:7f:9a:02:26:57:e9:05:3f:36:76:
                    ea:91:af:ab:09:bb:73:82:d9:dd:56:6b:10:98:07:
                    dd:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:E4:3D:94:69:06:3F:E5:7A:1D:0F:47:2D:48:89:E8:1B:E1:4D:DA
            X509v3 Authority Key Identifier:
                keyid:91:C9:9E:45:79:67:B9:92:9B:2E:DE:79:79:72:8B:0F:E2:63:9A:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36AE219/52BAC3D8231011EF92871F3A7DDC24C2/kcmeRXlnuZKbLt55eXKLD-Jjmtk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kcmeRXlnuZKbLt55eXKLD-Jjmtk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AE219/52BAC3D8231011EF92871F3A7DDC24C2/3128F838389511F1B959E80BCF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:4440::/32

    Signature Algorithm: sha256WithRSAEncryption
         5a:63:9f:ad:9e:2a:5d:9c:90:3d:7f:4f:6b:49:2d:b9:9a:df:
         8a:6b:4e:9e:ad:50:5d:82:f1:7f:85:5b:e9:43:96:03:65:3c:
         26:d2:fb:12:cc:18:ba:f8:3b:94:e0:41:ff:56:32:09:e8:92:
         a3:dd:35:eb:5c:1b:15:50:ab:67:82:67:c2:6c:45:6e:97:79:
         bb:d8:21:ce:00:59:4b:c7:e1:2b:e2:84:e4:71:69:76:df:53:
         0c:4d:98:8b:78:84:fb:5a:a5:f2:e2:cc:f0:b9:2c:f5:b6:f4:
         a5:6a:11:f6:9e:07:7d:f0:24:6a:26:a9:cb:94:41:eb:70:ff:
         f8:5e:be:a5:5b:fa:df:a0:eb:66:dd:87:b8:f1:fa:79:b5:7b:
         ce:a0:2f:ad:88:fc:20:5d:e3:bd:44:39:6c:73:dd:52:55:a5:
         17:0c:f2:c8:e0:8c:c0:09:f9:53:9f:c4:30:4e:1e:1e:ab:dc:
         87:e2:8d:b8:8c:2c:93:0b:23:9a:32:b5:b9:e7:5f:11:1b:df:
         84:66:11:34:cf:5b:3e:4e:f7:0c:6b:53:a6:99:b8:1c:cb:12:
         8f:ef:26:1b:b1:47:df:6d:7f:13:ec:dc:3c:28:41:20:45:28:
         cd:65:16:2b:fe:11:9b:62:2a:67:99:c4:20:8c:b7:5a:d5:39:
         05:88:59:0d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAtMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QUUyMTlBRjExMC8GA1UEBRMoOTFDOTlFNDU3OTY3Qjk5MjlCMkVERTc5Nzk3MjhC
MEZFMjYzOUFEOTAeFw0yNjA0MTUwNjM0NDFaFw0zNjA0MTUwNjM0NDFaMBgxFjAU
BgNVBAMTDTY5ZGYzMTg1LWVkZTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDBTIAqwcgaFidwqHwkpW/Ph4J5n9bFTYzVuiDK7RhInAFHOL/CjQlBkcLV
H2a91kbPgV4WufrWi9MY4+w292rc+ENktUtYZjSWI0FqZNScbLA7r3r9HSR0Cgta
HSvDmm7UV1t8KQJV/zHlR3QuSBeXKmZpFhVHMHVWdXkZxC7A9p0BxveHrfIJGQ+H
q5j4MRDXLFYz2sMAWYhZib844ci2BGARQLrRpAmJ8RghwL9tODQA4gGVG91zrOhh
AJtbCvM0em1Qn0m7LAReqUEN2gvleo5PHBnyHMS4msEcpDzJG0p4QeB+f5oCJlfp
BT82duqRr6sJu3OC2d1WaxCYB92VAgMBAAGjggKmMIICojAdBgNVHQ4EFgQUl+Q9
lGkGP+V6HQ9HLUiJ6BvhTdowHwYDVR0jBBgwFoAUkcmeRXlnuZKbLt55eXKLD+Jj
mtkwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkFFMjE5LzUyQkFDM0Q4MjMxMDExRUY5Mjg3MUYzQTdEREMyNEMyL2tjbWVS
WGxudVpLYkx0NTVlWEtMRC1Kam10ay5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2tjbWVSWGxudVpLYkx0NTVlWEtMRC1Kam10ay5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkFFMjE5LzUyQkFDM0Q4MjMxMDExRUY5Mjg3MUYzQTdE
REMyNEMyLzMxMjhGODM4Mzg5NTExRjFCOTU5RTgwQkNGMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAsD0RAMA0GCSqGSIb3DQEB
CwUAA4IBAQBaY5+tnipdnJA9f09rSS25mt+Ka06erVBdgvF/hVvpQ5YDZTwm0vsS
zBi6+DuU4EH/VjIJ6JKj3TXrXBsVUKtngmfCbEVul3m72CHOAFlLx+Er4oTkcWl2
31MMTZiLeIT7WqXy4szwuSz1tvSlahH2ngd98CRqJqnLlEHrcP/4Xr6lW/rfoOtm
3Ye48fp5tXvOoC+tiPwgXeO9RDlsc91SVaUXDPLI4IzACflTn8QwTh4eq9yH4o24
jCyTCyOaMrW5518RG9+EZhE0z1s+TvcMa1OmmbgcyxKP7yYbsUffbX8T7Nw8KEEg
RSjNZRYr/hGbYipnmcQgjLda1TkFiFkN
-----END CERTIFICATE-----