Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CF917/0D7561E6E27811ECBD71BBD6F1222468/D34DFAFA8A8911F1B39DD1BDCE1D38B0.roa
File:                     D34DFAFA8A8911F1B39DD1BDCE1D38B0.roa (raw, json)
Hash identifier:          gIg3T2F/mwJCGEuy84LwGKs/3oucbWWtsGagWAxJIUY=
Subject key identifier:   E0:F5:64:C9:06:60:74:26:0E:4D:84:EC:AE:2B:ED:20:E8:56:66:4A
Certificate issuer:       /CN=F36CF917AF/serialNumber=5A98A11302BA1C49AABC60D502CB750C599107C3
Certificate serial:       0643
Authority key identifier: 5A:98:A1:13:02:BA:1C:49:AA:BC:60:D5:02:CB:75:0C:59:91:07:C3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/WpihEwK6HEmqvGDVAst1DFmRB8M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36CF917/0D7561E6E27811ECBD71BBD6F1222468/D34DFAFA8A8911F1B39DD1BDCE1D38B0.roa
Signing time:             Tue 28 Jul 2026 13:39:59 +0000
ROA not before:           Tue 28 Jul 2026 13:39:55 +0000
ROA not after:            Mon 28 Jul 2036 13:39:55 +0000
asID:                     37294
IP address blocks:        2c0f:fc58::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36CF917/0D7561E6E27811ECBD71BBD6F1222468/WpihEwK6HEmqvGDVAst1DFmRB8M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36CF917/0D7561E6E27811ECBD71BBD6F1222468/WpihEwK6HEmqvGDVAst1DFmRB8M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/WpihEwK6HEmqvGDVAst1DFmRB8M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 31 Jul 2026 00:07:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1603 (0x643)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36CF917AF, serialNumber=5A98A11302BA1C49AABC60D502CB750C599107C3
        Validity
            Not Before: Jul 28 13:39:55 2026 GMT
            Not After : Jul 28 13:39:55 2036 GMT
        Subject: CN=6a68b12f-6382
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:f4:a4:7e:0c:7c:92:47:2a:0e:53:87:0f:e5:
                    78:9c:9c:d1:0e:82:f2:bf:fd:ca:d1:83:a9:24:2b:
                    07:15:90:65:fe:a3:e0:4b:b3:0a:57:f0:f5:76:1d:
                    78:30:84:47:ac:b1:27:7c:62:9b:db:c2:3d:eb:93:
                    b7:47:18:46:bb:3f:ce:21:e6:d1:19:e2:93:4b:74:
                    37:ad:72:35:bd:c9:d0:a3:a2:b6:b6:fd:55:3a:67:
                    82:75:89:1e:5d:b4:a8:83:4e:0a:20:98:c3:06:62:
                    8b:0b:7f:30:af:6f:58:df:81:c5:e4:77:94:7e:b2:
                    49:b9:70:1c:e4:35:5c:22:9a:f8:01:ad:23:95:57:
                    13:d1:57:9c:c4:64:62:b0:34:a9:03:a6:ac:13:77:
                    63:26:d1:07:db:c5:ae:92:0d:26:44:df:e9:92:c4:
                    b1:a7:f4:f5:95:5e:92:b9:3b:2f:3b:85:7b:1d:75:
                    fe:f0:1a:2c:09:bb:a5:ae:90:81:24:4b:e1:1b:af:
                    ef:85:c4:34:bf:92:57:bd:d7:eb:60:8b:3c:1f:59:
                    1b:c4:8f:6d:32:4d:5c:e6:05:1f:47:95:9f:3a:3a:
                    d2:fc:62:79:9b:f4:19:6c:2f:94:81:06:83:95:1c:
                    52:17:0b:a1:c9:d3:1c:4d:8d:5d:b0:cd:a8:d9:ad:
                    c6:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:F5:64:C9:06:60:74:26:0E:4D:84:EC:AE:2B:ED:20:E8:56:66:4A
            X509v3 Authority Key Identifier:
                keyid:5A:98:A1:13:02:BA:1C:49:AA:BC:60:D5:02:CB:75:0C:59:91:07:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36CF917/0D7561E6E27811ECBD71BBD6F1222468/WpihEwK6HEmqvGDVAst1DFmRB8M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/WpihEwK6HEmqvGDVAst1DFmRB8M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CF917/0D7561E6E27811ECBD71BBD6F1222468/D34DFAFA8A8911F1B39DD1BDCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:fc58::/32

    Signature Algorithm: sha256WithRSAEncryption
         91:60:4c:dc:e2:91:9c:9f:d9:2d:f3:16:fd:ac:50:f4:40:2a:
         13:f4:ea:1f:a7:ce:c1:d1:ad:4d:39:57:74:40:a6:16:45:74:
         a0:b7:d1:ec:c5:10:00:1c:5a:84:bf:48:ce:a3:9f:86:a8:a9:
         43:f0:5a:75:63:4f:e1:06:ba:b9:c3:28:08:ac:3e:ab:58:f8:
         18:a7:e5:44:e8:9d:22:35:3a:ac:ae:65:4e:57:65:df:05:19:
         b0:bf:72:ea:32:87:16:d6:92:f9:9d:21:c8:97:11:02:53:e5:
         0a:c1:d8:ff:ae:19:43:97:67:99:c6:2b:96:ca:57:ad:b7:d5:
         8f:f9:c5:1c:d3:87:5e:89:a8:3d:f5:da:2b:5a:73:bb:1b:e1:
         2d:ee:63:ef:66:40:99:7f:a1:60:d7:63:a1:7e:23:f7:aa:63:
         22:df:5f:a4:7a:44:8b:e7:a5:0e:38:b0:1e:3e:91:1f:3f:dd:
         8a:38:72:1f:38:09:41:ed:cb:19:19:ea:96:09:44:00:c8:3d:
         f9:53:09:2e:d0:91:d7:83:a9:27:e9:41:63:df:04:ea:05:e6:
         72:38:34:03:4e:b3:32:e6:fa:ac:41:41:78:ce:47:4b:5f:4e:
         19:fc:83:56:36:4f:12:68:09:a4:51:b0:dc:f5:54:54:a7:17:
         b1:02:65:7f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBkMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
Q0Y5MTdBRjExMC8GA1UEBRMoNUE5OEExMTMwMkJBMUM0OUFBQkM2MEQ1MDJDQjc1
MEM1OTkxMDdDMzAeFw0yNjA3MjgxMzM5NTVaFw0zNjA3MjgxMzM5NTVaMBgxFjAU
BgNVBAMTDTZhNjhiMTJmLTYzODIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDW9KR+DHySRyoOU4cP5XicnNEOgvK//crRg6kkKwcVkGX+o+BLswpX8PV2
HXgwhEessSd8Ypvbwj3rk7dHGEa7P84h5tEZ4pNLdDetcjW9ydCjora2/VU6Z4J1
iR5dtKiDTgogmMMGYosLfzCvb1jfgcXkd5R+skm5cBzkNVwimvgBrSOVVxPRV5zE
ZGKwNKkDpqwTd2Mm0Qfbxa6SDSZE3+mSxLGn9PWVXpK5Oy87hXsddf7wGiwJu6Wu
kIEkS+Ebr++FxDS/kle91+tgizwfWRvEj20yTVzmBR9HlZ86OtL8Ynmb9BlsL5SB
BoOVHFIXC6HJ0xxNjV2wzajZrcYrAgMBAAGjggKmMIICojAdBgNVHQ4EFgQU4PVk
yQZgdCYOTYTsrivtIOhWZkowHwYDVR0jBBgwFoAUWpihEwK6HEmqvGDVAst1DFmR
B8MwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkNGOTE3LzBENzU2MUU2RTI3ODExRUNCRDcxQkJENkYxMjIyNDY4L1dwaWhF
d0s2SEVtcXZHRFZBc3QxREZtUkI4TS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1dwaWhFd0s2SEVtcXZHRFZBc3QxREZtUkI4TS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkNGOTE3LzBENzU2MUU2RTI3ODExRUNCRDcxQkJENkYx
MjIyNDY4L0QzNERGQUZBOEE4OTExRjFCMzlERDFCRENFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAsD/xYMA0GCSqGSIb3DQEB
CwUAA4IBAQCRYEzc4pGcn9kt8xb9rFD0QCoT9Oofp87B0a1NOVd0QKYWRXSgt9Hs
xRAAHFqEv0jOo5+GqKlD8Fp1Y0/hBrq5wygIrD6rWPgYp+VE6J0iNTqsrmVOV2Xf
BRmwv3LqMocW1pL5nSHIlxECU+UKwdj/rhlDl2eZxiuWylett9WP+cUc04deiag9
9dorWnO7G+Et7mPvZkCZf6Fg12OhfiP3qmMi31+kekSL56UOOLAePpEfP92KOHIf
OAlB7csZGeqWCUQAyD35Uwku0JHXg6kn6UFj3wTqBeZyODQDTrMy5vqsQUF4zkdL
X04Z/INWNk8SaAmkUbDc9VRUpxexAmV/
-----END CERTIFICATE-----