Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36EC7CE/82014A10989911E9B7396A33F8AEA228/4A3694E2963811F1BF267CB5CE1D38B0.roa
File:                     4A3694E2963811F1BF267CB5CE1D38B0.roa (raw, json)
Hash identifier:          rtVS5HOqdqtfYhUrlLaUxNjHLjakyUDG7lf4/fsJQn8=
Subject key identifier:   A0:8F:F5:98:15:D3:A4:85:0F:CC:2C:BA:A7:0D:50:71:84:37:A5:48
Certificate issuer:       /CN=F36EC7CEAF/serialNumber=0E040ABF4F945F30D77DA28BBF028B6AC49D042C
Certificate serial:       0A8D
Authority key identifier: 0E:04:0A:BF:4F:94:5F:30:D7:7D:A2:8B:BF:02:8B:6A:C4:9D:04:2C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/DgQKv0-UXzDXfaKLvwKLasSdBCw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36EC7CE/82014A10989911E9B7396A33F8AEA228/4A3694E2963811F1BF267CB5CE1D38B0.roa
Signing time:             Wed 12 Aug 2026 10:26:33 +0000
ROA not before:           Wed 12 Aug 2026 10:26:30 +0000
ROA not after:            Tue 12 Aug 2036 10:26:30 +0000
asID:                     327795
IP address blocks:        2c0f:efe8:640::/43 maxlen: 43
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36EC7CE/82014A10989911E9B7396A33F8AEA228/DgQKv0-UXzDXfaKLvwKLasSdBCw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36EC7CE/82014A10989911E9B7396A33F8AEA228/DgQKv0-UXzDXfaKLvwKLasSdBCw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/DgQKv0-UXzDXfaKLvwKLasSdBCw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Sep 2026 00:07:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2701 (0xa8d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36EC7CEAF, serialNumber=0E040ABF4F945F30D77DA28BBF028B6AC49D042C
        Validity
            Not Before: Aug 12 10:26:30 2026 GMT
            Not After : Aug 12 10:26:30 2036 GMT
        Subject: CN=6a7c4a59-093d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:a6:6a:c0:9b:82:fb:31:9c:fe:75:35:c6:bc:
                    3f:39:17:c7:18:7f:3e:c2:93:48:52:79:c7:df:d7:
                    c2:f5:85:4f:ce:f2:1d:4f:73:88:3b:6b:e8:5c:55:
                    b8:dd:a0:74:ca:bf:b9:f0:e9:a7:de:de:67:72:a2:
                    4e:9a:b7:c9:c4:cb:9d:9a:dd:26:a7:bb:f7:bf:2a:
                    36:6d:f4:96:f0:07:13:78:ba:71:5d:ad:1a:03:bb:
                    ca:86:7e:2e:f1:7c:85:21:13:4c:3c:76:dd:f6:32:
                    9b:0a:30:94:05:4e:92:27:2a:61:88:0f:75:f3:3c:
                    2c:e9:36:6d:51:06:da:8c:7e:7a:98:76:0a:7f:e7:
                    06:a2:59:50:1d:c3:42:55:8e:01:b5:93:b9:38:47:
                    86:30:9d:c2:91:c0:fb:b3:6b:9b:34:04:e8:df:6c:
                    a7:e5:61:a4:98:05:f7:5f:ae:3f:09:d0:bf:fa:c3:
                    52:d4:b9:8e:9f:9a:c8:46:30:bb:c1:7f:c3:86:4a:
                    0f:6d:89:97:14:ca:d9:de:5f:9c:fc:97:7f:aa:04:
                    c6:b3:00:76:5f:f3:1c:e9:e7:73:c6:19:00:57:d9:
                    cc:12:a2:18:ca:94:02:21:fc:5d:2e:e0:7e:c1:42:
                    10:d6:84:8f:17:40:3d:dc:d7:8e:cc:d6:06:4a:bc:
                    96:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:8F:F5:98:15:D3:A4:85:0F:CC:2C:BA:A7:0D:50:71:84:37:A5:48
            X509v3 Authority Key Identifier:
                keyid:0E:04:0A:BF:4F:94:5F:30:D7:7D:A2:8B:BF:02:8B:6A:C4:9D:04:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36EC7CE/82014A10989911E9B7396A33F8AEA228/DgQKv0-UXzDXfaKLvwKLasSdBCw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/DgQKv0-UXzDXfaKLvwKLasSdBCw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EC7CE/82014A10989911E9B7396A33F8AEA228/4A3694E2963811F1BF267CB5CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:efe8:640::/43

    Signature Algorithm: sha256WithRSAEncryption
         38:3b:de:9d:c3:9c:ff:b6:e1:01:2f:f2:7b:94:0f:94:30:f1:
         96:54:6b:9a:ae:08:a7:14:0c:92:fc:00:ed:a3:dc:b2:a4:8b:
         b6:15:50:04:a7:6f:d5:bd:69:b0:7d:e6:aa:29:d0:0d:39:7f:
         f0:3f:c1:26:9b:37:1e:50:a0:7b:5c:05:25:84:55:7b:3f:40:
         65:a4:71:cc:11:35:c9:82:96:5d:1b:3a:7b:ed:e3:92:7e:51:
         ae:39:3e:97:3f:04:0f:cc:09:56:1e:f5:e8:ce:a0:75:24:8c:
         3d:5a:85:0d:9d:6e:7f:27:fc:87:b3:a7:9f:dc:d7:78:9a:0d:
         54:75:c3:26:7f:0e:35:08:1c:69:dc:fb:0e:b6:03:5e:cb:69:
         c3:7d:7c:98:f7:11:10:a9:b9:62:8b:e5:8f:7e:22:81:dd:fe:
         69:b9:76:3c:30:b8:0d:6a:0b:25:96:e7:30:fd:58:88:32:d8:
         45:9f:90:00:f3:ba:97:52:41:c7:52:31:d5:3c:23:45:51:93:
         dc:f5:ce:3c:ac:9c:71:3d:2e:b9:1b:5b:3c:2c:c0:05:d0:03:
         18:1d:3a:ea:26:02:f4:6a:37:9d:8a:c4:35:39:2a:e5:81:b0:
         ed:77:62:c4:64:ae:0e:c8:0e:ba:1d:8d:25:f1:7e:20:2a:a7:
         80:64:d0:e2
-----BEGIN CERTIFICATE-----
MIIFhjCCBG6gAwIBAgICCo0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RUM3Q0VBRjExMC8GA1UEBRMoMEUwNDBBQkY0Rjk0NUYzMEQ3N0RBMjhCQkYwMjhC
NkFDNDlEMDQyQzAeFw0yNjA4MTIxMDI2MzBaFw0zNjA4MTIxMDI2MzBaMBgxFjAU
BgNVBAMTDTZhN2M0YTU5LTA5M2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDvpmrAm4L7MZz+dTXGvD85F8cYfz7Ck0hSecff18L1hU/O8h1Pc4g7a+hc
VbjdoHTKv7nw6afe3mdyok6at8nEy52a3Sanu/e/KjZt9JbwBxN4unFdrRoDu8qG
fi7xfIUhE0w8dt32MpsKMJQFTpInKmGID3XzPCzpNm1RBtqMfnqYdgp/5waiWVAd
w0JVjgG1k7k4R4YwncKRwPuza5s0BOjfbKflYaSYBfdfrj8J0L/6w1LUuY6fmshG
MLvBf8OGSg9tiZcUytneX5z8l3+qBMazAHZf8xzp53PGGQBX2cwSohjKlAIh/F0u
4H7BQhDWhI8XQD3c147M1gZKvJaLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUoI/1
mBXTpIUPzCy6pw1QcYQ3pUgwHwYDVR0jBBgwFoAUDgQKv0+UXzDXfaKLvwKLasSd
BCwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkVDN0NFLzgyMDE0QTEwOTg5OTExRTlCNzM5NkEzM0Y4QUVBMjI4L0RnUUt2
MC1VWHpEWGZhS0x2d0tMYXNTZEJDdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0RnUUt2MC1VWHpEWGZhS0x2d0tMYXNTZEJDdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkVDN0NFLzgyMDE0QTEwOTg5OTExRTlCNzM5NkEzM0Y4
QUVBMjI4LzRBMzY5NEUyOTYzODExRjFCRjI2N0NCNUNFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwUsD+/oBkAwDQYJKoZIhvcN
AQELBQADggEBADg73p3DnP+24QEv8nuUD5Qw8ZZUa5quCKcUDJL8AO2j3LKki7YV
UASnb9W9abB95qop0A05f/A/wSabNx5QoHtcBSWEVXs/QGWkccwRNcmCll0bOnvt
45J+Ua45Ppc/BA/MCVYe9ejOoHUkjD1ahQ2dbn8n/Iezp5/c13iaDVR1wyZ/DjUI
HGnc+w62A17LacN9fJj3ERCpuWKL5Y9+IoHd/mm5djwwuA1qCyWW5zD9WIgy2EWf
kADzupdSQcdSMdU8I0VRk9z1zjysnHE9LrkbWzwswAXQAxgdOuomAvRqN52KxDU5
KuWBsO13YsRkrg7IDrodjSXxfiAqp4Bk0OI=
-----END CERTIFICATE-----