Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36EC7CE/82014A10989911E9B7396A33F8AEA228/A297428E963E11F1B85B87DACE1D38B0.roa
File:                     A297428E963E11F1B85B87DACE1D38B0.roa (raw, json)
Hash identifier:          rwz2mY6LmqgsS1AN3WQHj/GNPsl7soX1ygGDhkn5Bc8=
Subject key identifier:   F6:B8:68:0F:A7:BA:BB:7D:6F:BE:C0:50:D6:35:59:F1:10:DF:0F:86
Certificate issuer:       /CN=F36EC7CEAF/serialNumber=0E040ABF4F945F30D77DA28BBF028B6AC49D042C
Certificate serial:       0A97
Authority key identifier: 0E:04:0A:BF:4F:94:5F:30:D7:7D:A2:8B:BF:02:8B:6A:C4:9D:04:2C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/DgQKv0-UXzDXfaKLvwKLasSdBCw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36EC7CE/82014A10989911E9B7396A33F8AEA228/A297428E963E11F1B85B87DACE1D38B0.roa
Signing time:             Wed 12 Aug 2026 11:11:59 +0000
ROA not before:           Wed 12 Aug 2026 11:11:55 +0000
ROA not after:            Tue 12 Aug 2036 11:11:55 +0000
asID:                     327795
IP address blocks:        197.149.176.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36EC7CE/82014A10989911E9B7396A33F8AEA228/DgQKv0-UXzDXfaKLvwKLasSdBCw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36EC7CE/82014A10989911E9B7396A33F8AEA228/DgQKv0-UXzDXfaKLvwKLasSdBCw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/DgQKv0-UXzDXfaKLvwKLasSdBCw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 01:30:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2711 (0xa97)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36EC7CEAF, serialNumber=0E040ABF4F945F30D77DA28BBF028B6AC49D042C
        Validity
            Not Before: Aug 12 11:11:55 2026 GMT
            Not After : Aug 12 11:11:55 2036 GMT
        Subject: CN=6a7c54ff-86fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:a3:6d:79:4e:e3:c4:cc:4d:31:11:9a:ac:25:
                    c1:1e:31:bc:6e:88:3a:1c:2d:fc:ec:83:7d:d5:40:
                    99:2c:82:48:d8:0f:9a:7f:88:a3:d2:ad:d7:fe:6b:
                    e7:90:16:6b:5a:6b:92:db:1c:4c:1f:29:99:11:28:
                    20:e3:44:08:8d:98:75:79:a2:4b:ac:8e:01:b7:8d:
                    15:7f:87:5e:d1:fa:4e:96:44:ac:52:a1:be:12:33:
                    81:6b:45:c2:1a:f1:89:ff:c5:cb:ba:f0:9a:4a:37:
                    a6:e4:2a:67:c1:87:52:6e:9f:9a:97:7e:02:1a:44:
                    58:1b:8a:c1:6e:3b:93:d9:08:8a:20:33:b4:7f:9a:
                    96:4c:0a:8f:a8:86:90:cf:36:9d:03:79:a8:f2:96:
                    24:6e:c2:c2:9f:d5:a4:98:73:50:d3:ba:bb:7e:2d:
                    8e:46:aa:35:3d:6d:5a:09:b8:bf:c8:8f:70:04:c7:
                    57:ce:2c:34:30:16:fe:f5:b7:6d:0b:8d:59:d2:1f:
                    bf:98:3f:9d:50:be:8e:a0:60:e4:ac:ea:43:c3:30:
                    0f:c1:9c:de:9e:e4:55:58:2d:f0:9b:7b:04:2c:0b:
                    25:08:37:e3:3f:d0:6a:67:ce:4d:a1:92:7b:3f:92:
                    fb:f7:df:f8:c2:9a:98:d8:c0:74:66:c9:5a:b5:19:
                    11:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:B8:68:0F:A7:BA:BB:7D:6F:BE:C0:50:D6:35:59:F1:10:DF:0F:86
            X509v3 Authority Key Identifier:
                keyid:0E:04:0A:BF:4F:94:5F:30:D7:7D:A2:8B:BF:02:8B:6A:C4:9D:04:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36EC7CE/82014A10989911E9B7396A33F8AEA228/DgQKv0-UXzDXfaKLvwKLasSdBCw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/DgQKv0-UXzDXfaKLvwKLasSdBCw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EC7CE/82014A10989911E9B7396A33F8AEA228/A297428E963E11F1B85B87DACE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  197.149.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         89:5b:68:2b:13:13:94:79:d0:0a:4c:20:b5:12:93:df:7a:c5:
         69:39:e1:e6:e3:8c:59:eb:ab:c9:98:6f:09:59:5f:8b:b3:ec:
         0b:82:13:68:23:79:ae:cf:d5:6e:4b:c8:04:84:04:e0:15:97:
         26:40:f7:27:7d:6e:28:6f:75:64:9d:a2:b6:05:c5:1c:4c:97:
         e4:31:e5:08:c8:e6:a6:11:d5:b1:9c:44:4c:ad:e9:d1:2c:7b:
         7c:71:f6:c0:3d:f0:ff:6b:5d:12:0f:3a:aa:42:16:09:72:c6:
         6c:f7:24:32:ed:27:5f:a2:c9:6b:c8:1c:54:68:ec:e6:38:a0:
         f2:bf:20:d0:31:72:82:9d:a7:27:2f:b7:8e:17:62:2b:ee:1d:
         f6:4a:3a:c0:32:83:aa:fc:8f:22:2c:e7:b9:41:69:9c:56:09:
         45:52:61:56:95:c7:8a:22:e4:0a:e0:80:33:ae:cf:a9:e0:c3:
         80:0d:2d:ab:af:aa:8f:00:73:93:58:cd:63:42:7e:02:84:a5:
         5d:ae:59:06:30:1f:0d:e3:7d:bc:ce:c8:c1:fd:cd:14:01:8e:
         ba:bd:10:a1:08:12:cd:89:66:70:c3:cd:35:b8:86:5b:3a:62:
         7b:f1:d8:ed:c4:83:7b:9a:45:31:f3:bc:14:63:01:53:d2:40:
         50:8c:69:5e
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCpcwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RUM3Q0VBRjExMC8GA1UEBRMoMEUwNDBBQkY0Rjk0NUYzMEQ3N0RBMjhCQkYwMjhC
NkFDNDlEMDQyQzAeFw0yNjA4MTIxMTExNTVaFw0zNjA4MTIxMTExNTVaMBgxFjAU
BgNVBAMTDTZhN2M1NGZmLTg2ZmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDoo215TuPEzE0xEZqsJcEeMbxuiDocLfzsg33VQJksgkjYD5p/iKPSrdf+
a+eQFmtaa5LbHEwfKZkRKCDjRAiNmHV5okusjgG3jRV/h17R+k6WRKxSob4SM4Fr
RcIa8Yn/xcu68JpKN6bkKmfBh1Jun5qXfgIaRFgbisFuO5PZCIogM7R/mpZMCo+o
hpDPNp0DeajyliRuwsKf1aSYc1DTurt+LY5GqjU9bVoJuL/Ij3AEx1fOLDQwFv71
t20LjVnSH7+YP51Qvo6gYOSs6kPDMA/BnN6e5FVYLfCbewQsCyUIN+M/0Gpnzk2h
kns/kvv33/jCmpjYwHRmyVq1GRGTAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU9rho
D6e6u31vvsBQ1jVZ8RDfD4YwHwYDVR0jBBgwFoAUDgQKv0+UXzDXfaKLvwKLasSd
BCwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkVDN0NFLzgyMDE0QTEwOTg5OTExRTlCNzM5NkEzM0Y4QUVBMjI4L0RnUUt2
MC1VWHpEWGZhS0x2d0tMYXNTZEJDdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0RnUUt2MC1VWHpEWGZhS0x2d0tMYXNTZEJDdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkVDN0NFLzgyMDE0QTEwOTg5OTExRTlCNzM5NkEzM0Y4
QUVBMjI4L0EyOTc0MjhFOTYzRTExRjFCODVCODdEQUNFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALFlbAwDQYJKoZIhvcNAQEL
BQADggEBAIlbaCsTE5R50ApMILUSk996xWk54ebjjFnrq8mYbwlZX4uz7AuCE2gj
ea7P1W5LyASEBOAVlyZA9yd9bihvdWSdorYFxRxMl+Qx5QjI5qYR1bGcREyt6dEs
e3xx9sA98P9rXRIPOqpCFglyxmz3JDLtJ1+iyWvIHFRo7OY4oPK/INAxcoKdpycv
t44XYivuHfZKOsAyg6r8jyIs57lBaZxWCUVSYVaVx4oi5ArggDOuz6ngw4ANLauv
qo8Ac5NYzWNCfgKEpV2uWQYwHw3jfbzOyMH9zRQBjrq9EKEIEs2JZnDDzTW4hls6
Ynvx2O3Eg3uaRTHzvBRjAVPSQFCMaV4=
-----END CERTIFICATE-----