Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/A0795090B00C11F19F6D43F6CE1D38B0.roa
File:                     A0795090B00C11F19F6D43F6CE1D38B0.roa (raw, json)
Hash identifier:          Jke/MTWtDLvtVfMehGaEgY/X2DuUOiUMIPP5NNKhVrw=
Subject key identifier:   35:15:7F:5A:5B:57:56:D8:B2:E4:BF:FA:91:4E:49:34:69:56:7E:16
Certificate issuer:       /CN=F36EF7D0AF/serialNumber=3A553B6EF80BF922312F96B8DDC1F219A8C4121B
Certificate serial:       05B4
Authority key identifier: 3A:55:3B:6E:F8:0B:F9:22:31:2F:96:B8:DD:C1:F2:19:A8:C4:12:1B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/A0795090B00C11F19F6D43F6CE1D38B0.roa
Signing time:             Mon 14 Sep 2026 07:19:31 +0000
ROA not before:           Mon 14 Sep 2026 07:19:27 +0000
ROA not after:            Mon 09 Sep 2030 07:19:27 +0000
asID:                     834
IP address blocks:        102.212.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1460 (0x5b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36EF7D0AF, serialNumber=3A553B6EF80BF922312F96B8DDC1F219A8C4121B
        Validity
            Not Before: Sep 14 07:19:27 2026 GMT
            Not After : Sep  9 07:19:27 2030 GMT
        Subject: CN=6aa7a003-8b6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:3f:62:7d:d9:8b:f7:95:15:e3:b4:fb:ab:28:
                    6b:5d:f5:67:7e:2f:1e:fb:b0:a8:94:fa:54:be:6e:
                    a5:f1:e5:62:1e:43:93:bf:86:f3:4e:13:61:6f:7d:
                    08:67:7d:0e:e3:15:d8:13:b9:d4:ba:ad:ac:d8:3a:
                    a9:9f:e2:2e:f4:fa:33:a5:f2:8d:d6:7b:6b:ca:f7:
                    64:b4:d3:dc:f8:67:ee:e6:81:a2:ff:e7:e8:90:f7:
                    58:51:4c:2e:ea:5f:84:93:cb:29:a9:b3:e2:98:b6:
                    a6:66:b3:27:ce:f9:ab:e9:d6:51:a9:6b:4e:51:c7:
                    3d:1a:ec:c3:c8:f0:55:f0:19:78:b4:78:fc:dc:68:
                    77:e1:25:dd:20:2f:e4:22:ae:3b:26:32:80:5e:f7:
                    a9:e4:ca:0b:31:8d:90:d1:ad:42:61:5c:35:3f:ec:
                    e1:a5:6d:8f:18:41:8a:27:56:cd:fd:7f:67:51:76:
                    f6:b2:05:05:c4:fe:34:c5:6e:81:d5:ed:00:a5:2d:
                    2b:55:d2:9a:9e:33:dd:6f:e1:c4:32:c2:1a:f6:19:
                    15:c6:de:80:21:7d:14:eb:2c:95:dd:f9:e6:d3:1f:
                    cf:1f:24:e0:69:6a:66:ba:24:17:c4:0a:36:9a:91:
                    4b:93:4d:b7:e8:94:c5:f5:4e:c7:2f:97:a0:a8:7b:
                    4f:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:15:7F:5A:5B:57:56:D8:B2:E4:BF:FA:91:4E:49:34:69:56:7E:16
            X509v3 Authority Key Identifier:
                keyid:3A:55:3B:6E:F8:0B:F9:22:31:2F:96:B8:DD:C1:F2:19:A8:C4:12:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/A0795090B00C11F19F6D43F6CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.212.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bb:7c:ae:43:e2:e4:6a:ac:a0:40:45:a2:ce:90:5a:6f:ad:07:
         47:11:ab:08:6a:f2:fd:83:12:dc:d5:24:8f:2a:68:4f:2d:08:
         87:90:86:3c:c5:9b:53:ae:9e:b7:0c:e4:07:c3:3f:5b:95:f6:
         cc:8e:b0:08:be:79:8e:b0:21:cb:b2:be:f4:1f:1d:1c:4e:4b:
         05:bf:47:39:c9:7e:83:63:fa:5c:75:f0:6b:ff:b8:59:e9:ca:
         5d:41:66:e4:04:75:b3:9c:48:b5:f2:e7:f8:b8:57:96:e0:34:
         56:de:aa:da:e7:0c:34:c1:cb:56:c8:4d:e4:25:d1:61:dd:05:
         71:a0:f4:6e:ea:90:50:1a:76:b1:7b:d9:f6:31:74:2c:00:d8:
         73:6d:e4:be:8a:bc:c1:b0:83:f4:e1:e8:f1:da:6d:5d:6e:4c:
         dc:ee:17:c5:2e:4f:65:ea:a0:25:0c:9a:ab:54:e8:88:50:03:
         cd:57:54:52:56:99:3a:11:f8:7b:08:04:9d:65:6f:f7:16:1b:
         f8:03:04:e7:0e:fb:12:06:30:81:08:63:cd:8a:8b:f2:05:b8:
         1a:83:9e:28:21:08:e5:56:b6:5d:8c:81:23:00:db:65:e7:34:
         27:01:8e:9e:8f:3a:30:b8:e9:bc:02:7f:07:bb:f7:20:ea:93:
         b8:dd:f4:3d
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBbQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RUY3RDBBRjExMC8GA1UEBRMoM0E1NTNCNkVGODBCRjkyMjMxMkY5NkI4RERDMUYy
MTlBOEM0MTIxQjAeFw0yNjA5MTQwNzE5MjdaFw0zMDA5MDkwNzE5MjdaMBgxFjAU
BgNVBAMTDTZhYTdhMDAzLThiNmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC5P2J92Yv3lRXjtPurKGtd9Wd+Lx77sKiU+lS+bqXx5WIeQ5O/hvNOE2Fv
fQhnfQ7jFdgTudS6razYOqmf4i70+jOl8o3We2vK92S009z4Z+7mgaL/5+iQ91hR
TC7qX4STyymps+KYtqZmsyfO+avp1lGpa05Rxz0a7MPI8FXwGXi0ePzcaHfhJd0g
L+QirjsmMoBe96nkygsxjZDRrUJhXDU/7OGlbY8YQYonVs39f2dRdvayBQXE/jTF
boHV7QClLStV0pqeM91v4cQywhr2GRXG3oAhfRTrLJXd+ebTH88fJOBpama6JBfE
CjaakUuTTbfolMX1Tscvl6Coe08PAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUNRV/
WltXVtiy5L/6kU5JNGlWfhYwHwYDVR0jBBgwFoAUOlU7bvgL+SIxL5a43cHyGajE
EhswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkVGN0QwLzM2RTQwQTE2RjJGQjExRUQ4MjFCOUQ4MDRBRDlFNkZDL09sVTdi
dmdMLVNJeEw1YTQzY0h5R2FqRUVocy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL09sVTdidmdMLVNJeEw1YTQzY0h5R2FqRUVocy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkVGN0QwLzM2RTQwQTE2RjJGQjExRUQ4MjFCOUQ4MDRB
RDlFNkZDL0EwNzk1MDkwQjAwQzExRjE5RjZENDNGNkNFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABm1AQwDQYJKoZIhvcNAQEL
BQADggEBALt8rkPi5GqsoEBFos6QWm+tB0cRqwhq8v2DEtzVJI8qaE8tCIeQhjzF
m1OunrcM5AfDP1uV9syOsAi+eY6wIcuyvvQfHRxOSwW/RznJfoNj+lx18Gv/uFnp
yl1BZuQEdbOcSLXy5/i4V5bgNFbeqtrnDDTBy1bITeQl0WHdBXGg9G7qkFAadrF7
2fYxdCwA2HNt5L6KvMGwg/Th6PHabV1uTNzuF8UuT2XqoCUMmqtU6IhQA81XVFJW
mToR+HsIBJ1lb/cWG/gDBOcO+xIGMIEIY82Ki/IFuBqDnighCOVWtl2MgSMA22Xn
NCcBjp6POjC46bwCfwe79yDqk7jd9D0=
-----END CERTIFICATE-----