Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/5D4E3E2CB42911F1A7228ADFCE1D38B0.roa
File:                     5D4E3E2CB42911F1A7228ADFCE1D38B0.roa (raw, json)
Hash identifier:          Sg21FeRg0sCbvKh+6dJ2xNE1rFfw9mLKthCDLQtSl8w=
Subject key identifier:   80:FC:59:E2:35:7E:55:D3:44:83:CA:C4:ED:84:C2:68:19:D7:02:3F
Certificate issuer:       /CN=F36F0628AF/serialNumber=8605D7599A0402F70EC2F258D6C16BD2E4E8D1FE
Certificate serial:       0824
Authority key identifier: 86:05:D7:59:9A:04:02:F7:0E:C2:F2:58:D6:C1:6B:D2:E4:E8:D1:FE
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/hgXXWZoEAvcOwvJY1sFr0uTo0f4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/5D4E3E2CB42911F1A7228ADFCE1D38B0.roa
Signing time:             Sat 19 Sep 2026 12:55:18 +0000
ROA not before:           Sat 19 Sep 2026 12:55:14 +0000
ROA not after:            Fri 19 Sep 2036 12:55:14 +0000
asID:                     8881
IP address blocks:        196.44.119.0/24 maxlen: 24
                          196.44.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/hgXXWZoEAvcOwvJY1sFr0uTo0f4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/hgXXWZoEAvcOwvJY1sFr0uTo0f4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/hgXXWZoEAvcOwvJY1sFr0uTo0f4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 22 Sep 2026 00:07:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2084 (0x824)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F0628AF, serialNumber=8605D7599A0402F70EC2F258D6C16BD2E4E8D1FE
        Validity
            Not Before: Sep 19 12:55:14 2026 GMT
            Not After : Sep 19 12:55:14 2036 GMT
        Subject: CN=6aae8636-b505
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:60:3f:77:84:1f:38:62:21:27:4f:9a:70:9d:
                    7f:ee:5b:06:d4:2c:50:97:d1:44:bb:30:65:09:01:
                    44:1d:0b:7b:56:79:02:cf:05:fd:4d:ac:83:0c:7f:
                    63:9c:23:2a:fc:77:98:a1:64:05:fa:c2:ae:65:1e:
                    a1:70:36:d1:48:a0:be:1a:61:ca:03:24:a7:c2:ea:
                    b9:94:d4:8b:21:82:61:37:b9:30:a1:b5:5b:9b:9f:
                    49:b5:5e:c6:c8:17:17:fe:97:79:50:47:48:3f:93:
                    c2:2b:b8:8b:ec:29:ea:34:77:5f:a5:f6:8f:09:9c:
                    e0:c4:eb:c1:d2:dd:93:76:e4:0a:52:85:2b:cd:28:
                    8a:da:1f:16:ad:49:a8:bd:0c:d4:7d:90:a9:b8:7a:
                    cc:ff:95:02:78:2c:51:53:39:62:0d:07:82:10:7a:
                    b7:9f:4b:4e:ff:cf:63:6d:a1:44:97:65:77:79:bb:
                    b6:39:9d:7c:64:9c:80:dc:bf:84:4a:12:04:51:9a:
                    f3:8c:3b:a4:72:12:20:35:a0:4f:13:7b:42:9a:b0:
                    be:b7:b5:de:3d:78:f1:95:8a:48:83:2f:79:3f:a7:
                    ce:86:ab:12:f0:76:d8:df:f1:19:55:6b:ee:50:28:
                    14:43:a6:55:e5:8c:87:66:23:cb:de:67:31:c3:6e:
                    b7:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:FC:59:E2:35:7E:55:D3:44:83:CA:C4:ED:84:C2:68:19:D7:02:3F
            X509v3 Authority Key Identifier:
                keyid:86:05:D7:59:9A:04:02:F7:0E:C2:F2:58:D6:C1:6B:D2:E4:E8:D1:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/hgXXWZoEAvcOwvJY1sFr0uTo0f4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hgXXWZoEAvcOwvJY1sFr0uTo0f4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/5D4E3E2CB42911F1A7228ADFCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.44.119.0/24
                  196.44.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:45:48:3d:3b:a9:fc:1c:cd:e9:b5:99:e2:4b:09:72:42:8c:
         55:9a:1f:48:54:ce:b3:4c:38:e7:af:8a:b3:2c:4f:c5:99:87:
         aa:cd:fb:bc:43:89:88:86:ba:bc:5f:38:a7:45:ce:58:32:85:
         bb:99:ff:17:10:1b:3e:0e:9b:04:a0:4f:84:a4:9b:1d:a8:70:
         6d:59:51:c6:d3:3d:f3:9d:9b:8f:71:16:c9:0a:6a:2e:f8:4a:
         60:fc:58:f7:e7:95:fc:01:8f:c5:ad:ca:d1:8b:66:2a:e9:7b:
         cc:5b:08:59:43:9b:3c:2b:ca:b3:f4:5c:fb:56:d1:e0:c5:52:
         9c:99:af:0a:5b:06:27:71:05:9f:a9:ca:a5:33:e6:8d:72:b4:
         30:ca:37:fb:1c:ff:6b:56:a9:dd:cd:ca:b8:41:4c:9f:48:92:
         99:3a:e5:40:86:35:a8:74:ea:5d:ca:93:4f:9b:30:07:5f:93:
         24:a1:fb:11:cd:80:07:66:9b:9c:f7:cc:62:f2:3e:0b:28:29:
         d3:d0:0a:7f:86:64:36:fc:ba:71:9a:f3:58:1e:29:5a:f6:83:
         5e:7e:55:01:b8:eb:8f:2a:41:03:a7:44:82:90:3a:22:d9:fb:
         f7:78:b9:55:7c:01:e1:29:f4:b0:c5:a0:ac:36:c4:f5:6f:90:
         90:c8:e4:ca
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgICCCQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RjA2MjhBRjExMC8GA1UEBRMoODYwNUQ3NTk5QTA0MDJGNzBFQzJGMjU4RDZDMTZC
RDJFNEU4RDFGRTAeFw0yNjA5MTkxMjU1MTRaFw0zNjA5MTkxMjU1MTRaMBgxFjAU
BgNVBAMTDTZhYWU4NjM2LWI1MDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDYYD93hB84YiEnT5pwnX/uWwbULFCX0US7MGUJAUQdC3tWeQLPBf1NrIMM
f2OcIyr8d5ihZAX6wq5lHqFwNtFIoL4aYcoDJKfC6rmU1IshgmE3uTChtVubn0m1
XsbIFxf+l3lQR0g/k8IruIvsKeo0d1+l9o8JnODE68HS3ZN25ApShSvNKIraHxat
Sai9DNR9kKm4esz/lQJ4LFFTOWINB4IQerefS07/z2NtoUSXZXd5u7Y5nXxknIDc
v4RKEgRRmvOMO6RyEiA1oE8Te0KasL63td49ePGVikiDL3k/p86GqxLwdtjf8RlV
a+5QKBRDplXljIdmI8veZzHDbrdPAgMBAAGjggKrMIICpzAdBgNVHQ4EFgQUgPxZ
4jV+VdNEg8rE7YTCaBnXAj8wHwYDVR0jBBgwFoAUhgXXWZoEAvcOwvJY1sFr0uTo
0f4wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkYwNjI4L0YwQ0NCRTdDRkJBMDExRUJBQjc4NkM0OUQ4QTAxNENFL2hnWFhX
Wm9FQXZjT3d2Slkxc0ZyMHVUbzBmNC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2hnWFhXWm9FQXZjT3d2Slkxc0ZyMHVUbzBmNC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkYwNjI4L0YwQ0NCRTdDRkJBMDExRUJBQjc4NkM0OUQ4
QTAxNENFLzVENEUzRTJDQjQyOTExRjFBNzIyOEFERkNFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBADELHcDBADELHwwDQYJKoZI
hvcNAQELBQADggEBAGlFSD07qfwczem1meJLCXJCjFWaH0hUzrNMOOevirMsT8WZ
h6rN+7xDiYiGurxfOKdFzlgyhbuZ/xcQGz4OmwSgT4Skmx2ocG1ZUcbTPfOdm49x
FskKai74SmD8WPfnlfwBj8WtytGLZirpe8xbCFlDmzwryrP0XPtW0eDFUpyZrwpb
BidxBZ+pyqUz5o1ytDDKN/sc/2tWqd3NyrhBTJ9Ikpk65UCGNah06l3Kk0+bMAdf
kySh+xHNgAdmm5z3zGLyPgsoKdPQCn+GZDb8unGa81geKVr2g15+VQG4648qQQOn
RIKQOiLZ+/d4uVV8AeEp9LDFoKw2xPVvkJDI5Mo=
-----END CERTIFICATE-----