Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/E0978148B5C411F1A36DE3DDCE1D38B0.roa
File:                     E0978148B5C411F1A36DE3DDCE1D38B0.roa (raw, json)
Hash identifier:          z5bG46DBUE3vNLEVMpI+LUmEIzU52A9/RHq13j9q2E0=
Subject key identifier:   73:F8:F8:A2:CA:4E:8C:24:25:74:3D:6D:10:95:3D:E1:F8:5E:10:40
Certificate issuer:       /CN=F36F0628AF/serialNumber=8605D7599A0402F70EC2F258D6C16BD2E4E8D1FE
Certificate serial:       0830
Authority key identifier: 86:05:D7:59:9A:04:02:F7:0E:C2:F2:58:D6:C1:6B:D2:E4:E8:D1:FE
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/hgXXWZoEAvcOwvJY1sFr0uTo0f4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/E0978148B5C411F1A36DE3DDCE1D38B0.roa
Signing time:             Mon 21 Sep 2026 14:01:01 +0000
ROA not before:           Mon 21 Sep 2026 14:00:57 +0000
ROA not after:            Sun 21 Sep 2036 14:00:57 +0000
asID:                     398465
IP address blocks:        196.44.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/hgXXWZoEAvcOwvJY1sFr0uTo0f4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/hgXXWZoEAvcOwvJY1sFr0uTo0f4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/hgXXWZoEAvcOwvJY1sFr0uTo0f4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2096 (0x830)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F0628AF, serialNumber=8605D7599A0402F70EC2F258D6C16BD2E4E8D1FE
        Validity
            Not Before: Sep 21 14:00:57 2026 GMT
            Not After : Sep 21 14:00:57 2036 GMT
        Subject: CN=6ab1389d-2e62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d8:dc:1a:00:89:4c:d4:2b:03:3a:d3:73:75:
                    ca:2c:53:7b:f2:ae:5d:75:71:c7:99:a2:66:a5:8f:
                    68:90:10:63:67:60:11:96:c3:5e:b8:60:a0:1c:42:
                    6f:0f:2d:47:e7:c3:3e:15:89:ca:5b:13:d4:90:a2:
                    4f:7e:7f:33:e8:5d:02:fa:08:93:d5:06:5a:15:9e:
                    c1:43:bf:e5:49:0d:0a:93:25:ed:e5:a6:0c:75:85:
                    0a:53:95:4a:77:17:97:20:e6:ed:af:d1:1f:d5:6e:
                    72:c7:28:0e:fa:bd:af:2e:34:ba:96:50:1e:c3:4a:
                    d2:c5:76:95:41:98:71:69:ef:a7:a1:d7:c9:8f:4f:
                    8e:75:f0:d4:92:f5:a0:49:a4:ad:c4:b0:a1:c1:42:
                    cc:60:77:1a:ea:44:ba:51:be:38:48:f1:81:bc:8a:
                    94:7d:53:e6:f3:40:16:f2:a2:af:41:3c:4e:a1:dc:
                    79:b4:36:eb:6d:d5:eb:e8:05:8a:c8:0a:5c:51:05:
                    57:fd:d1:4a:f3:4f:ad:dd:1a:22:f0:d4:e3:9b:6c:
                    23:03:c8:99:8f:db:47:2f:57:ea:ef:7a:d2:83:7c:
                    fa:a4:c7:2c:6c:c1:e6:c3:8b:cf:33:d4:73:84:60:
                    66:51:17:94:0f:e7:51:28:90:b8:4d:e9:6d:3c:2e:
                    91:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:F8:F8:A2:CA:4E:8C:24:25:74:3D:6D:10:95:3D:E1:F8:5E:10:40
            X509v3 Authority Key Identifier:
                keyid:86:05:D7:59:9A:04:02:F7:0E:C2:F2:58:D6:C1:6B:D2:E4:E8:D1:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/hgXXWZoEAvcOwvJY1sFr0uTo0f4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hgXXWZoEAvcOwvJY1sFr0uTo0f4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/E0978148B5C411F1A36DE3DDCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.44.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:ab:d9:f7:65:cd:7b:3e:c1:6e:19:4f:d7:24:94:f3:4d:17:
         1d:e9:cd:99:71:88:2d:73:84:32:70:01:12:c0:31:a0:4b:d3:
         bc:37:3e:0d:30:49:40:c2:9e:f2:78:50:94:e7:ce:57:14:04:
         43:99:f3:5c:49:20:53:e4:8e:21:15:da:e1:ab:84:21:0a:2a:
         50:72:67:04:47:f7:bd:14:2d:80:1a:ce:59:15:c3:68:be:c6:
         3e:0d:a8:d6:83:02:9e:96:8f:89:67:2c:58:ae:5e:c5:fd:f5:
         aa:32:93:f9:d4:d0:9f:12:7b:55:09:93:69:49:dd:d9:83:34:
         2a:1a:c0:6e:5b:28:02:60:33:c6:0b:12:26:3a:c6:63:c6:17:
         62:e2:c7:f6:6a:d8:eb:9f:c6:6d:d3:7a:f0:bb:30:6b:59:21:
         29:d2:b3:73:5d:45:9d:68:56:15:3b:d8:5d:a8:a0:92:1f:8d:
         2f:4b:3b:6f:b8:7f:30:24:ae:e2:8d:b5:87:ae:ba:28:58:b2:
         07:b8:f3:29:2d:40:0b:07:cf:b2:67:a6:64:02:f4:24:0a:dd:
         a8:49:df:e7:2b:9e:79:cf:70:ea:cc:b4:e4:f4:7b:93:cf:20:
         87:60:1c:ce:3c:60:87:82:a0:a7:51:73:ff:d9:f5:77:fc:3f:
         69:be:44:12
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCDAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RjA2MjhBRjExMC8GA1UEBRMoODYwNUQ3NTk5QTA0MDJGNzBFQzJGMjU4RDZDMTZC
RDJFNEU4RDFGRTAeFw0yNjA5MjExNDAwNTdaFw0zNjA5MjExNDAwNTdaMBgxFjAU
BgNVBAMTDTZhYjEzODlkLTJlNjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC+2NwaAIlM1CsDOtNzdcosU3vyrl11cceZomalj2iQEGNnYBGWw164YKAc
Qm8PLUfnwz4VicpbE9SQok9+fzPoXQL6CJPVBloVnsFDv+VJDQqTJe3lpgx1hQpT
lUp3F5cg5u2v0R/VbnLHKA76va8uNLqWUB7DStLFdpVBmHFp76eh18mPT4518NSS
9aBJpK3EsKHBQsxgdxrqRLpRvjhI8YG8ipR9U+bzQBbyoq9BPE6h3Hm0Nutt1evo
BYrIClxRBVf90UrzT63dGiLw1OObbCMDyJmP20cvV+rvetKDfPqkxyxswebDi88z
1HOEYGZRF5QP51EokLhN6W08LpHzAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUc/j4
ospOjCQldD1tEJU94fheEEAwHwYDVR0jBBgwFoAUhgXXWZoEAvcOwvJY1sFr0uTo
0f4wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkYwNjI4L0YwQ0NCRTdDRkJBMDExRUJBQjc4NkM0OUQ4QTAxNENFL2hnWFhX
Wm9FQXZjT3d2Slkxc0ZyMHVUbzBmNC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2hnWFhXWm9FQXZjT3d2Slkxc0ZyMHVUbzBmNC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkYwNjI4L0YwQ0NCRTdDRkJBMDExRUJBQjc4NkM0OUQ4
QTAxNENFL0UwOTc4MTQ4QjVDNDExRjFBMzZERTNERENFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADELH4wDQYJKoZIhvcNAQEL
BQADggEBADCr2fdlzXs+wW4ZT9cklPNNFx3pzZlxiC1zhDJwARLAMaBL07w3Pg0w
SUDCnvJ4UJTnzlcUBEOZ81xJIFPkjiEV2uGrhCEKKlByZwRH970ULYAazlkVw2i+
xj4NqNaDAp6Wj4lnLFiuXsX99aoyk/nU0J8Se1UJk2lJ3dmDNCoawG5bKAJgM8YL
EiY6xmPGF2Lix/Zq2Oufxm3TevC7MGtZISnSs3NdRZ1oVhU72F2ooJIfjS9LO2+4
fzAkruKNtYeuuihYsge48yktQAsHz7JnpmQC9CQK3ahJ3+crnnnPcOrMtOT0e5PP
IIdgHM48YIeCoKdRc//Z9Xf8P2m+RBI=
-----END CERTIFICATE-----