Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/03AD3E8CB1A311F1915AC815CF1D38B0.roa
File:                     03AD3E8CB1A311F1915AC815CF1D38B0.roa (raw, json)
Hash identifier:          MdsIin3dEDUobdgHsZuIR+74k9zL92/elCtZb6BifyY=
Subject key identifier:   CA:83:1D:A9:62:45:02:0B:1D:97:2B:43:92:1D:53:A5:B7:B9:8A:AD
Certificate issuer:       /CN=F364712FAF/serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
Certificate serial:       08C4
Authority key identifier: 3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/03AD3E8CB1A311F1915AC815CF1D38B0.roa
Signing time:             Wed 16 Sep 2026 07:48:33 +0000
ROA not before:           Wed 16 Sep 2026 07:48:28 +0000
ROA not after:            Wed 31 Dec 2036 07:48:28 +0000
asID:                     29975
IP address blocks:        41.26.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 04 Oct 2026 02:05:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2244 (0x8c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364712FAF, serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
        Validity
            Not Before: Sep 16 07:48:28 2026 GMT
            Not After : Dec 31 07:48:28 2036 GMT
        Subject: CN=6aaa49d1-f775
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:4c:c1:40:d2:b3:2e:b7:3c:ca:03:e5:bb:fc:
                    40:d9:b1:b0:79:c5:c5:72:db:71:e6:6a:f1:d9:29:
                    d9:c0:f1:00:d8:db:e3:b4:6c:ee:b7:95:75:cb:b3:
                    f9:30:77:d6:a4:45:3f:6f:04:b2:0d:bf:e0:d9:4d:
                    71:1f:d7:1a:46:e5:8f:42:f2:59:b1:0e:a6:11:fe:
                    72:8c:36:73:7d:68:77:da:46:bd:ef:f9:4d:05:f5:
                    27:f3:58:08:e1:c9:e1:94:8f:ca:89:93:5a:40:ef:
                    4b:56:89:f3:36:f8:f3:d7:2b:f9:56:a8:c3:c8:12:
                    31:8a:4d:fa:2e:1c:fe:21:88:20:4a:3c:55:9d:13:
                    c9:87:6b:84:dd:22:a9:3a:e6:61:33:8d:da:af:09:
                    03:01:04:14:99:db:35:fa:05:5d:5d:d5:a3:22:0e:
                    38:3a:de:56:cc:b4:8f:13:7b:d3:68:81:eb:84:45:
                    f4:cf:c1:2a:fd:55:89:20:25:5b:c9:3e:4c:02:81:
                    1c:7e:f2:c4:86:ef:26:d0:f1:01:6f:a6:76:39:42:
                    9e:3a:03:d0:da:9e:c6:7d:10:c6:d0:08:9d:ee:78:
                    2a:fd:9b:35:0e:81:b5:01:89:33:69:7a:df:b7:ad:
                    fa:94:01:bc:2b:55:55:52:cf:3a:60:27:43:b5:5f:
                    d5:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:83:1D:A9:62:45:02:0B:1D:97:2B:43:92:1D:53:A5:B7:B9:8A:AD
            X509v3 Authority Key Identifier:
                keyid:3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/03AD3E8CB1A311F1915AC815CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.26.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         5f:6d:8b:94:8a:4e:3c:64:3e:8d:a9:a8:70:78:df:49:29:15:
         35:b3:43:f9:63:7e:bc:72:1d:c7:ec:5f:b3:70:0d:e2:11:54:
         a8:db:0b:ab:3b:68:41:a8:0c:99:c0:10:af:ae:5f:82:2e:dd:
         25:92:e2:1e:ac:5a:65:41:ea:ce:6a:cc:11:ee:f4:33:9c:1a:
         0f:3b:13:f8:18:06:ae:2c:ba:31:2e:a1:60:cd:70:04:41:6b:
         5d:5a:7a:25:31:ab:36:a4:86:61:81:d7:4c:23:fc:84:df:a8:
         d7:5d:47:46:e1:53:a3:7c:37:26:c5:a8:59:81:0b:5d:6e:96:
         32:76:d8:10:ee:b7:7f:77:60:09:83:b0:39:8a:8c:1e:72:5d:
         22:d2:43:10:b4:01:83:0a:91:db:ea:a0:43:14:8e:7d:fd:a7:
         b7:f7:34:66:72:dd:75:31:bc:cf:3f:f8:5b:cd:b0:16:4b:c0:
         2b:4e:7a:d8:46:d9:78:f1:6f:7f:f7:0a:f1:a1:2c:a2:3e:2e:
         6e:0d:c8:ef:f5:f7:f7:a1:91:af:30:e3:a7:b7:41:d5:a7:b9:
         6b:16:e7:9f:6f:23:d0:89:d3:d7:d5:d3:7e:b8:0a:52:80:ef:
         59:17:80:96:5f:7c:d1:88:d9:38:1c:a9:d8:9e:ac:55:f1:86:
         39:f5:59:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----