Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/0681DDDCB0D811F19AAEADC5CE1D38B0.roa
File:                     0681DDDCB0D811F19AAEADC5CE1D38B0.roa (raw, json)
Hash identifier:          30AU7RQHcBYAvoOcRc46YHTPnNxvbzeJ1Y93AHqdUD0=
Subject key identifier:   89:17:3D:08:04:CE:D6:EA:7C:0E:9E:D8:A4:25:FE:2A:85:D4:39:25
Certificate issuer:       /CN=F364712FAF/serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
Certificate serial:       08A9
Authority key identifier: 3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/0681DDDCB0D811F19AAEADC5CE1D38B0.roa
Signing time:             Tue 15 Sep 2026 07:35:30 +0000
ROA not before:           Tue 15 Sep 2026 07:35:26 +0000
ROA not after:            Wed 31 Dec 2036 07:35:26 +0000
asID:                     29975
IP address blocks:        41.17.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Sep 2026 00:07:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2217 (0x8a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364712FAF, serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
        Validity
            Not Before: Sep 15 07:35:26 2026 GMT
            Not After : Dec 31 07:35:26 2036 GMT
        Subject: CN=6aa8f542-74be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:80:c1:b1:65:6f:b8:f5:e2:d9:29:59:27:7d:
                    4c:bf:e1:af:eb:70:3b:46:66:6a:0e:b4:ab:96:49:
                    b5:97:b4:38:f7:89:39:5d:12:73:96:9d:a0:de:07:
                    6c:d1:27:51:36:46:0f:84:15:12:2e:ed:a3:72:bc:
                    7c:48:cf:c8:a8:56:59:b1:4b:b0:fc:89:ea:3d:f6:
                    45:1f:da:db:5f:4a:29:dd:82:cb:1b:0e:ff:08:30:
                    73:96:de:5e:51:02:f5:80:a3:7f:e5:c4:23:1e:dc:
                    e2:a7:17:27:16:7c:5a:d7:c7:6f:34:81:a6:0c:d7:
                    7a:4a:b5:0e:a5:11:d2:b1:e2:e5:90:b8:10:90:25:
                    6f:a3:6b:79:d1:21:7a:f7:26:2b:0d:89:55:71:89:
                    e0:63:1c:00:76:69:c8:a6:bb:f9:b0:2a:5a:0d:e9:
                    fc:b0:d7:7e:53:31:1d:94:60:c7:54:ee:3f:da:56:
                    2b:d5:72:39:ec:d6:bd:94:5d:3f:15:47:7b:9d:7f:
                    b0:3f:56:4e:86:20:b7:47:3d:2a:b0:ac:3e:52:12:
                    26:e9:b8:d1:78:3a:4c:1a:db:96:7b:3a:c8:08:a9:
                    60:57:ca:27:ad:86:0b:15:e4:1c:2c:fc:9f:6d:27:
                    51:e4:47:75:60:36:c2:31:06:32:a1:da:c0:90:46:
                    b3:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:17:3D:08:04:CE:D6:EA:7C:0E:9E:D8:A4:25:FE:2A:85:D4:39:25
            X509v3 Authority Key Identifier:
                keyid:3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/0681DDDCB0D811F19AAEADC5CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.17.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         c2:e0:ec:31:1c:61:bb:73:df:41:64:f0:25:e1:8e:92:b0:a8:
         52:b1:c0:18:24:be:b2:a7:cf:72:fa:f4:22:bd:91:83:f2:d5:
         80:e8:b0:41:db:61:9c:57:67:29:fd:1a:86:0e:35:af:9b:ee:
         22:a3:9d:d3:90:bc:c1:6a:2f:80:03:bd:06:0d:65:ae:ad:66:
         79:f4:55:c1:f6:4b:c9:0a:7b:bb:e2:fa:44:40:63:e4:87:98:
         75:af:ca:94:14:a0:59:36:5b:22:d7:96:cb:ce:a3:0f:db:c0:
         de:85:9d:75:5f:b3:29:6c:a4:c0:64:e6:1e:70:b5:3f:22:91:
         df:9c:b6:69:d6:45:47:f8:ab:d2:84:26:7b:01:6a:f0:21:bc:
         92:4a:a6:57:41:38:88:72:b3:9c:da:f0:16:2c:0b:6e:db:4c:
         4c:d2:65:4f:4a:ef:e8:ae:6c:66:85:58:c9:ea:bd:9a:ac:62:
         7e:33:6a:bb:c6:1c:30:8d:e1:ec:be:76:ec:fe:9a:96:c3:e0:
         24:e6:b3:49:64:1b:2d:d8:8b:c3:65:40:ad:7e:f1:ea:4b:3c:
         f7:f7:7c:1f:e1:49:3c:c9:90:bd:ea:91:66:f9:88:56:1f:69:
         46:fb:e4:ea:95:a4:a9:d0:aa:63:f4:97:58:51:21:e7:3c:31:
         88:c2:75:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----