Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/0D648FF69FAC11F198F1B3C5CE1D38B0.roa
File:                     0D648FF69FAC11F198F1B3C5CE1D38B0.roa (raw, json)
Hash identifier:          f53WO3QUlkXMWWfcQP4uG0eQgLYXOcC7AsWc3mpXELU=
Subject key identifier:   52:28:6C:92:DB:1A:03:9E:76:82:B8:E5:2C:1A:7E:84:68:39:95:11
Certificate issuer:       /CN=F364712FAF/serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
Certificate serial:       0860
Authority key identifier: 3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/0D648FF69FAC11F198F1B3C5CE1D38B0.roa
Signing time:             Mon 24 Aug 2026 11:07:54 +0000
ROA not before:           Mon 24 Aug 2026 11:07:49 +0000
ROA not after:            Wed 31 Dec 2036 11:07:49 +0000
asID:                     29975
IP address blocks:        41.192.192.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2144 (0x860)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364712FAF, serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
        Validity
            Not Before: Aug 24 11:07:49 2026 GMT
            Not After : Dec 31 11:07:49 2036 GMT
        Subject: CN=6a8c2609-6516
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:01:f6:5d:eb:0f:3f:5e:ee:d6:cf:ab:51:5c:
                    cd:58:88:f7:2b:f8:d5:0b:0f:3d:88:12:a8:3e:4b:
                    99:88:d2:ea:96:2e:54:1a:82:05:bc:ad:1d:32:01:
                    51:7d:75:4b:52:fa:6b:7c:c9:d0:f6:2c:a8:d0:73:
                    61:15:c8:45:4b:24:ff:f7:63:5e:2a:14:2a:0f:fb:
                    03:0d:00:ba:a2:cd:fb:1f:cc:0b:86:71:43:94:de:
                    f0:05:dd:ac:c5:c2:af:d7:c2:d2:9a:4d:87:0b:e2:
                    fd:5c:33:bc:a8:6a:89:c1:e0:78:c6:d5:d2:7d:75:
                    4a:1f:63:b4:96:ff:a5:2e:59:47:98:84:7f:c3:7d:
                    64:34:e2:46:9d:eb:19:c9:f6:e4:14:cc:37:15:ce:
                    7e:f8:63:89:01:9a:94:cc:b5:dd:89:55:43:70:92:
                    46:17:89:5f:b4:8e:6a:72:ee:08:3a:9b:04:19:5e:
                    a4:21:1a:b3:31:8d:1a:8d:95:2c:35:20:f8:f2:88:
                    f5:81:53:f1:24:c7:8f:06:67:1d:cf:a3:2a:65:ec:
                    35:69:af:d1:f5:75:38:15:57:99:19:ca:f7:9b:d1:
                    68:e7:84:0d:72:c6:2d:ec:45:5e:8e:4d:58:6d:d6:
                    eb:7e:60:39:39:ff:b6:34:c5:e7:70:36:f1:8e:dc:
                    9c:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:28:6C:92:DB:1A:03:9E:76:82:B8:E5:2C:1A:7E:84:68:39:95:11
            X509v3 Authority Key Identifier:
                keyid:3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/0D648FF69FAC11F198F1B3C5CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.192.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         af:59:22:83:cc:17:0a:0d:11:6e:bf:6f:7c:72:fc:49:f4:85:
         fa:97:13:50:0e:31:cb:b7:88:88:38:d1:ed:41:67:0f:a2:4c:
         b2:10:02:5a:01:f9:65:03:c9:10:c3:78:12:3c:71:c0:54:71:
         d9:46:03:53:e6:3f:79:8b:69:bb:aa:8e:0d:18:3d:c6:da:d9:
         82:70:ba:d4:d4:89:7a:9b:dc:ba:ae:89:45:3b:a2:fc:9b:8f:
         bb:b1:69:ed:4e:f5:e2:1d:25:73:6b:63:3f:f0:43:a9:2e:a6:
         bc:68:35:f6:ea:0c:b1:d1:87:8c:e4:4e:60:3e:20:b3:d8:50:
         1e:50:59:0a:fc:ca:32:94:58:ae:56:6e:2a:79:98:12:05:fd:
         71:0f:68:f9:aa:43:22:e0:99:9a:d0:da:13:d2:18:34:9c:be:
         bc:a3:9b:17:6c:7e:91:cf:dc:9a:89:67:01:4d:b9:4f:01:d4:
         89:4a:0e:58:7b:08:b5:03:5f:de:a9:7e:5f:ff:6a:3d:74:4c:
         43:cb:1e:48:92:fb:a5:3b:a0:42:3b:b2:99:4c:fa:97:6a:21:
         d8:82:39:be:2c:c0:88:80:30:0b:b2:ae:fd:c7:2c:a5:f3:8b:
         ec:9f:ef:c1:62:a1:35:83:c8:8a:69:69:30:fa:66:0f:6a:77:
         dd:35:98:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----