Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/0F54CC96B01811F19C1B54B9CE1D38B0.roa
File:                     0F54CC96B01811F19C1B54B9CE1D38B0.roa (raw, json)
Hash identifier:          s/SHD6BuS2m3D3+Y4+jSC01qcEYf/6dQJy64LQeU2qA=
Subject key identifier:   50:B9:C8:A5:8F:3F:28:6B:7E:44:35:1D:C9:AF:15:1A:2C:53:88:64
Certificate issuer:       /CN=F364712FAF/serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
Certificate serial:       0894
Authority key identifier: 3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/0F54CC96B01811F19C1B54B9CE1D38B0.roa
Signing time:             Mon 14 Sep 2026 08:41:21 +0000
ROA not before:           Mon 14 Sep 2026 08:41:17 +0000
ROA not after:            Wed 31 Dec 2036 08:41:17 +0000
asID:                     29975
IP address blocks:        41.4.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 02 Oct 2026 00:07:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2196 (0x894)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364712FAF, serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
        Validity
            Not Before: Sep 14 08:41:17 2026 GMT
            Not After : Dec 31 08:41:17 2036 GMT
        Subject: CN=6aa7b331-5c16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:e6:c1:60:9b:af:a0:77:f7:60:70:ce:58:1f:
                    54:81:2e:b4:89:57:64:43:db:df:60:34:02:33:2d:
                    e0:5c:85:a5:5d:6e:ff:fe:02:4a:70:d2:be:6d:53:
                    c8:67:a7:82:bd:f3:30:08:1a:77:d3:e0:b1:2a:5b:
                    16:e7:98:7d:f1:ed:c2:ac:ff:8d:6e:fc:2d:04:b1:
                    25:73:78:d6:45:54:31:2b:26:f7:33:a1:b2:97:7b:
                    1e:8a:3e:f3:6d:6d:95:32:2b:53:73:7e:55:94:a1:
                    07:16:64:0c:00:17:d8:bb:42:f2:d8:1b:c3:02:0d:
                    01:68:36:1d:c7:1b:89:48:18:01:2b:c5:1b:01:22:
                    a7:22:84:fb:ab:7c:91:fb:65:33:36:5a:c2:3d:e6:
                    d8:bf:57:5c:3b:6b:e3:8b:2e:ac:a1:4a:62:0c:86:
                    01:2a:6e:96:f4:bd:0d:c0:cf:d3:d9:2d:5e:66:19:
                    a0:8b:f3:99:ce:4f:45:16:d0:bf:d8:b4:5a:48:b2:
                    c2:72:4c:67:bd:3c:57:3c:a0:93:76:e7:dd:ab:13:
                    7b:68:72:8f:cb:cc:ce:c9:86:3b:22:8e:c1:22:4e:
                    8e:b3:8c:e9:17:34:7b:aa:4d:e4:94:e3:58:bf:c6:
                    e6:fe:4f:39:10:21:31:be:75:b0:46:81:5d:da:30:
                    0a:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:B9:C8:A5:8F:3F:28:6B:7E:44:35:1D:C9:AF:15:1A:2C:53:88:64
            X509v3 Authority Key Identifier:
                keyid:3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/0F54CC96B01811F19C1B54B9CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.4.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         c3:0b:28:17:55:95:ab:3d:27:06:63:85:a6:10:0d:c5:f2:bd:
         29:06:ae:f7:ef:c6:d3:bd:f7:c4:5c:2b:88:dc:5b:77:a2:2f:
         8c:0b:6a:fb:b5:e5:21:43:34:23:1d:08:43:8f:30:27:54:93:
         d7:94:76:a7:18:d4:0f:d1:cb:11:2b:d5:7d:b4:06:14:ea:03:
         d2:3e:55:54:db:12:94:36:f1:3b:23:4e:c2:8b:bc:f1:db:16:
         9c:a6:c4:05:59:50:4f:0a:74:c5:b9:a2:89:9a:76:7e:30:15:
         96:7e:9f:20:b0:75:f7:72:bd:d4:8a:35:d1:ab:bf:6c:99:43:
         1a:d2:64:7f:85:36:a5:35:e9:7e:50:6a:49:b6:94:0d:16:ef:
         d7:1f:02:07:35:6e:1b:9b:42:bb:bd:0f:fe:37:f2:04:02:78:
         f4:1b:f2:ee:b6:27:b4:3f:56:78:d1:24:8e:db:f4:78:38:3d:
         9a:75:67:d1:65:38:7a:8d:46:06:a4:2c:6b:00:c1:52:29:e7:
         bf:72:aa:6d:27:71:e6:04:ff:3e:69:99:4a:2d:48:eb:dc:63:
         5d:9d:0b:dd:a3:f3:e1:14:2c:ce:34:e7:80:54:29:6e:02:d5:
         70:63:43:d3:e1:d2:db:23:00:d7:47:f5:28:81:7c:5c:1f:82:
         0b:ec:70:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----