Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/153AC55AB01511F18792A1A8CE1D38B0.roa
File:                     153AC55AB01511F18792A1A8CE1D38B0.roa (raw, json)
Hash identifier:          /q+IdnQwmQBCNgboVvgSMFor3rPvhIGcL9y2JpgZGHs=
Subject key identifier:   DF:1E:08:F5:2F:21:70:17:84:27:24:27:70:C6:9D:F1:DD:52:A0:AD
Certificate issuer:       /CN=F364712FAF/serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
Certificate serial:       0889
Authority key identifier: 3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/153AC55AB01511F18792A1A8CE1D38B0.roa
Signing time:             Mon 14 Sep 2026 08:20:03 +0000
ROA not before:           Mon 14 Sep 2026 08:19:58 +0000
ROA not after:            Wed 31 Dec 2036 08:19:58 +0000
asID:                     29975
IP address blocks:        41.3.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2185 (0x889)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364712FAF, serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
        Validity
            Not Before: Sep 14 08:19:58 2026 GMT
            Not After : Dec 31 08:19:58 2036 GMT
        Subject: CN=6aa7ae32-2a17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:58:ed:e7:72:0c:68:3f:b5:85:5a:aa:33:8f:
                    f4:83:ec:c7:79:0e:b8:b6:ab:3d:96:5c:d2:91:e7:
                    06:05:c3:d4:27:1e:60:c5:c2:30:d5:6a:92:c0:29:
                    c4:b3:64:c9:8d:8b:53:9c:05:e7:b3:41:e9:7e:43:
                    9d:24:8e:c1:32:da:1f:2c:8f:01:d2:bb:92:86:d9:
                    ea:11:08:6f:9f:61:8f:f8:75:c0:02:59:19:f7:40:
                    8a:08:b0:b5:2b:03:97:c1:fc:86:46:15:4a:f5:40:
                    1f:f8:e7:cc:70:d8:83:27:dd:64:b7:65:12:ee:2f:
                    a0:f8:70:7c:34:1c:f5:e5:cc:cb:3e:29:36:2b:99:
                    d2:cd:42:a9:97:d2:3c:35:17:65:50:66:07:13:3c:
                    56:63:f4:ad:44:aa:de:5f:ab:52:a2:79:04:6c:bc:
                    49:a3:e3:fb:db:92:ec:4d:3a:3a:5f:c7:fb:b8:c3:
                    c1:ac:bc:9a:e9:a8:66:41:39:e2:27:70:c8:ac:d4:
                    65:6a:af:73:ab:bc:1c:6d:16:bb:82:2f:36:05:65:
                    0b:d9:c0:12:91:05:12:0b:0d:94:45:0f:71:24:c0:
                    0e:a9:fb:76:1a:13:7c:b0:f4:23:a1:dc:1d:27:c2:
                    e9:73:3a:93:78:2a:d5:42:6e:91:3a:e8:7d:de:52:
                    bf:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:1E:08:F5:2F:21:70:17:84:27:24:27:70:C6:9D:F1:DD:52:A0:AD
            X509v3 Authority Key Identifier:
                keyid:3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/153AC55AB01511F18792A1A8CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.3.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         51:13:55:62:35:1f:79:be:f3:6c:9e:3f:2d:c2:76:7f:4b:b6:
         eb:3d:6a:72:b3:f7:48:df:62:17:cf:8b:0b:e9:45:dd:80:0a:
         35:6b:b8:c0:38:4b:f3:78:10:67:67:47:fd:36:d3:92:f1:91:
         28:66:b1:93:14:ff:fa:ff:c1:9d:38:d1:94:d3:2d:e6:7f:bd:
         71:0e:80:a6:2c:fe:2c:4f:05:93:5c:91:7c:3d:c3:d6:1f:1c:
         90:f7:2e:e8:04:5f:de:a7:57:72:da:b9:aa:28:9e:4d:a5:56:
         81:d0:50:7d:8f:0c:fa:4f:38:a4:34:4d:fb:1d:7c:c3:17:09:
         55:0d:6f:62:35:ef:8f:f7:ad:e6:91:63:cd:1f:2a:89:e3:c4:
         0e:cc:bf:79:a0:73:ed:9b:c9:33:68:d5:16:cc:2b:c5:c3:08:
         ef:67:b6:f3:95:66:0e:fc:cf:96:5d:e0:42:2f:9c:43:93:71:
         aa:41:c2:4b:63:b6:bf:56:76:e3:48:ff:86:ae:10:82:84:ed:
         f4:fa:6f:1f:d8:8b:b9:b7:05:30:64:eb:bd:1c:70:6c:f1:fa:
         7e:08:ac:90:1a:70:f6:fe:70:63:b7:af:cc:ed:54:96:0f:28:
         db:68:c3:cb:d3:6e:e2:7a:92:ff:c8:df:20:f0:d3:85:7c:9c:
         6d:66:bc:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----