Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/1A2F33C8ACE811F192B720EDCE1D38B0.roa
File:                     1A2F33C8ACE811F192B720EDCE1D38B0.roa (raw, json)
Hash identifier:          suFsKwvIGo1ZG9smUjAm5e8xFER3VWtwvCGzOkqGGKI=
Subject key identifier:   4F:B0:2F:98:D9:6F:0C:98:6A:34:B1:AB:02:1D:6A:FD:93:22:30:A9
Certificate issuer:       /CN=F364712FAF/serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
Certificate serial:       087D
Authority key identifier: 3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/1A2F33C8ACE811F192B720EDCE1D38B0.roa
Signing time:             Thu 10 Sep 2026 07:20:30 +0000
ROA not before:           Thu 10 Sep 2026 07:20:26 +0000
ROA not after:            Wed 31 Dec 2036 07:20:26 +0000
asID:                     29975
IP address blocks:        41.1.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2173 (0x87d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364712FAF, serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
        Validity
            Not Before: Sep 10 07:20:26 2026 GMT
            Not After : Dec 31 07:20:26 2036 GMT
        Subject: CN=6aa25a3e-4360
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:83:ab:82:6e:6f:d6:72:c1:43:2b:20:d2:50:
                    5c:c4:c8:17:a2:d6:36:b6:bb:5f:89:8a:ee:59:ae:
                    10:35:ee:ab:bb:d3:c2:b7:3b:3f:bb:4e:4f:24:2f:
                    b7:2f:c6:31:2f:61:c4:c4:9f:bd:dd:91:0b:1b:9d:
                    a1:e9:c8:22:3f:a9:89:e2:d0:0c:c8:89:69:84:fa:
                    22:b3:9e:1d:96:bb:c2:18:0c:4e:fb:0c:96:4b:41:
                    f1:8c:18:e2:91:25:61:f9:9e:93:25:bd:47:e4:1b:
                    06:cb:2e:29:67:af:be:b7:d3:ce:73:c3:24:ff:22:
                    e6:92:95:aa:c5:40:0f:90:22:9b:7b:58:56:c5:a3:
                    15:a7:46:6b:6b:60:54:a4:70:91:8a:d6:ab:7f:d0:
                    e6:4d:fd:2c:c3:86:f0:43:c1:75:30:aa:1e:ce:a7:
                    35:d1:30:18:16:75:7e:0b:ac:5a:ab:02:3b:6f:c9:
                    56:3b:d5:30:d4:76:12:3b:78:af:0d:db:32:5a:ea:
                    bd:c5:67:20:e7:84:3d:39:1a:03:dc:fa:96:af:ee:
                    5a:0d:5c:f6:06:aa:82:d3:0c:b6:57:8e:3e:0d:02:
                    54:d2:f0:3c:bf:8e:f9:57:96:1a:0c:7d:2f:7e:e8:
                    be:33:ab:0a:19:37:c6:8f:a9:6e:06:fd:29:d4:de:
                    ec:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:B0:2F:98:D9:6F:0C:98:6A:34:B1:AB:02:1D:6A:FD:93:22:30:A9
            X509v3 Authority Key Identifier:
                keyid:3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/1A2F33C8ACE811F192B720EDCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.1.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         23:f2:ec:10:1c:4d:d2:67:33:f5:ad:84:d8:c6:19:0b:76:27:
         1c:77:a5:db:e2:27:13:0e:67:02:5e:59:da:20:e1:02:d0:e4:
         f8:df:ff:10:84:fe:89:e5:c4:5a:50:3e:03:f7:7b:4b:57:fe:
         24:9a:54:e2:b1:3c:84:b0:60:c8:45:c6:aa:ab:45:98:d0:77:
         b1:9f:1e:6c:0c:9e:25:e5:6d:82:ad:09:ef:1b:00:4f:2f:08:
         0a:da:b7:a4:69:bd:6a:65:9b:cc:66:c1:96:d8:46:05:68:c1:
         ab:b7:16:22:81:d7:f0:2b:73:ec:02:95:7c:c9:5c:48:13:ae:
         58:c2:b7:c1:54:8d:fe:0d:bb:2a:b2:eb:69:5f:6a:2d:63:61:
         4d:a6:a9:86:55:b7:e6:13:30:b8:96:99:93:21:5f:94:87:96:
         9d:b3:f9:2e:dd:8b:dc:e1:27:d2:97:a8:56:b2:b6:71:db:8a:
         44:b4:b6:0e:f1:95:2f:05:e9:18:d7:c2:33:d1:fb:2d:8a:48:
         5b:1c:c0:b9:dd:22:09:2e:72:6f:ec:de:00:f7:cd:8c:5e:e2:
         c2:d8:f5:42:36:38:c6:44:e1:f2:fd:20:52:d5:e9:37:20:63:
         2f:50:71:6a:68:5a:3f:ec:db:06:ab:10:35:42:2a:6a:e4:96:
         58:a3:2e:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----