Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/2B803EA6950011F1AFE7ADC3CE1D38B0.roa
File:                     2B803EA6950011F1AFE7ADC3CE1D38B0.roa (raw, json)
Hash identifier:          HCGI8AydK2lmHMgOj3Q/r5GttNEksr7zNQO70L4WzVA=
Subject key identifier:   06:00:1F:B7:B0:04:AB:33:D6:71:1B:15:34:46:7B:CF:3E:71:A9:01
Certificate issuer:       /CN=F364712FAF/serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
Certificate serial:       082E
Authority key identifier: 3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/2B803EA6950011F1AFE7ADC3CE1D38B0.roa
Signing time:             Mon 10 Aug 2026 21:12:19 +0000
ROA not before:           Mon 10 Aug 2026 21:12:13 +0000
ROA not after:            Wed 31 Dec 2036 21:12:13 +0000
asID:                     29975
IP address blocks:        41.13.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 01 Oct 2026 00:07:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2094 (0x82e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364712FAF, serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
        Validity
            Not Before: Aug 10 21:12:13 2026 GMT
            Not After : Dec 31 21:12:13 2036 GMT
        Subject: CN=6a7a3eb3-10ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:40:c7:30:21:ed:fe:dd:fa:1c:df:6d:16:ff:
                    85:a5:02:a5:e3:00:89:15:a7:a9:b0:cf:6c:36:ca:
                    df:f3:0f:d7:26:49:c1:c9:c5:60:f6:9c:21:98:5d:
                    b6:a1:a6:c6:c2:42:84:39:22:d7:b7:2f:1d:15:91:
                    66:9e:0c:cb:46:a2:1f:cc:4d:4f:f5:cb:f2:1b:52:
                    de:a4:13:9e:66:50:6d:6e:70:eb:44:ad:11:7f:27:
                    6e:cb:56:8b:a3:20:66:f4:d6:c5:7e:1e:8c:b2:75:
                    49:48:85:fa:dd:88:b5:64:b6:de:f5:17:00:26:03:
                    ff:cc:49:43:dd:d9:d9:ec:6a:00:6f:16:f6:b7:c0:
                    ef:75:6d:a2:99:5c:aa:01:e8:ef:6d:01:a1:d0:77:
                    8e:b8:de:3c:78:79:35:1a:df:9d:35:b2:a9:6a:00:
                    81:84:91:16:29:c1:09:88:ba:4f:76:38:dd:60:9a:
                    79:ec:ea:2d:2a:e9:74:f3:23:28:0d:c6:21:5c:eb:
                    f8:b1:fd:53:8a:cf:99:6d:e2:1a:59:eb:fd:5b:64:
                    50:89:3c:a8:8c:95:97:87:cc:e7:54:8b:27:36:34:
                    82:27:2b:db:49:d8:b2:37:9d:94:9f:19:c1:0d:5f:
                    d4:37:bf:7a:4b:5b:b4:1f:37:bb:16:a1:cd:72:e2:
                    fd:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:00:1F:B7:B0:04:AB:33:D6:71:1B:15:34:46:7B:CF:3E:71:A9:01
            X509v3 Authority Key Identifier:
                keyid:3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/2B803EA6950011F1AFE7ADC3CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.13.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         38:4a:fa:79:b2:22:16:b2:b4:e5:2d:6d:c3:39:4e:52:4d:67:
         83:9f:f8:ed:54:a7:3f:99:c1:fd:25:51:9c:0b:e3:be:36:ad:
         cc:8b:c7:9f:e1:95:ea:ab:08:0b:cd:f8:23:b7:19:a4:e4:da:
         b7:9c:fe:21:cd:7e:38:73:f9:3e:99:cb:86:eb:42:99:bd:06:
         93:27:ff:d5:54:06:fb:ab:84:44:df:23:91:3d:0e:66:72:85:
         5b:3d:dc:d0:cb:3c:f1:32:d6:0d:32:6f:3e:16:67:5c:22:f8:
         03:55:e5:f4:43:d3:5a:50:e9:73:a8:b6:b0:01:4e:49:1f:6c:
         0a:2b:a9:50:e4:cb:bc:de:41:e2:36:39:8c:89:f4:1c:f0:c4:
         e7:a8:83:0a:a3:31:40:c4:18:52:c7:f6:86:03:3e:e0:f7:6e:
         27:c7:cd:4f:af:af:81:b4:b3:92:14:90:00:e3:0d:ee:68:1e:
         10:aa:b1:08:98:76:97:0d:6b:d6:3c:f5:a4:05:09:b9:ed:56:
         e7:83:1d:53:82:29:0d:b2:fa:f5:29:73:ed:7d:09:05:0c:fa:
         1f:52:b0:f0:b4:fd:22:84:97:4c:99:53:08:54:0f:29:5e:af:
         38:20:51:92:4f:fd:77:d7:04:43:5f:91:19:23:63:8a:9a:4f:
         05:65:d1:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----