Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/2F189676AA9011F1A1CF6EBCCE1D38B0.roa
File:                     2F189676AA9011F1A1CF6EBCCE1D38B0.roa (raw, json)
Hash identifier:          eBKSkr0/oRoZSPnDkex7bcx9P6awEDe2Wb12rR79XQo=
Subject key identifier:   E6:3E:3E:7D:86:F4:25:5B:A0:B2:1C:09:59:B1:FC:17:AB:30:25:5A
Certificate issuer:       /CN=F364712FAF/serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
Certificate serial:       0874
Authority key identifier: 3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/2F189676AA9011F1A1CF6EBCCE1D38B0.roa
Signing time:             Mon 07 Sep 2026 07:46:07 +0000
ROA not before:           Mon 07 Sep 2026 07:46:03 +0000
ROA not after:            Wed 31 Dec 2036 07:46:03 +0000
asID:                     29975
IP address blocks:        41.1.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 01 Oct 2026 00:07:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2164 (0x874)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364712FAF, serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
        Validity
            Not Before: Sep  7 07:46:03 2026 GMT
            Not After : Dec 31 07:46:03 2036 GMT
        Subject: CN=6a9e6bbf-ae99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:04:0d:90:bc:0a:6f:08:da:f5:c4:9f:1a:84:
                    1f:fa:2e:c3:83:c1:46:ce:d1:b2:57:75:93:84:76:
                    54:db:7a:c6:e8:4f:e3:d0:41:98:73:ea:ff:75:b1:
                    58:cf:f5:8a:16:ca:c0:82:ed:0b:d3:d6:83:ec:e0:
                    3a:a0:f2:28:49:5b:4c:d9:8b:30:ed:37:09:e3:ea:
                    3a:5e:99:c7:58:4e:1a:ed:2b:71:05:3f:53:cb:cc:
                    05:34:f3:b7:01:8e:f4:12:ab:ac:08:22:80:20:6e:
                    28:55:ec:68:a6:64:17:6c:be:02:1f:72:93:41:f8:
                    ee:1c:2f:87:01:50:13:fc:30:bd:0d:c4:28:30:42:
                    79:2a:8f:81:3b:3b:be:71:6f:aa:3e:b3:98:92:fc:
                    75:8c:48:12:e0:c6:c3:0b:7a:c4:fa:fc:f0:92:f6:
                    f1:20:d7:9a:ac:6b:d4:15:60:86:f9:0d:0e:2e:90:
                    e0:44:2f:cb:6f:88:b0:07:85:c7:0d:8d:ca:c1:01:
                    64:72:99:82:02:16:8b:d3:98:29:7f:46:0c:8b:69:
                    a8:a4:7f:e1:cd:8d:46:5f:a1:bf:73:94:a3:ce:9d:
                    29:26:aa:cc:82:ad:4b:b7:14:1f:d9:6f:da:a7:aa:
                    03:fc:84:f2:86:a6:bb:e4:83:09:af:90:70:06:19:
                    01:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:3E:3E:7D:86:F4:25:5B:A0:B2:1C:09:59:B1:FC:17:AB:30:25:5A
            X509v3 Authority Key Identifier:
                keyid:3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/2F189676AA9011F1A1CF6EBCCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.1.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         14:07:26:cb:5b:e2:27:da:0e:79:48:20:43:59:bd:02:9d:ac:
         6e:3f:85:ee:93:70:a2:7a:6d:3f:b7:ec:8d:da:11:df:e5:14:
         34:55:18:a3:8f:6f:e2:89:c2:64:2d:47:5f:81:25:bc:73:f8:
         e0:68:eb:5a:41:01:54:2a:77:46:5f:55:2d:11:69:a4:2a:96:
         39:87:a4:ca:4e:a1:49:51:d2:59:e5:58:4b:d4:1c:d9:98:20:
         8c:a5:44:2e:70:49:dc:e7:f0:51:35:f3:70:b9:9c:55:ef:cf:
         d7:d6:0d:c5:75:ac:f0:dc:1c:5d:a5:25:da:e1:6b:d0:f4:c7:
         eb:c9:d5:bd:62:8d:38:f5:09:72:5f:88:ba:b9:08:e0:22:af:
         dd:2f:ab:52:8d:3e:a6:95:33:f5:bf:ee:58:1e:c0:4a:b9:3d:
         21:21:6d:b5:f0:0a:fa:cf:54:86:34:13:e8:4d:18:67:21:35:
         45:79:83:f0:78:2d:37:7f:33:a5:18:87:24:84:71:af:86:1d:
         99:54:5e:d5:9c:8f:7e:9a:9a:ca:df:f6:a2:56:cd:f1:62:0d:
         db:53:eb:7c:fe:07:98:12:bc:7a:cd:eb:21:ba:10:53:20:08:
         38:d8:61:21:f4:fa:ea:6c:df:43:59:d4:05:f9:41:0b:75:27:
         ce:00:61:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----