Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/38140BDC9D4011F18A08EDDFCE1D38B0.roa
File:                     38140BDC9D4011F18A08EDDFCE1D38B0.roa (raw, json)
Hash identifier:          lOtg8Osa+H6brJD9L83BCp9Hwi3i1G8LfrsR3Id1rws=
Subject key identifier:   6E:0F:DA:29:F2:BE:10:76:57:E5:8F:FF:15:20:1F:67:DB:F6:6E:06
Certificate issuer:       /CN=F364712FAF/serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
Certificate serial:       084F
Authority key identifier: 3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/38140BDC9D4011F18A08EDDFCE1D38B0.roa
Signing time:             Fri 21 Aug 2026 09:10:57 +0000
ROA not before:           Fri 21 Aug 2026 09:10:53 +0000
ROA not after:            Wed 31 Dec 2036 09:10:53 +0000
asID:                     29975
IP address blocks:        41.7.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 01 Oct 2026 00:07:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2127 (0x84f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364712FAF, serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
        Validity
            Not Before: Aug 21 09:10:53 2026 GMT
            Not After : Dec 31 09:10:53 2036 GMT
        Subject: CN=6a881621-e918
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:2c:0c:b7:dc:11:05:78:5a:90:b4:80:68:2a:
                    33:b0:62:63:9f:6a:e1:f2:66:1c:44:aa:8a:8b:87:
                    71:29:b7:9c:9b:15:36:57:b8:a5:8b:8b:7d:27:87:
                    c4:0f:6d:35:52:58:8a:b9:d1:9c:d6:11:2f:79:fd:
                    15:08:63:50:a2:c1:d4:f0:e2:d9:20:84:02:a8:76:
                    3d:5e:e8:70:04:9e:85:9f:fa:82:0d:b6:50:98:50:
                    5b:67:0d:40:43:4a:81:2b:ba:5b:3f:fd:ec:1b:bd:
                    0e:a9:2c:22:b1:c8:54:e6:9c:05:2c:6c:39:d4:ec:
                    a0:df:a7:d7:9e:dd:f6:0e:90:58:ed:39:69:0b:29:
                    b3:6d:88:2a:03:30:6a:09:40:7d:38:9b:31:67:ea:
                    f1:13:f3:05:5c:a3:04:22:d4:cd:58:40:b7:19:91:
                    28:b4:6d:42:97:bf:19:30:77:69:37:9c:23:73:7c:
                    93:71:5a:a2:70:91:b4:e2:fa:ee:4a:fd:fc:19:f6:
                    6f:9c:a7:a3:48:a7:94:5d:13:37:34:5a:46:fb:20:
                    20:fa:5c:a5:03:07:2c:93:42:89:4e:d1:71:2f:21:
                    d2:be:08:9f:e3:4e:14:f0:d3:a5:25:9d:6c:e6:b3:
                    03:4d:8a:87:ea:06:12:7b:50:d0:38:f2:28:13:fb:
                    2f:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:0F:DA:29:F2:BE:10:76:57:E5:8F:FF:15:20:1F:67:DB:F6:6E:06
            X509v3 Authority Key Identifier:
                keyid:3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/38140BDC9D4011F18A08EDDFCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.7.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         6d:16:ff:60:39:f4:3b:97:27:66:10:6a:40:55:01:50:41:d2:
         a3:ae:c5:41:43:13:e0:28:5a:4e:56:75:5c:fe:e3:5b:62:ae:
         2c:b1:a2:e8:56:56:67:eb:ae:3e:d7:26:c6:2a:25:e6:96:69:
         ca:c0:b0:4f:cd:31:b1:2b:ba:13:1a:9c:ec:e2:63:af:f4:30:
         75:23:b3:fd:1a:bf:c6:56:09:eb:bd:d3:4c:51:6c:63:4b:59:
         93:3f:cd:f5:a7:a2:bd:d2:20:75:d1:10:9c:a2:66:83:19:a6:
         d2:b3:72:ed:3a:55:d9:93:c8:03:e1:ef:fe:95:a0:38:e5:eb:
         03:39:30:a5:e6:1c:92:f5:ff:47:b5:de:ab:ee:9e:a2:ad:ff:
         35:aa:fc:7c:0b:28:95:1e:8f:65:01:63:1e:11:38:3e:5e:c8:
         6f:63:c0:52:bc:11:8b:29:86:76:52:29:3b:29:2a:0a:33:8c:
         89:33:36:8b:30:ef:e0:e4:5b:fb:34:51:6b:a4:2b:4c:df:d6:
         fe:ca:d6:e5:b3:13:b9:38:74:6c:2c:4a:f9:13:53:ac:4f:0a:
         4a:af:f7:b6:89:0d:c3:12:7e:a7:9c:37:ab:3c:96:84:ab:1c:
         c7:83:a3:b8:20:4e:1a:62:91:95:7e:67:5d:3e:73:c8:73:ac:
         40:0d:ab:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----