Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/477555D8B01C11F18B7599D1CE1D38B0.roa
File:                     477555D8B01C11F18B7599D1CE1D38B0.roa (raw, json)
Hash identifier:          T0itRuIK8dBhkiRi7KRHO81VdMbLigh5a5ANHw4RJnA=
Subject key identifier:   70:3C:6D:7F:44:6A:78:A4:52:A9:F8:B3:E9:A6:01:11:B9:BC:F8:E6
Certificate issuer:       /CN=F364712FAF/serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
Certificate serial:       089A
Authority key identifier: 3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/477555D8B01C11F18B7599D1CE1D38B0.roa
Signing time:             Mon 14 Sep 2026 09:11:33 +0000
ROA not before:           Mon 14 Sep 2026 09:11:29 +0000
ROA not after:            Wed 31 Dec 2036 09:11:29 +0000
asID:                     29975
IP address blocks:        41.8.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 03 Oct 2026 00:07:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2202 (0x89a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364712FAF, serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
        Validity
            Not Before: Sep 14 09:11:29 2026 GMT
            Not After : Dec 31 09:11:29 2036 GMT
        Subject: CN=6aa7ba45-d6c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:6d:fd:86:57:49:84:00:d4:df:07:dc:a0:31:
                    5e:b7:da:73:8a:a7:39:f6:66:f1:31:5a:03:aa:3c:
                    8b:23:47:a2:fa:cd:ed:bd:e4:03:e1:a6:b7:48:a2:
                    96:78:b9:1a:1a:9d:49:3b:d2:ab:1c:49:f1:ec:50:
                    01:4c:7f:b2:5a:74:b9:99:b4:2b:7d:e8:b6:b2:bb:
                    86:6f:69:c6:ee:86:db:f7:7e:79:91:2a:2b:98:97:
                    c6:7a:1a:aa:28:0f:93:30:90:e8:f9:f8:9c:b6:20:
                    b2:00:18:67:15:87:71:e0:55:98:1a:19:18:63:8c:
                    ab:45:12:5f:8c:d5:fb:7b:ec:aa:26:06:98:2d:29:
                    33:de:4b:bf:47:8e:b4:59:f6:6c:07:ee:0d:8b:a3:
                    10:e8:1d:f4:20:64:ee:f8:d0:60:80:3e:0b:4a:e4:
                    67:be:d2:64:f6:15:fc:35:a8:75:cb:a3:ce:79:ce:
                    dc:41:47:1d:bd:6a:33:3d:f6:34:0e:e4:ba:d6:ec:
                    83:94:31:0a:ec:86:c3:d6:0c:68:d1:9f:6b:37:b9:
                    f8:64:90:1c:0e:ca:b0:a0:f0:70:7d:a6:48:86:9a:
                    10:e9:c1:f2:9a:29:e3:ff:2b:a9:8d:c4:a8:40:9a:
                    b6:d1:12:56:07:3d:64:78:bd:fb:c3:bf:af:37:37:
                    0c:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:3C:6D:7F:44:6A:78:A4:52:A9:F8:B3:E9:A6:01:11:B9:BC:F8:E6
            X509v3 Authority Key Identifier:
                keyid:3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/477555D8B01C11F18B7599D1CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.8.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         75:f2:fa:e2:52:80:4e:6e:03:58:03:40:98:92:12:4e:99:7c:
         6c:eb:20:5a:e0:e8:ff:6c:e0:ef:23:d7:92:22:96:58:f6:43:
         42:bd:33:59:64:3e:39:76:60:81:98:dc:8b:21:42:ea:b4:e0:
         6c:02:5a:11:9a:ba:e9:16:14:e6:fb:28:1b:c6:e3:b3:f3:39:
         d7:da:13:e7:c2:2a:ba:d4:56:e7:8d:e6:c2:1e:2c:5b:ba:52:
         8e:01:a2:55:40:ed:28:12:e1:23:28:4f:35:d3:5e:d6:33:79:
         31:99:61:7b:d3:e1:f5:08:3d:15:c6:ef:bd:24:f9:9d:96:41:
         ff:bc:b5:16:3b:5a:59:61:bb:d0:25:82:7e:bf:6f:20:54:3d:
         1f:46:57:ed:e4:5f:45:6c:67:9c:e6:de:d4:df:97:8f:9e:06:
         1a:b6:7b:90:af:51:14:79:c4:70:ad:88:8e:6c:28:07:ba:ad:
         d3:76:f6:91:41:40:22:f8:80:38:f6:e5:ab:9d:f6:74:dd:42:
         70:ce:42:9b:1e:61:40:f4:7d:f1:9b:57:1f:7f:55:00:66:d0:
         3b:57:01:c3:84:77:7c:2a:77:7d:63:6a:1a:6f:17:b3:87:3f:
         a3:7f:a5:b6:0c:4d:f9:9a:8d:73:5e:9f:a6:89:d4:b1:73:78:
         62:70:3a:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----