Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/51FEBC10B26F11F183FD69E7CE1D38B0.roa
File:                     51FEBC10B26F11F183FD69E7CE1D38B0.roa (raw, json)
Hash identifier:          wyKYmmFOMcqOD5ZuKXZdfquuWFDfKqXGmkZJYjraNfQ=
Subject key identifier:   CB:93:8A:6E:3E:41:E0:13:EB:40:C1:BF:1F:7E:90:C3:8A:83:FC:1C
Certificate issuer:       /CN=F364712FAF/serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
Certificate serial:       08E9
Authority key identifier: 3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/51FEBC10B26F11F183FD69E7CE1D38B0.roa
Signing time:             Thu 17 Sep 2026 08:11:01 +0000
ROA not before:           Thu 17 Sep 2026 08:10:57 +0000
ROA not after:            Wed 31 Dec 2036 08:10:57 +0000
asID:                     29975
IP address blocks:        41.31.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2281 (0x8e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364712FAF, serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
        Validity
            Not Before: Sep 17 08:10:57 2026 GMT
            Not After : Dec 31 08:10:57 2036 GMT
        Subject: CN=6aaba095-e688
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:06:ce:b2:79:35:59:b6:bc:c9:93:31:a5:ef:
                    cf:ae:ae:03:71:32:d8:7b:55:fe:b8:85:f2:e5:50:
                    8a:f9:10:2c:3e:fc:10:20:db:bf:e4:5e:c4:17:fc:
                    07:87:27:bf:61:2b:47:a1:fe:54:6f:e8:9b:ee:0b:
                    91:75:d5:e5:64:34:b0:87:7e:59:77:3c:d2:5f:51:
                    e2:3c:02:68:96:77:34:45:3b:48:3b:a7:5f:84:81:
                    3a:38:ae:f5:f7:e8:39:cd:38:1d:21:c9:b2:12:8e:
                    7b:64:eb:7b:0e:38:27:03:2e:b1:fb:9f:3a:ce:22:
                    f1:d2:d0:48:af:ae:0d:ba:b7:32:4b:66:ac:23:d7:
                    7a:62:14:14:33:68:08:aa:76:0b:90:de:a3:9f:55:
                    2a:44:3d:3d:c4:f1:66:af:b2:3e:1b:ee:33:fa:f6:
                    12:2f:f0:de:6f:6c:98:f2:b4:81:69:5c:30:e5:0a:
                    32:be:d7:32:0e:5e:b0:76:09:32:11:b8:0f:b0:be:
                    1d:f9:b1:bb:7b:50:c9:82:5b:e0:da:75:87:da:b8:
                    b6:3a:4e:cf:a8:47:38:84:26:d3:ef:3c:f4:4c:fa:
                    52:a1:5f:d1:8e:3e:c1:42:c0:ac:06:05:bf:4d:82:
                    b3:a7:11:c7:85:62:5c:97:b3:fd:52:bf:57:72:c1:
                    21:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:93:8A:6E:3E:41:E0:13:EB:40:C1:BF:1F:7E:90:C3:8A:83:FC:1C
            X509v3 Authority Key Identifier:
                keyid:3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/51FEBC10B26F11F183FD69E7CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.31.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         27:b7:72:7d:ed:5c:a9:67:a0:9d:a1:aa:62:15:f4:d2:8e:c5:
         c5:a4:8e:60:61:34:76:c1:c0:98:8a:78:9e:60:ad:88:0d:c3:
         75:21:68:74:f1:99:b1:00:52:a6:09:5f:e5:39:bc:03:e0:b1:
         94:9a:a8:99:ff:ac:5c:8d:3a:f0:41:b7:01:42:35:bc:75:cf:
         dd:49:e3:d8:67:3a:21:2d:1d:4e:c7:7d:57:6d:b2:6b:f3:25:
         e5:94:7b:48:d2:89:86:2d:27:97:a3:11:0e:fe:1c:8f:79:b2:
         eb:5d:2a:5f:41:f6:ed:c8:31:cc:21:c5:8b:81:b3:9f:de:87:
         06:55:83:3d:2a:d9:d1:7b:82:11:5b:dd:e4:5b:52:37:e2:5c:
         63:24:3b:76:38:1d:1a:47:38:ef:c0:0b:a8:53:ed:79:79:bf:
         8c:72:26:d2:0a:f2:0c:44:94:8b:d6:a3:9a:31:b7:9f:4e:5c:
         3b:f7:70:bb:5a:39:27:e3:8d:37:8f:96:94:7f:85:19:47:b8:
         20:33:d9:74:a1:f8:6c:8a:6b:c3:e7:15:92:92:84:20:4e:ae:
         1f:14:bc:60:d4:15:9b:06:82:d7:d7:86:1b:c1:e3:47:cb:da:
         1f:15:73:f5:97:50:e3:9a:16:7a:39:35:c4:fb:51:0d:65:8b:
         1e:0f:5a:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----