Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/56BFB08E9D4211F1A7BB26ECCE1D38B0.roa
File:                     56BFB08E9D4211F1A7BB26ECCE1D38B0.roa (raw, json)
Hash identifier:          qLwyxGgHvR4WwsXJwxBVYwy0psihjCxNYzoh9miAhfs=
Subject key identifier:   85:44:90:F6:3A:E7:3F:AF:91:5F:FB:BF:FB:13:A6:C6:17:42:9C:09
Certificate issuer:       /CN=F364712FAF/serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
Certificate serial:       0855
Authority key identifier: 3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/56BFB08E9D4211F1A7BB26ECCE1D38B0.roa
Signing time:             Fri 21 Aug 2026 09:26:08 +0000
ROA not before:           Fri 21 Aug 2026 09:26:04 +0000
ROA not after:            Wed 31 Dec 2036 09:26:04 +0000
asID:                     29975
IP address blocks:        41.9.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Sep 2026 00:07:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2133 (0x855)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364712FAF, serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
        Validity
            Not Before: Aug 21 09:26:04 2026 GMT
            Not After : Dec 31 09:26:04 2036 GMT
        Subject: CN=6a8819b0-d8ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:07:03:58:39:c5:81:89:c6:8f:95:14:1b:3e:
                    58:e9:82:72:33:fd:e4:64:df:44:c9:c2:83:44:b8:
                    01:85:7f:ae:5a:7a:d1:45:19:27:1d:a3:6d:19:23:
                    68:64:d9:50:e5:f3:a6:6c:02:c1:15:ed:f2:70:5d:
                    de:c9:d2:c3:6b:5e:bc:46:5d:b3:7b:b2:09:4f:11:
                    7c:92:0c:bf:90:52:25:14:d2:a9:73:f6:e0:0c:97:
                    8d:b4:cf:8b:b2:da:a1:31:c8:9c:c3:ba:9e:c7:f7:
                    49:f6:ef:d0:47:9c:ee:94:1c:d0:c2:6b:94:27:75:
                    cd:90:c7:3a:e7:8e:23:3d:c5:d4:70:a9:6b:59:a0:
                    2a:fa:e7:e6:db:f1:b1:21:1a:54:af:d4:19:a6:dc:
                    6b:cf:b8:e7:ea:e9:4d:29:52:d7:95:10:cf:44:47:
                    c4:25:8d:64:f9:03:93:11:08:08:ae:61:b8:a9:f8:
                    38:8a:93:82:6a:72:9d:8e:cc:fc:4e:18:60:d9:cd:
                    6e:73:bc:14:61:b0:49:d4:97:c9:c7:ea:75:e5:4d:
                    80:64:a0:9d:ba:8d:a0:e7:6e:10:6f:d4:e1:5b:bc:
                    3e:ab:40:bb:82:91:a8:60:74:0f:a9:84:ee:f3:46:
                    f2:e8:22:33:03:b6:ac:ba:90:75:c1:d6:14:47:d0:
                    7f:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:44:90:F6:3A:E7:3F:AF:91:5F:FB:BF:FB:13:A6:C6:17:42:9C:09
            X509v3 Authority Key Identifier:
                keyid:3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/56BFB08E9D4211F1A7BB26ECCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.9.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         a4:c7:8e:1d:12:07:3f:78:6a:83:27:be:34:49:d4:a0:ff:be:
         27:37:f4:99:9f:0b:8b:f2:de:86:ef:28:bc:32:02:97:fe:97:
         c8:46:cb:79:16:c0:c3:e4:ba:cd:c6:28:e3:9a:eb:d6:fb:6f:
         f6:fd:6a:6d:7e:00:81:84:85:cb:c6:5f:b6:8b:9c:5c:64:13:
         b8:8f:24:95:b1:25:84:6d:fa:67:94:1a:5a:fd:76:d7:42:e7:
         37:05:f3:09:ef:bc:5d:a6:bc:81:a6:af:64:75:80:b5:1c:bf:
         24:96:19:ad:f4:41:ba:ab:eb:1a:29:c7:82:26:48:ee:9b:1a:
         41:16:fd:2e:44:55:5c:54:5a:3b:c1:0b:58:37:36:be:fb:5e:
         f9:0a:da:db:6f:e6:e8:3e:01:d1:24:eb:a2:03:4e:72:54:9f:
         ef:37:df:eb:c3:7f:1d:44:f9:d8:36:93:18:45:f5:31:b7:44:
         2f:53:11:9e:4a:1a:07:99:ea:9a:bb:22:3c:24:89:06:54:fe:
         51:37:8f:40:73:26:f9:0a:4d:1c:77:0e:91:92:4c:32:69:6b:
         c2:28:86:3c:9e:fd:ba:5b:ef:aa:e8:42:93:90:b3:20:c3:0f:
         f2:5a:34:b0:79:bc:bc:3f:c2:e6:59:42:bb:98:31:7e:88:ab:
         95:b1:ba:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----