Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/5F49B276B1A211F1B930C111CF1D38B0.roa
File:                     5F49B276B1A211F1B930C111CF1D38B0.roa (raw, json)
Hash identifier:          /zajoY0lenIREaWom0hSK4WMCaEV7MBvWkFqmviavac=
Subject key identifier:   66:B6:50:FC:D8:10:FA:44:F0:5D:FB:F0:58:A6:7E:B0:3F:C0:B2:39
Certificate issuer:       /CN=F364712FAF/serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
Certificate serial:       08C0
Authority key identifier: 3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/5F49B276B1A211F1B930C111CF1D38B0.roa
Signing time:             Wed 16 Sep 2026 07:43:57 +0000
ROA not before:           Wed 16 Sep 2026 07:43:53 +0000
ROA not after:            Wed 31 Dec 2036 07:43:53 +0000
asID:                     29975
IP address blocks:        41.26.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Sep 2026 00:07:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2240 (0x8c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364712FAF, serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
        Validity
            Not Before: Sep 16 07:43:53 2026 GMT
            Not After : Dec 31 07:43:53 2036 GMT
        Subject: CN=6aaa48bd-00af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a4:bf:77:02:99:55:1e:23:03:bb:5a:b8:ea:
                    eb:1f:7a:c2:cd:f9:c7:b5:45:fd:10:dd:52:ae:1c:
                    8b:7d:34:39:90:4a:a7:a9:61:78:a3:81:d2:2a:cf:
                    e3:e0:5b:15:8a:46:05:f1:96:de:90:39:c7:f1:d3:
                    48:54:89:00:30:90:e6:48:38:42:5b:37:62:ad:3e:
                    92:ee:99:3a:d0:be:cc:e4:9a:f7:4d:2b:06:75:42:
                    89:83:33:6b:ec:7f:d9:31:44:c0:7c:53:9c:9e:3d:
                    79:56:cd:39:a7:63:81:f7:be:52:10:8f:5e:19:a6:
                    8c:d0:9e:2c:c9:dc:9a:68:29:69:6a:10:48:75:31:
                    fd:96:f8:9e:5d:aa:66:23:96:4b:07:f5:cf:c7:97:
                    eb:33:5c:e3:e0:b5:8d:0b:b3:00:3d:cb:86:e6:61:
                    ed:55:de:2a:fc:57:2d:1f:a3:19:96:2d:48:04:7a:
                    ca:3f:25:63:87:3b:13:4b:6a:1e:64:03:54:a8:6f:
                    43:35:e5:7c:2f:d4:a7:48:ef:21:45:20:ee:ed:0c:
                    d6:c9:b1:17:36:b6:46:5d:7a:5a:61:81:88:5c:b1:
                    06:70:15:45:e2:5e:7c:78:55:87:c0:56:64:82:9d:
                    a1:ce:6d:fd:c7:29:31:f3:c9:8c:56:a4:3c:ee:06:
                    2c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:B6:50:FC:D8:10:FA:44:F0:5D:FB:F0:58:A6:7E:B0:3F:C0:B2:39
            X509v3 Authority Key Identifier:
                keyid:3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/5F49B276B1A211F1B930C111CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.26.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         45:84:20:b8:52:85:3f:05:80:17:2b:60:3a:85:98:0e:27:d4:
         e2:fc:48:e0:76:de:e1:7d:4d:91:58:a7:bc:a2:6c:41:7f:25:
         2d:e3:71:0c:36:68:0e:da:2f:cd:a0:77:73:e9:ec:97:e9:63:
         47:ec:65:ae:e4:01:87:75:66:77:e7:46:01:59:ac:52:56:33:
         c6:85:b7:1d:5a:3b:58:68:df:0c:c7:83:4f:59:41:e2:42:17:
         35:8b:aa:26:bf:bc:08:ed:90:50:78:61:83:7e:7d:12:19:0f:
         b5:f4:15:f0:d8:0c:95:27:7d:3c:4e:e2:3d:c1:f8:64:5f:99:
         84:71:02:01:9f:63:97:6a:f8:f5:76:ce:71:3f:b8:20:7f:c1:
         51:42:d0:0e:b1:54:b4:6a:ce:ae:49:ed:22:79:bc:63:c0:c9:
         b3:3d:e9:e1:c0:ba:2f:68:49:de:64:4d:cf:55:8d:b0:0c:34:
         6d:96:96:b3:9f:9c:c3:71:fb:a9:01:b5:6d:18:46:9a:7c:15:
         65:7f:46:63:3c:2f:b5:9c:61:1f:35:9e:39:6f:e8:3c:c7:a5:
         b6:a6:10:f4:02:aa:7f:72:ed:b7:77:6b:1f:73:41:54:fd:21:
         2b:56:e1:d3:e0:6a:b4:79:76:b7:f4:52:6c:f3:1c:87:dd:3d:
         77:8c:35:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----