Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/68B462DA9D3D11F1B6328FCECE1D38B0.roa
File:                     68B462DA9D3D11F1B6328FCECE1D38B0.roa (raw, json)
Hash identifier:          IngsSOqCQ2GJDc/u2gejJCYiJo5OpGYtPHX2IER/g6Q=
Subject key identifier:   7F:35:AC:7F:F9:DF:05:18:01:F0:88:BD:97:EA:20:98:0A:34:8E:E8
Certificate issuer:       /CN=F364712FAF/serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
Certificate serial:       0845
Authority key identifier: 3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/68B462DA9D3D11F1B6328FCECE1D38B0.roa
Signing time:             Fri 21 Aug 2026 08:50:50 +0000
ROA not before:           Fri 21 Aug 2026 08:50:46 +0000
ROA not after:            Sun 31 Aug 2036 08:50:46 +0000
asID:                     29975
IP address blocks:        41.5.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 01 Oct 2026 00:07:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2117 (0x845)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364712FAF, serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
        Validity
            Not Before: Aug 21 08:50:46 2026 GMT
            Not After : Aug 31 08:50:46 2036 GMT
        Subject: CN=6a88116a-c803
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:8b:ec:1a:ec:98:70:29:6d:e9:48:b5:a2:e5:
                    82:43:23:a4:17:bf:8b:b1:27:4b:e9:61:e4:99:fb:
                    d6:43:69:6a:63:98:16:4f:be:69:14:c2:5d:9b:2d:
                    40:01:97:a8:f3:0c:44:c2:27:0c:dc:74:6d:b4:74:
                    c0:e5:b8:60:a1:72:6a:b7:89:72:f5:25:65:a8:92:
                    53:2a:41:b0:6c:7a:e8:a4:7c:06:b7:19:51:a3:0d:
                    71:c4:c2:33:5f:03:c0:5c:3a:70:7f:bb:e1:8a:3d:
                    73:af:be:98:27:64:0c:75:67:75:29:03:8f:af:5e:
                    f7:b1:7a:f3:9b:6d:85:ea:da:30:6d:00:8c:bd:bd:
                    7d:0a:b9:27:65:af:52:17:73:16:b6:8b:36:5f:87:
                    7a:fb:28:3f:ca:d8:0a:c3:af:4f:1f:29:f9:27:f3:
                    80:f5:30:42:d9:26:d6:25:08:0b:5c:43:f2:6f:71:
                    66:0d:cf:3e:c2:3b:37:ae:3e:78:2c:64:db:14:16:
                    b4:8c:bd:a1:26:09:85:d2:ff:56:bc:f5:0a:c2:b5:
                    61:25:5d:d6:dd:ec:c9:66:70:73:3f:71:fe:d0:3d:
                    27:3c:46:3a:38:e1:b5:ae:dc:6e:e1:83:3a:13:00:
                    68:7a:73:96:51:87:7b:de:55:c2:7e:ef:a1:db:4f:
                    25:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:35:AC:7F:F9:DF:05:18:01:F0:88:BD:97:EA:20:98:0A:34:8E:E8
            X509v3 Authority Key Identifier:
                keyid:3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/68B462DA9D3D11F1B6328FCECE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.5.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         55:ab:a5:ff:1b:fb:dc:20:f0:ea:46:14:10:d0:80:c2:29:00:
         ff:b8:63:fc:bd:e5:e6:41:71:0f:91:ea:03:45:75:38:82:da:
         9b:9a:f7:a3:76:dc:a0:fa:2d:6a:32:98:ad:ee:b3:c0:db:6a:
         15:19:5d:57:c1:4a:f7:e6:8d:10:c0:77:8b:15:7f:08:58:2b:
         3f:56:c0:68:32:c0:21:17:81:b4:bb:07:79:b2:67:e6:b3:a5:
         e5:f9:41:96:f6:61:67:d1:46:6d:f7:8c:f8:9e:2e:a4:b2:02:
         a5:35:48:64:b2:cf:0b:96:d2:e1:cd:e1:dd:37:09:82:f6:b5:
         6b:7d:5e:1a:65:48:ca:5d:7e:9f:ca:46:e2:b7:87:3a:11:5f:
         40:84:9a:ae:18:be:3b:35:0c:45:88:f8:88:f5:d5:39:69:cc:
         f4:40:f9:04:3d:5d:8e:09:6a:53:6d:59:b9:2e:10:a2:4c:76:
         a9:01:7f:82:3d:89:6b:04:39:91:f8:d8:c9:09:45:88:52:ce:
         fe:f1:84:b1:af:74:64:2f:78:a9:df:ac:f3:88:b8:87:30:f2:
         dd:dc:9c:cf:74:6a:7d:39:51:97:ca:1a:6a:d9:fe:48:a3:5d:
         fe:79:36:c5:cf:d7:93:22:5a:2c:17:b3:b9:74:dd:00:5e:a0:
         54:b2:9d:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----