Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/6E0A1CD8B0DA11F19006E7D3CE1D38B0.roa
File:                     6E0A1CD8B0DA11F19006E7D3CE1D38B0.roa (raw, json)
Hash identifier:          I24KP5sljrdSwnNhHZamFC/AYX3sVJAbNgeVRm0nYQw=
Subject key identifier:   0E:78:F3:05:0A:2C:5F:64:82:74:91:16:1C:9D:82:C7:2F:E1:1C:8B
Certificate issuer:       /CN=F364712FAF/serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
Certificate serial:       08AF
Authority key identifier: 3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/6E0A1CD8B0DA11F19006E7D3CE1D38B0.roa
Signing time:             Tue 15 Sep 2026 07:52:42 +0000
ROA not before:           Tue 15 Sep 2026 07:52:38 +0000
ROA not after:            Wed 31 Dec 2036 07:52:38 +0000
asID:                     29975
IP address blocks:        41.18.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2223 (0x8af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364712FAF, serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
        Validity
            Not Before: Sep 15 07:52:38 2026 GMT
            Not After : Dec 31 07:52:38 2036 GMT
        Subject: CN=6aa8f94a-250f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:04:4a:07:bf:42:a9:da:17:de:9f:eb:a1:e2:
                    d8:ae:4c:c0:03:32:5f:88:ef:7f:46:df:a2:54:a7:
                    70:9b:c4:36:49:74:bf:93:ac:1a:37:b1:de:91:86:
                    1a:fd:05:46:b3:4d:80:fe:96:16:6d:1a:be:d7:6d:
                    2a:0c:6a:e9:c7:a4:d4:64:86:63:8f:8c:16:ae:ae:
                    93:4e:98:71:2f:7a:b1:a6:9f:d9:ef:18:0a:53:31:
                    9c:be:0d:d5:c8:37:05:64:84:3d:16:9f:3f:48:c7:
                    af:38:bc:b5:f8:a3:8d:03:9b:cb:7d:57:d6:09:ee:
                    f1:81:22:6c:6e:82:ab:be:55:f3:95:4d:ab:b0:25:
                    8f:d0:ca:1c:0e:58:36:f0:31:0a:13:e0:55:f1:4d:
                    21:1a:7b:36:4f:90:09:c2:a0:2a:26:0e:75:93:96:
                    48:f3:c9:76:9c:f2:25:94:ce:35:2e:66:1a:ed:6c:
                    37:48:9f:b8:33:be:84:c0:8d:25:66:ee:89:96:08:
                    98:ff:45:99:45:66:01:43:0e:cb:16:83:9a:b9:61:
                    20:a5:77:83:82:81:cf:03:a3:e6:31:d0:6e:b5:8c:
                    9e:75:a0:c3:00:8c:b1:ba:f8:c2:4d:01:4d:54:e3:
                    06:95:82:12:25:91:3d:5c:90:4b:5d:93:8b:17:e1:
                    3b:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:78:F3:05:0A:2C:5F:64:82:74:91:16:1C:9D:82:C7:2F:E1:1C:8B
            X509v3 Authority Key Identifier:
                keyid:3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/6E0A1CD8B0DA11F19006E7D3CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.18.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         5e:79:52:99:3a:23:88:32:41:5b:7f:0b:3c:7e:c9:22:06:f8:
         c9:a1:d0:b8:2b:97:a7:6d:32:d8:68:f6:2f:56:3e:97:7d:43:
         7f:75:02:e6:ce:87:d9:90:57:b7:cc:bd:28:d2:84:20:80:82:
         66:99:cb:e3:58:e9:89:f2:42:f1:68:4f:04:77:cb:2d:44:9e:
         49:15:d4:40:6c:99:39:29:f7:ef:58:5a:a8:ef:dc:89:c2:90:
         41:e5:cc:fe:6d:41:32:2c:74:a4:2b:a9:64:a0:81:40:b1:44:
         9b:c9:9c:80:ef:46:fb:61:3c:17:83:ea:a6:3b:9d:b5:31:49:
         41:d5:f4:9a:49:26:8a:ae:6d:1e:b1:d3:6a:82:90:67:e9:5e:
         ba:c7:a7:25:2b:49:ea:fa:91:81:40:90:a5:1e:14:b0:11:39:
         80:49:b1:93:93:07:ff:5e:86:79:4d:17:fb:15:65:9e:54:3f:
         46:45:51:5b:3f:02:16:9a:a9:2a:8b:b9:c7:58:38:50:f6:cb:
         f3:77:b5:c2:ad:f4:f4:98:9e:4a:cf:76:c6:1c:c9:33:ed:f4:
         82:53:a9:7d:47:48:e8:1e:e4:19:d8:6c:03:45:dd:18:5b:0b:
         c5:0e:92:e5:a1:5e:50:42:0e:fe:d2:6a:aa:bf:d1:47:0d:46:
         12:f6:7d:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----