Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/84965598B19D11F1929169F5CE1D38B0.roa
File:                     84965598B19D11F1929169F5CE1D38B0.roa (raw, json)
Hash identifier:          YS7ULYsku+MKiTJ4V1BGL7t4FOUy2/Rh9SEFPFbaG+Q=
Subject key identifier:   DD:8F:F0:39:80:26:2C:36:91:E8:D9:F9:68:83:DF:D6:CC:35:29:0D
Certificate issuer:       /CN=F364712FAF/serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
Certificate serial:       08B6
Authority key identifier: 3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/84965598B19D11F1929169F5CE1D38B0.roa
Signing time:             Wed 16 Sep 2026 07:09:12 +0000
ROA not before:           Wed 16 Sep 2026 07:09:08 +0000
ROA not after:            Wed 31 Dec 2036 07:09:08 +0000
asID:                     29975
IP address blocks:        41.22.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 07 Oct 2026 02:05:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2230 (0x8b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364712FAF, serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
        Validity
            Not Before: Sep 16 07:09:08 2026 GMT
            Not After : Dec 31 07:09:08 2036 GMT
        Subject: CN=6aaa4098-c864
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:85:c8:7c:7e:71:74:f3:b7:c1:5f:a0:12:f6:
                    d2:18:66:d8:90:7b:4d:a1:9d:08:c9:73:17:85:90:
                    58:4c:94:a6:fb:95:0a:aa:24:9f:5a:ed:52:1c:5f:
                    70:6e:c5:88:cc:88:85:e6:db:b8:0f:9f:5b:6d:29:
                    ce:6e:ea:fc:1c:88:ab:ad:af:f5:e1:40:5d:d8:13:
                    91:98:15:93:7d:d3:ed:46:31:d1:64:4f:b8:b5:7d:
                    20:41:a5:d3:2d:3f:9a:3b:d1:a9:85:1c:d1:e0:8a:
                    6e:ee:0c:fb:3d:13:08:c3:58:89:f9:0c:2f:74:1d:
                    54:98:0d:96:6a:7d:54:98:d9:dc:b7:e4:c3:bf:1e:
                    d5:b2:89:e7:9d:8f:db:61:fc:a8:96:8e:6d:a5:fa:
                    54:63:15:e5:27:76:e5:4c:cb:36:90:9b:2d:5a:df:
                    89:35:3f:46:f3:84:72:e0:87:d0:40:ba:81:75:ef:
                    19:eb:b9:98:2c:8e:12:4a:97:b9:bd:43:fa:cc:4e:
                    27:46:77:d4:32:83:d4:5e:21:8f:ac:86:d9:cf:d5:
                    44:15:fe:27:e0:33:05:07:e4:e9:b9:1d:f4:68:74:
                    6d:15:17:2e:1c:0e:06:0f:59:da:39:33:5d:94:cd:
                    d2:ac:c2:13:92:d7:b6:e0:4a:05:f0:c2:85:2f:c7:
                    24:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:8F:F0:39:80:26:2C:36:91:E8:D9:F9:68:83:DF:D6:CC:35:29:0D
            X509v3 Authority Key Identifier:
                keyid:3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/84965598B19D11F1929169F5CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.22.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         52:8a:8f:eb:81:ba:e2:a1:9d:b6:65:0d:8f:00:4a:08:0a:5e:
         c2:ad:f8:eb:c0:a0:f4:0d:67:a6:ac:a0:02:3d:e3:19:45:d7:
         59:30:f7:e9:e7:17:d3:89:c2:2b:f2:11:1c:fe:84:df:c9:99:
         c8:21:41:a1:da:42:b6:5e:6f:9d:3f:2f:97:01:e5:17:fc:be:
         93:be:6e:37:a8:ef:0e:96:82:1f:0b:4f:09:2c:10:1e:ba:b4:
         6b:01:7a:de:5c:e8:1f:f4:2d:01:3e:53:6f:6d:96:e3:76:45:
         29:e9:0c:a3:ef:45:e3:a8:5f:4a:c8:ae:21:d2:80:10:3b:c0:
         68:a5:ed:f2:98:e0:5e:89:e8:51:8f:0e:c7:58:29:54:bc:24:
         ef:ae:26:b5:b0:32:9e:39:33:bb:16:4c:16:df:c3:58:45:28:
         aa:f6:77:8c:79:9e:d7:e2:90:b2:92:65:6d:8e:56:64:54:8c:
         8f:42:b4:c7:68:29:11:62:93:9a:be:cf:ca:33:42:cd:ab:9a:
         a7:f9:43:7f:53:0f:7a:d3:40:8b:5f:50:e2:96:a2:c5:f5:86:
         5d:33:64:53:f7:1f:d9:36:80:78:ec:97:11:5c:cb:19:b4:87:
         be:8b:4d:58:2f:4e:73:d0:cc:bf:9a:0e:fc:39:d4:b1:f1:ef:
         01:59:f0:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----