Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/8498CC1AB26F11F1A78239E9CE1D38B0.roa
File:                     8498CC1AB26F11F1A78239E9CE1D38B0.roa (raw, json)
Hash identifier:          necwSQgiIQprXnem9hfA215vUC5+mEtkHO/8FAHpvFc=
Subject key identifier:   F0:42:DB:D1:4C:0C:23:BA:8C:53:6D:F8:A2:EE:D8:34:69:A2:9B:74
Certificate issuer:       /CN=F364712FAF/serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
Certificate serial:       08EB
Authority key identifier: 3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/8498CC1AB26F11F1A78239E9CE1D38B0.roa
Signing time:             Thu 17 Sep 2026 08:12:26 +0000
ROA not before:           Thu 17 Sep 2026 08:12:22 +0000
ROA not after:            Wed 31 Dec 2036 08:12:22 +0000
asID:                     29975
IP address blocks:        41.31.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 01 Oct 2026 00:07:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2283 (0x8eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364712FAF, serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
        Validity
            Not Before: Sep 17 08:12:22 2026 GMT
            Not After : Dec 31 08:12:22 2036 GMT
        Subject: CN=6aaba0ea-3b80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:63:ec:2f:57:fc:e2:04:0a:4f:66:29:fa:c0:
                    46:72:64:40:10:94:b7:09:df:86:ab:2a:66:4a:5d:
                    0a:54:4a:b6:2d:cf:b1:d3:42:c0:68:54:d8:7b:e7:
                    05:c1:32:8e:0b:51:93:31:a2:70:03:9b:9e:98:33:
                    bf:47:64:ac:94:24:29:93:f1:e0:df:5e:2f:86:83:
                    46:37:e7:55:20:1b:fb:d6:8b:41:c2:c1:49:c4:6a:
                    34:45:82:99:2c:bb:89:d2:af:10:f4:8a:37:a4:76:
                    b5:bb:a6:84:4d:d2:b9:78:90:74:bc:ce:f2:b4:ec:
                    59:da:54:85:ef:bb:66:e7:30:7f:1e:72:63:8f:b0:
                    62:40:b5:8f:db:f9:b4:af:87:a0:9f:f5:04:d6:20:
                    ec:32:92:dd:ea:83:73:15:07:3b:a9:fd:f3:5d:ed:
                    f9:e5:a4:f9:dd:1e:63:11:f6:12:37:6d:21:58:03:
                    d1:7b:18:42:43:2b:dd:79:f6:d2:8f:58:72:da:67:
                    3c:10:64:23:8f:f6:13:2b:9a:b4:9c:92:a6:27:67:
                    15:9c:54:d2:fb:dc:24:9a:54:f1:63:61:2b:f7:65:
                    5a:6d:b5:d2:13:3b:53:ba:fd:c1:25:1c:ba:7d:c0:
                    0e:39:5c:1e:45:a5:ea:2c:a3:de:09:2d:99:9b:53:
                    c8:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:42:DB:D1:4C:0C:23:BA:8C:53:6D:F8:A2:EE:D8:34:69:A2:9B:74
            X509v3 Authority Key Identifier:
                keyid:3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/8498CC1AB26F11F1A78239E9CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.31.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         6c:68:f1:b1:7b:ab:df:82:fe:de:13:59:bc:37:3f:61:13:8d:
         8a:b3:5d:d9:80:14:63:bc:05:88:e6:4a:05:41:94:93:83:00:
         05:04:c7:78:41:54:84:25:5d:3e:6b:78:d5:54:cc:c5:15:d3:
         2e:3a:9c:a4:a3:6e:44:e4:41:41:4a:b8:7c:98:d6:8b:a1:8d:
         34:94:ad:93:ce:ac:f9:38:6b:86:11:50:bf:43:d0:3a:dc:70:
         98:5f:bf:5a:51:34:35:cf:77:46:9f:03:52:61:e6:e8:06:44:
         53:56:94:56:1b:a1:cc:40:5f:43:23:48:c2:ce:9f:46:1b:b9:
         f4:17:42:34:df:4e:6f:2b:76:99:d9:93:4c:c8:f5:b8:ca:dc:
         63:52:7f:f5:90:19:55:38:42:b1:30:55:84:3d:33:99:52:2b:
         33:5c:25:6a:73:87:c3:45:e8:80:28:cb:a9:59:7d:f6:ea:ef:
         13:71:7c:85:e3:c4:b1:09:86:76:a4:3c:9d:6b:b6:8e:c9:ed:
         4c:5f:e1:ed:fc:39:df:08:01:b3:c9:4a:ce:22:3b:a6:a5:83:
         4b:55:b4:15:a7:e8:0f:aa:c6:b9:d5:ae:2a:6f:38:44:0e:6c:
         4c:69:b9:20:94:cf:36:fe:46:a6:79:94:ca:c0:31:e4:bb:57:
         2d:56:a4:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----