Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/8CF88F149D4111F19E0C04E8CE1D38B0.roa
File:                     8CF88F149D4111F19E0C04E8CE1D38B0.roa (raw, json)
Hash identifier:          CnUM6iZCUP3SLWurJbdJYBmEZmnX9AvtF0YTecIR+jA=
Subject key identifier:   EC:AC:85:16:56:FE:75:05:81:CC:05:83:88:7A:F7:51:57:CC:1B:5A
Certificate issuer:       /CN=F364712FAF/serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
Certificate serial:       0851
Authority key identifier: 3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/8CF88F149D4111F19E0C04E8CE1D38B0.roa
Signing time:             Fri 21 Aug 2026 09:20:29 +0000
ROA not before:           Fri 21 Aug 2026 09:20:25 +0000
ROA not after:            Wed 31 Dec 2036 09:20:25 +0000
asID:                     29975
IP address blocks:        41.9.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Sep 2026 00:07:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2129 (0x851)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364712FAF, serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
        Validity
            Not Before: Aug 21 09:20:25 2026 GMT
            Not After : Dec 31 09:20:25 2036 GMT
        Subject: CN=6a88185d-8b4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a0:b4:15:50:c5:ce:0c:77:f1:34:66:a4:1a:
                    78:d2:d1:18:2b:c5:c3:2b:e3:5c:c9:00:18:81:79:
                    5c:c9:8e:6a:e0:2f:a0:2e:f8:c6:81:ed:09:44:50:
                    5b:1e:15:5a:e8:19:38:7c:35:a5:65:e9:0b:ce:05:
                    b1:7c:f7:3c:1f:69:d8:95:db:48:2e:c9:7e:4e:7e:
                    06:3a:e8:85:61:07:50:19:ee:ea:04:11:ea:2b:79:
                    73:d6:a4:24:ad:46:1b:fe:03:e2:5d:14:da:a0:3a:
                    0c:85:1f:ae:5e:9c:b7:57:90:34:6b:0d:f2:10:46:
                    c4:09:a2:a3:c2:98:a7:44:c8:62:2a:4d:00:b1:4c:
                    04:74:30:53:e4:79:63:4f:14:5a:42:2d:8b:cf:16:
                    f3:fb:bd:1a:71:10:80:77:24:9a:c2:07:49:d5:d8:
                    31:77:65:1e:c7:c0:24:83:d2:16:50:3e:26:29:e2:
                    9f:7b:9d:7f:89:1f:38:d3:2e:ac:51:ca:e6:02:0b:
                    57:41:cb:3e:59:eb:3c:1b:7b:18:24:6c:0e:1e:6d:
                    40:fb:28:d5:10:db:cf:90:ee:80:e5:9e:3f:e6:7e:
                    8d:54:ce:a9:19:3c:09:93:b7:8c:2c:08:6e:a1:d1:
                    b3:39:a7:f6:16:03:e1:63:9a:f9:14:23:20:ea:0f:
                    2f:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:AC:85:16:56:FE:75:05:81:CC:05:83:88:7A:F7:51:57:CC:1B:5A
            X509v3 Authority Key Identifier:
                keyid:3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/8CF88F149D4111F19E0C04E8CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.9.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         22:5e:33:b7:2b:75:42:13:ea:7d:78:31:fa:e7:f7:fb:41:56:
         97:b5:c3:70:89:35:30:86:4b:7a:49:9f:7b:a3:ef:5d:01:d8:
         3d:0a:64:af:b6:ab:af:2e:48:4a:f8:58:e8:a7:52:8b:3c:d3:
         ac:6d:b5:49:4f:bb:ab:64:10:ae:c0:69:6a:75:d5:5a:52:8b:
         9b:b2:ec:e5:4d:a8:18:b6:c5:9b:61:2a:8d:7a:b2:84:bd:d5:
         52:23:2f:7f:4a:e1:ea:99:04:a9:76:d4:ab:02:a0:75:f0:8d:
         eb:68:e6:3c:79:3e:98:b5:05:1f:ec:1d:de:a0:fd:a7:0b:90:
         8a:ff:e0:e2:db:7e:e2:a8:74:19:2a:92:ac:1c:5f:0a:15:5f:
         e9:25:f3:8b:66:ec:64:ac:29:00:63:5b:8c:4d:63:18:87:ec:
         f4:e0:9d:fd:2b:ab:45:d1:d4:d7:5d:3d:eb:b3:27:4f:e8:bd:
         e2:74:4c:8d:b0:61:8b:f6:74:7a:ba:6a:a3:1f:c0:da:79:f2:
         7e:82:05:e1:75:79:e1:d0:b2:1b:74:b5:e0:e9:47:a6:8f:d9:
         7e:cb:9f:05:fc:e6:5b:7a:87:42:bd:aa:ce:ed:6e:af:da:e9:
         37:2f:2f:cd:34:5d:f4:b0:11:09:75:e1:18:7a:8e:49:1d:0e:
         be:87:0a:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----