Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/8D4FE008B1A911F1BFB249BCCE1D38B0.roa
File:                     8D4FE008B1A911F1BFB249BCCE1D38B0.roa (raw, json)
Hash identifier:          jqACpP6vXYYGpl8yjcAIaepjoe/C0O3wE4l6Aqpfak4=
Subject key identifier:   55:0A:60:5B:A3:8A:98:EB:53:A0:C9:D9:33:FA:12:93:AC:C0:65:C7
Certificate issuer:       /CN=F364712FAF/serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
Certificate serial:       08CA
Authority key identifier: 3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/8D4FE008B1A911F1BFB249BCCE1D38B0.roa
Signing time:             Wed 16 Sep 2026 08:35:21 +0000
ROA not before:           Wed 16 Sep 2026 08:35:16 +0000
ROA not after:            Wed 31 Dec 2036 08:35:16 +0000
asID:                     29975
IP address blocks:        41.27.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2250 (0x8ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364712FAF, serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
        Validity
            Not Before: Sep 16 08:35:16 2026 GMT
            Not After : Dec 31 08:35:16 2036 GMT
        Subject: CN=6aaa54c8-f239
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:e3:8d:f3:78:b3:9a:81:16:ac:6f:1d:58:f8:
                    a2:2c:a5:26:60:c0:07:e0:ac:56:1a:38:2a:de:ba:
                    fe:6e:d5:ca:fc:d0:34:03:e4:0b:8a:03:39:fd:47:
                    70:0d:44:fb:ae:00:76:2a:0a:f4:42:13:df:97:dc:
                    30:d6:44:6e:29:64:d6:00:fa:ff:20:9b:cd:02:29:
                    04:22:bc:83:d3:43:a9:69:c0:d6:d9:a7:2d:b9:21:
                    0f:5b:9e:87:5a:ab:93:98:28:da:29:60:b2:a1:54:
                    48:e5:ff:3c:3d:14:8c:c4:c6:08:00:18:36:b5:e4:
                    bb:b3:02:8c:e2:01:ce:67:13:82:fb:ea:78:70:ea:
                    45:87:f9:4a:ee:58:12:e0:c3:35:c1:9d:94:01:d7:
                    4f:6c:99:b2:52:d6:e5:9f:f5:ca:48:1b:96:78:fa:
                    34:5e:e6:4e:f1:45:80:d4:f9:5a:ca:a2:7a:4e:dd:
                    c3:20:e2:f4:52:c7:e8:85:0b:6f:0c:90:12:5a:ed:
                    d0:09:a5:68:b0:70:7b:59:07:1d:cc:26:5e:69:7b:
                    ba:6a:f3:a3:f3:2a:41:56:aa:4c:1b:c0:24:73:81:
                    31:f1:cf:2e:d3:ff:0a:98:0f:40:e7:91:96:3a:d7:
                    33:83:27:0b:7f:d0:82:8a:10:18:8a:dd:97:80:d8:
                    50:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:0A:60:5B:A3:8A:98:EB:53:A0:C9:D9:33:FA:12:93:AC:C0:65:C7
            X509v3 Authority Key Identifier:
                keyid:3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/8D4FE008B1A911F1BFB249BCCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.27.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         02:7b:f1:c8:7a:04:26:c6:86:05:50:69:10:df:8b:11:dd:c1:
         43:e5:da:5b:a7:b6:2a:a6:b0:03:a5:e4:dd:22:5e:4c:b9:ba:
         4f:47:8c:db:19:97:b9:98:a4:c3:66:9d:50:5d:7e:06:05:a6:
         3e:22:55:7c:e8:c1:1f:40:4e:8c:f3:67:16:a7:7b:d9:0c:09:
         d0:78:fd:6c:23:b0:cb:6f:af:3b:3c:01:48:aa:07:97:09:98:
         62:64:73:cd:20:71:b8:c3:9e:6f:76:bc:33:f0:5a:79:55:05:
         9e:40:63:2c:fe:3c:2f:95:e2:6d:a6:c4:8b:ce:b2:53:a5:df:
         24:fa:10:c3:58:b8:32:cb:5a:75:d6:43:21:0d:0f:f0:6c:11:
         7b:a2:c1:8f:55:85:1b:b7:27:3c:1f:fc:91:a8:cd:bc:6a:46:
         d2:50:27:9d:9d:ec:dc:7d:ec:d0:05:b1:0c:6f:77:40:fb:8e:
         de:e4:e6:03:56:5a:51:f6:95:1f:4f:f2:f8:15:74:3d:c4:4e:
         01:23:e5:98:fd:45:0f:ad:8f:61:fb:fc:ad:9f:81:e2:db:b1:
         7f:ff:2d:ec:5d:6e:15:d3:89:88:f4:a8:29:f9:98:1b:d7:f6:
         6f:9a:90:43:19:96:bd:12:b1:60:0b:a1:d7:99:cb:30:dc:1e:
         8f:a3:bc:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----