Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/905E32BE9D3F11F19EE7CDDACE1D38B0.roa
File:                     905E32BE9D3F11F19EE7CDDACE1D38B0.roa (raw, json)
Hash identifier:          yd9PLldsBrY0eTsD48BqE3r2ug09bnto2E+88k3fFpU=
Subject key identifier:   F0:A0:90:2A:01:23:B1:23:2F:06:B2:11:8D:9A:02:36:C3:C3:E4:41
Certificate issuer:       /CN=F364712FAF/serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
Certificate serial:       084D
Authority key identifier: 3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/905E32BE9D3F11F19EE7CDDACE1D38B0.roa
Signing time:             Fri 21 Aug 2026 09:06:16 +0000
ROA not before:           Fri 21 Aug 2026 09:06:12 +0000
ROA not after:            Wed 31 Dec 2036 09:06:12 +0000
asID:                     29975
IP address blocks:        41.7.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 01 Oct 2026 00:07:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2125 (0x84d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364712FAF, serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
        Validity
            Not Before: Aug 21 09:06:12 2026 GMT
            Not After : Dec 31 09:06:12 2036 GMT
        Subject: CN=6a881508-ddaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:51:77:d1:4f:e7:65:6e:fe:30:8a:42:5e:f1:
                    33:21:dc:d9:37:74:33:bf:ce:51:f3:02:e4:2f:a0:
                    10:91:56:44:af:38:4c:59:1f:b5:ea:70:0c:47:91:
                    7f:6d:c7:87:6c:ac:5a:e3:7b:69:fd:a8:d6:3c:05:
                    ad:79:ae:4f:98:e8:51:d4:08:88:ad:49:b6:1a:76:
                    06:e3:55:2e:bc:4a:ed:aa:e4:dc:0b:5c:65:b0:4f:
                    a6:ba:35:4e:7d:cf:ca:14:b9:df:6c:f0:d0:fd:63:
                    2e:29:ca:13:3d:0c:b9:11:4b:37:bc:51:35:a7:10:
                    5e:f5:a1:7c:0b:a6:54:fa:d0:d2:99:8f:17:39:47:
                    61:fb:a5:9a:db:37:95:2b:e3:6b:16:27:ed:d3:f1:
                    be:93:d2:0a:29:bf:11:bb:00:eb:f7:bc:9c:89:d7:
                    a1:e5:be:a4:25:96:69:71:db:76:7d:d7:eb:c8:f2:
                    65:b1:69:20:bb:29:02:94:38:38:22:a3:6d:b4:88:
                    9e:35:dd:57:4c:25:04:63:de:b8:4e:6a:04:fe:69:
                    9d:ff:13:39:db:f1:bb:a7:8c:42:80:b7:03:81:af:
                    7f:04:0c:81:fb:15:f3:2c:26:df:58:8d:ee:2a:e7:
                    f8:32:35:5a:b0:8e:b4:75:ea:58:d0:1b:fb:d5:85:
                    9f:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:A0:90:2A:01:23:B1:23:2F:06:B2:11:8D:9A:02:36:C3:C3:E4:41
            X509v3 Authority Key Identifier:
                keyid:3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/905E32BE9D3F11F19EE7CDDACE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.7.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         c5:b4:83:de:58:15:1b:e5:1b:5f:02:9e:28:85:51:35:3c:ef:
         5d:86:12:ce:46:7e:d1:a8:1b:19:a3:a7:b2:ed:6d:54:70:f4:
         d5:9e:3c:b9:49:ed:a7:35:fc:13:4e:e2:bb:59:01:bc:7a:d2:
         ba:c7:dc:0c:c8:a2:a0:36:3f:a4:05:91:9a:e4:10:2c:03:8b:
         58:9f:55:94:e5:1b:57:a5:0b:d0:47:4d:9a:77:c8:7c:06:6d:
         13:4a:d0:19:6d:7d:7c:c8:37:70:48:f4:6c:78:7d:13:33:47:
         25:38:7e:1b:34:5f:84:62:0c:1e:c6:2a:b0:d1:65:ad:b1:ab:
         bd:5f:da:4f:d4:c0:0b:2d:6b:f4:00:92:9d:6a:d7:91:35:06:
         0b:58:dd:63:dc:cf:97:ea:c8:60:9a:2d:12:be:3a:02:3c:59:
         4b:eb:c5:54:c7:5f:41:f5:b0:92:41:d6:5d:e9:c4:f8:49:0b:
         e3:5e:47:ee:bd:0c:46:85:db:0f:30:d5:9e:86:6c:13:bf:c6:
         fd:92:d5:3b:c4:50:61:34:e8:0a:3c:06:af:ff:45:7f:e5:5f:
         0e:60:fa:ba:ad:c6:f6:fd:27:a1:3d:0e:9e:dd:ca:79:02:82:
         b7:ea:c1:ca:1a:6f:e2:94:e9:eb:62:f6:37:07:3e:16:58:b0:
         09:40:bf:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----