Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/91FA15B6B01811F1966605BDCE1D38B0.roa
File:                     91FA15B6B01811F1966605BDCE1D38B0.roa (raw, json)
Hash identifier:          VytmOIY/9oUEh8GMXEouFzU2eavH/1qpf1KgBPyYX0M=
Subject key identifier:   BA:7C:05:10:B3:D5:64:5B:C6:A6:6B:24:CB:7D:06:1D:21:1D:89:5E
Certificate issuer:       /CN=F364712FAF/serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
Certificate serial:       0896
Authority key identifier: 3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/91FA15B6B01811F1966605BDCE1D38B0.roa
Signing time:             Mon 14 Sep 2026 08:45:00 +0000
ROA not before:           Mon 14 Sep 2026 08:44:56 +0000
ROA not after:            Wed 31 Dec 2036 08:44:56 +0000
asID:                     29975
IP address blocks:        41.4.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 05 Oct 2026 00:08:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2198 (0x896)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364712FAF, serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
        Validity
            Not Before: Sep 14 08:44:56 2026 GMT
            Not After : Dec 31 08:44:56 2036 GMT
        Subject: CN=6aa7b40c-1f11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:a1:ee:00:ec:0f:57:c9:56:41:ab:76:9a:ff:
                    92:1b:83:08:e5:cc:cf:9e:fb:5a:26:51:bc:a2:dd:
                    fe:a2:ca:0a:33:8e:ce:34:17:f5:52:a3:ce:36:e9:
                    a1:b1:c1:18:ce:c4:00:44:cd:9e:5d:11:43:df:49:
                    55:0a:c6:68:d9:24:c8:b7:05:ec:99:99:ae:bf:a1:
                    34:d0:71:4e:2b:9b:04:5f:89:8b:da:f1:64:3e:ee:
                    e2:48:a6:44:96:d7:4d:e8:dc:5f:a4:8a:4f:fc:65:
                    28:05:fe:b8:9d:6c:be:5b:7d:ff:cc:ea:65:ef:6e:
                    05:cb:29:3a:4f:c4:eb:76:3e:62:b8:3e:cb:7b:2f:
                    90:25:17:a1:6a:ad:3a:f7:87:06:3f:38:10:eb:a2:
                    25:1b:74:ee:d2:d4:94:0a:58:bb:bb:a5:07:22:6d:
                    3a:f8:69:33:96:cb:f9:c4:f2:cf:d6:4e:9f:de:9e:
                    7a:ca:2f:fc:ef:34:11:6a:51:ad:12:f8:d7:6a:00:
                    4d:cc:42:a1:e9:ab:9b:3e:4a:7e:2a:30:a8:80:10:
                    72:1d:5f:36:c7:45:47:fb:79:19:9e:b8:58:39:28:
                    b1:d7:85:87:c0:63:36:00:42:6d:01:bd:24:bc:81:
                    f8:df:6d:fe:4b:dc:b8:d8:0d:bc:f4:2e:2c:c0:08:
                    77:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:7C:05:10:B3:D5:64:5B:C6:A6:6B:24:CB:7D:06:1D:21:1D:89:5E
            X509v3 Authority Key Identifier:
                keyid:3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/91FA15B6B01811F1966605BDCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.4.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         a8:55:20:76:1f:f3:04:ee:47:17:5e:25:81:e2:b4:83:0a:dc:
         a7:02:79:7f:7c:a4:c1:03:df:03:89:e4:d3:fd:5d:68:63:02:
         4b:10:54:e1:97:b2:19:84:ba:e6:2b:4b:2b:9e:ea:d5:b6:10:
         91:8c:ff:44:f2:db:5b:c5:ee:87:29:d4:5e:9e:39:2e:16:4e:
         2a:91:82:91:88:6a:12:a7:60:cb:b7:f9:23:09:23:fc:0d:27:
         d6:a8:9e:9f:31:f4:00:64:a5:de:c1:50:22:b4:6a:89:5e:46:
         c8:c6:87:57:ea:d5:cc:fb:42:f3:d1:5f:ac:1f:6a:61:7c:99:
         33:90:c6:a8:15:79:44:11:34:6c:17:13:59:18:eb:25:68:50:
         d1:b4:90:26:4a:43:5d:7b:0a:8f:00:f5:01:d5:72:be:0c:01:
         33:d5:e3:5f:8b:a8:51:36:72:35:41:f6:13:a7:9d:ea:b1:a0:
         08:4a:0e:9c:e3:a3:c1:1a:81:b6:64:16:32:c3:5f:10:a3:40:
         39:d0:9c:98:cf:f9:6c:d2:df:fe:08:e1:34:a5:3a:f5:2f:fb:
         00:aa:c8:87:73:6c:b3:56:9c:fa:14:bd:33:c1:af:72:a8:2a:
         89:61:ee:7d:a9:45:a6:93:e9:39:95:f2:06:77:c6:33:7e:f2:
         98:10:e2:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----