Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/9CF34AF6B26A11F189F994CBCE1D38B0.roa
File:                     9CF34AF6B26A11F189F994CBCE1D38B0.roa (raw, json)
Hash identifier:          qNf6Atj0CRWrsf2MrX58AfTbXc32Urbeqld7iXNBZfA=
Subject key identifier:   7E:2D:A5:5A:70:AF:A1:8A:2B:DD:21:7A:69:FD:07:EA:39:0D:B6:CE
Certificate issuer:       /CN=F364712FAF/serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
Certificate serial:       08D9
Authority key identifier: 3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/9CF34AF6B26A11F189F994CBCE1D38B0.roa
Signing time:             Thu 17 Sep 2026 07:37:20 +0000
ROA not before:           Thu 17 Sep 2026 07:37:16 +0000
ROA not after:            Wed 31 Dec 2036 07:37:16 +0000
asID:                     29975
IP address blocks:        41.29.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Sep 2026 00:07:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2265 (0x8d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364712FAF, serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
        Validity
            Not Before: Sep 17 07:37:16 2026 GMT
            Not After : Dec 31 07:37:16 2036 GMT
        Subject: CN=6aab98b0-10d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e9:ac:6f:40:d0:14:93:01:f1:2d:fd:3b:d6:
                    6d:b7:ee:e0:af:ce:48:18:59:13:ef:d4:4e:eb:09:
                    4f:22:cf:3d:b7:4e:1a:66:07:17:a5:1f:f4:0b:84:
                    f4:ce:ae:35:0e:6d:e9:2c:57:39:f1:89:d0:83:8c:
                    c6:2e:78:ac:b1:7c:db:e4:71:ae:b9:53:5c:c0:2a:
                    41:b2:50:5f:ca:34:5f:f2:34:c9:90:b0:bc:f0:6a:
                    e6:86:17:70:dd:01:9d:53:30:51:92:15:66:c7:64:
                    28:a5:5a:3c:6a:78:c6:16:95:b7:0b:9d:8c:00:ca:
                    0f:f1:0a:83:ab:db:5c:b9:dd:0d:80:d9:8e:a7:ac:
                    01:01:c6:93:0e:d0:25:72:2c:1e:bf:f3:18:c9:d5:
                    8f:2e:59:63:4d:5f:28:ee:0f:a6:88:8b:ea:58:1b:
                    5c:8d:f4:a8:41:fb:d1:30:d2:21:d5:b7:10:2b:5f:
                    1e:12:31:3f:0f:c8:90:0b:a6:46:9d:50:94:c4:00:
                    21:19:bb:a0:b0:35:11:ef:3b:fa:23:37:b5:b9:21:
                    36:e1:33:a1:44:c2:aa:9f:e0:f4:c8:93:0f:c3:ac:
                    6a:3a:07:22:98:4b:98:ca:41:de:e7:3b:e2:ec:a0:
                    5d:ba:56:0a:f6:85:a2:c2:14:e8:0c:fc:13:52:44:
                    d6:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:2D:A5:5A:70:AF:A1:8A:2B:DD:21:7A:69:FD:07:EA:39:0D:B6:CE
            X509v3 Authority Key Identifier:
                keyid:3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/9CF34AF6B26A11F189F994CBCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.29.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         75:6e:61:b0:91:ce:d4:26:41:fb:71:4f:ac:c5:66:23:60:75:
         d0:df:b6:1a:28:f0:26:9d:1d:bb:3a:26:7b:e9:7a:40:2c:89:
         d9:34:1a:a4:db:dd:cd:f3:76:ae:85:7b:25:6d:65:c6:ea:57:
         06:26:02:b6:ed:d1:b5:6c:cc:e8:e7:9e:0c:45:ed:f0:73:e6:
         9e:fb:12:43:07:16:74:2e:53:12:4b:78:28:a1:9b:ef:d1:0d:
         28:dd:02:c4:b1:84:f0:9d:be:3a:e1:3b:37:6b:7c:6e:d0:ca:
         9c:3d:57:df:bc:60:58:ed:94:05:db:04:36:23:90:8f:d3:1d:
         66:0b:cc:d6:32:7d:db:a0:86:a6:05:c7:96:f1:5e:63:39:d4:
         1f:c2:e3:c4:b8:99:77:85:a3:16:85:d5:cc:21:7a:db:83:b7:
         9b:2d:3c:7a:5e:7c:ef:17:51:84:e8:a9:61:ba:a4:ad:ad:0b:
         08:98:86:26:aa:dc:5a:e8:57:7a:1f:38:6a:20:54:3a:fa:32:
         57:e7:bb:c6:2d:d2:26:bf:6d:f2:cb:15:dd:b7:e1:81:ae:16:
         15:a0:f3:d1:fc:54:11:71:b9:ff:03:c4:d1:c5:c0:b1:9d:03:
         ea:a7:35:90:b0:3c:8d:51:94:8a:b7:8e:3d:c1:e3:ac:5a:78:
         c1:fb:82:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----