Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/9FD15534B33111F191956902CF1D38B0.roa
File:                     9FD15534B33111F191956902CF1D38B0.roa (raw, json)
Hash identifier:          1fAbIW7Ibxu9SHyWk6VXH73fNQVxXarhlD64ZiprBQM=
Subject key identifier:   3B:57:63:11:FD:3F:06:8A:5C:19:DA:C2:FC:0C:09:22:88:FA:B7:52
Certificate issuer:       /CN=F364712FAF/serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
Certificate serial:       090C
Authority key identifier: 3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/9FD15534B33111F191956902CF1D38B0.roa
Signing time:             Fri 18 Sep 2026 07:21:55 +0000
ROA not before:           Fri 18 Sep 2026 07:21:50 +0000
ROA not after:            Wed 31 Dec 2036 07:21:50 +0000
asID:                     29975
IP address blocks:        105.252.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2316 (0x90c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364712FAF, serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
        Validity
            Not Before: Sep 18 07:21:50 2026 GMT
            Not After : Dec 31 07:21:50 2036 GMT
        Subject: CN=6aace692-ee58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:15:0a:9d:43:34:55:26:0c:a3:33:3f:2b:b3:
                    61:2c:97:de:11:92:c8:fa:5d:db:01:e1:41:fd:78:
                    9d:d4:17:e9:a6:b7:67:57:f6:89:ab:65:c0:95:cc:
                    d2:15:5a:ce:ae:de:50:3f:16:b0:e0:4c:3b:d4:20:
                    ca:d6:64:e4:b8:2f:b9:1e:7b:dd:36:bd:f8:e6:87:
                    22:0c:0a:df:be:fd:eb:bc:3c:fd:4b:e2:15:7a:e9:
                    98:0f:fb:47:c3:7d:46:0b:64:eb:77:ea:10:16:13:
                    06:f9:27:cd:3a:c4:78:2c:37:0f:ef:8e:93:36:21:
                    55:a2:8b:37:3e:64:a3:5f:d4:c6:e5:5f:ab:ab:bc:
                    fa:5e:00:43:d8:c0:dd:a7:25:bd:c4:fb:2d:b0:65:
                    d1:38:89:db:7c:1c:7c:60:75:c9:8f:b0:f7:9b:4d:
                    0a:42:31:81:1e:70:bd:db:4d:76:d6:62:f1:2a:79:
                    cb:de:58:52:cb:ac:e3:39:45:e8:5c:05:bf:cb:80:
                    a9:ea:85:12:6e:a1:a3:cb:ff:36:e5:f5:65:7f:e5:
                    66:e7:9a:04:9d:52:78:84:f5:3e:bd:38:46:ab:2a:
                    8f:0c:6f:0e:5d:35:ca:a0:49:e0:79:bd:87:6f:d0:
                    2d:e5:77:19:e9:26:41:96:9c:bd:80:dd:43:54:52:
                    c5:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:57:63:11:FD:3F:06:8A:5C:19:DA:C2:FC:0C:09:22:88:FA:B7:52
            X509v3 Authority Key Identifier:
                keyid:3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/9FD15534B33111F191956902CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  105.252.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         17:cb:20:04:4b:ca:fb:6b:eb:62:8c:96:71:84:24:f3:a5:df:
         b4:ec:3c:21:6f:37:f0:0b:5c:e0:f1:e8:d6:d4:18:b1:ea:75:
         39:6d:e9:5a:38:2a:cb:77:22:6d:63:b8:67:25:7b:e0:4c:ab:
         58:e5:fb:76:d1:14:ed:80:98:0a:6f:49:ee:2c:a3:71:32:e4:
         57:ea:f3:61:e1:cd:b3:46:e7:3e:76:99:23:3e:e4:ad:18:ef:
         8d:92:5e:0c:07:2d:fe:ec:12:73:45:a3:d7:53:2e:44:b6:57:
         53:12:75:4c:8c:ba:05:7f:88:df:93:7b:4a:cc:54:20:9c:55:
         0c:6e:a8:40:9e:54:f7:1c:40:9d:19:29:ca:e1:df:ea:af:3a:
         72:38:8c:0f:4f:15:ff:d4:d0:04:15:3a:2e:5c:b8:3a:d3:0e:
         3e:e0:9e:19:17:7c:ad:61:24:fa:53:ba:98:79:4a:08:88:f2:
         81:3f:a5:d1:6d:7a:95:44:c2:fc:d4:72:54:08:1b:4d:b8:66:
         57:24:0b:70:ec:9e:f2:fd:35:02:5a:5d:33:48:c5:4c:0b:aa:
         d7:fd:f3:2b:cb:16:47:e3:cf:6b:df:9f:56:ef:66:2f:52:33:
         c3:e5:50:38:13:99:de:0f:05:b0:34:47:f2:62:c0:28:09:ab:
         25:bc:82:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----