Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/A2B7A4E6B19D11F1A3EA79F5CE1D38B0.roa
File:                     A2B7A4E6B19D11F1A3EA79F5CE1D38B0.roa (raw, json)
Hash identifier:          XdxccozjObnvRL955teKIqcNMo3p2jVHGUga9t9dqjA=
Subject key identifier:   23:E7:4E:B0:33:82:24:0E:13:A2:8D:BC:32:CB:06:FF:89:0F:F6:E6
Certificate issuer:       /CN=F364712FAF/serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
Certificate serial:       08B8
Authority key identifier: 3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/A2B7A4E6B19D11F1A3EA79F5CE1D38B0.roa
Signing time:             Wed 16 Sep 2026 07:10:02 +0000
ROA not before:           Wed 16 Sep 2026 07:09:58 +0000
ROA not after:            Wed 31 Dec 2036 07:09:58 +0000
asID:                     29975
IP address blocks:        41.22.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Sep 2026 00:07:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2232 (0x8b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364712FAF, serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
        Validity
            Not Before: Sep 16 07:09:58 2026 GMT
            Not After : Dec 31 07:09:58 2036 GMT
        Subject: CN=6aaa40ca-25c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:cb:7a:8e:49:6b:1a:b6:e9:34:32:e9:c4:f1:
                    d3:7e:de:e7:2c:85:cb:ef:cb:a6:d4:af:d3:3d:43:
                    4e:df:36:d4:4d:bc:07:b9:8c:41:c0:3a:7c:a1:b5:
                    0f:e2:c5:59:3a:30:30:47:91:6b:90:e4:40:19:2b:
                    15:e4:11:85:f8:4d:bd:fd:ff:d2:88:f1:ee:2f:44:
                    ff:8f:38:13:ec:98:6a:33:4d:b1:3d:a3:48:70:25:
                    00:b3:b3:ed:ee:7b:ee:ed:67:d8:be:97:cb:15:36:
                    c3:e5:62:0d:30:50:46:89:ef:81:4a:b1:af:da:95:
                    b9:1b:0b:d3:f3:d3:e1:bb:9c:97:f2:76:6a:38:43:
                    27:5e:aa:c2:c1:91:0d:e4:9f:12:9d:25:df:6a:87:
                    25:da:56:ce:1b:92:39:2d:d2:54:24:16:a0:cd:3c:
                    c4:66:ab:58:6f:4a:c4:9c:18:77:d6:fb:f1:7a:6c:
                    f3:90:e1:03:8a:de:c6:3d:a2:1e:24:0b:00:d3:42:
                    92:10:2a:17:5d:a2:4f:c7:49:a8:e2:4e:3d:bf:87:
                    a2:60:6d:68:be:65:42:75:69:20:bd:59:1a:ea:54:
                    17:bb:b3:0f:91:06:33:33:a9:67:fc:72:15:f3:82:
                    09:0d:42:1a:f1:b7:eb:34:19:24:d1:8b:9c:5b:32:
                    40:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:E7:4E:B0:33:82:24:0E:13:A2:8D:BC:32:CB:06:FF:89:0F:F6:E6
            X509v3 Authority Key Identifier:
                keyid:3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/A2B7A4E6B19D11F1A3EA79F5CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.22.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         7b:5a:a3:12:f1:c2:dd:dc:fb:07:f5:5a:df:e2:db:5f:ea:8a:
         5f:a6:66:0a:d4:f7:b4:77:46:8c:11:85:c5:3c:c5:53:67:7e:
         25:99:4f:6c:d1:49:3f:3c:3a:13:f3:2c:c2:ad:0b:b4:de:45:
         9c:1f:65:19:8f:62:e0:44:a4:ec:43:15:cd:bb:c0:71:92:1e:
         04:96:f1:84:2c:dc:eb:44:80:7a:be:b1:6a:dc:da:2a:4c:4e:
         fd:54:45:a5:67:11:7e:4b:50:eb:4e:84:f2:71:79:03:0f:17:
         44:f6:ea:cb:6e:74:b1:f3:d4:86:81:55:fb:1a:25:63:31:04:
         09:3c:51:19:7d:79:23:3a:62:6a:42:00:bb:cd:bc:81:33:e8:
         96:c5:0f:28:61:94:10:cc:5f:7c:6d:ed:b8:1e:18:c8:ec:b3:
         97:c7:37:cc:65:27:58:5d:65:85:08:c8:ba:5c:55:aa:18:da:
         79:46:02:4b:7d:b9:23:8c:31:0a:f4:91:55:11:d7:00:35:ae:
         1d:e6:cc:e6:19:c4:ae:a7:2d:06:81:c2:46:54:e9:95:bc:8b:
         8c:b3:ca:16:d0:1c:0e:f2:93:20:0d:f5:fa:b1:45:f2:4b:68:
         5d:87:fd:ca:ca:2c:3f:4a:78:d6:14:8e:c0:63:1b:e5:eb:41:
         db:fc:c7:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----