Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/AC286A60B0DA11F1908EC7D5CE1D38B0.roa
File:                     AC286A60B0DA11F1908EC7D5CE1D38B0.roa (raw, json)
Hash identifier:          NdKW9+vjE9O8aKNJOpHDhr1JjZ2nAo2+bf780JceYjI=
Subject key identifier:   EE:63:13:1F:F9:01:A7:E3:3E:DA:1E:0B:82:F2:D4:2B:E7:F5:20:B8
Certificate issuer:       /CN=F364712FAF/serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
Certificate serial:       08B3
Authority key identifier: 3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/AC286A60B0DA11F1908EC7D5CE1D38B0.roa
Signing time:             Tue 15 Sep 2026 07:54:27 +0000
ROA not before:           Tue 15 Sep 2026 07:54:23 +0000
ROA not after:            Wed 31 Dec 2036 07:54:23 +0000
asID:                     29975
IP address blocks:        41.18.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2227 (0x8b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364712FAF, serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
        Validity
            Not Before: Sep 15 07:54:23 2026 GMT
            Not After : Dec 31 07:54:23 2036 GMT
        Subject: CN=6aa8f9b2-aea0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:10:6e:f2:6b:98:52:62:d7:6c:a6:fc:50:ce:
                    65:92:b6:e3:fb:e6:31:ab:f9:eb:30:71:8d:da:fb:
                    d9:52:ff:b9:cf:20:7f:91:39:cd:a8:43:99:d8:0a:
                    e4:96:52:06:52:03:a0:a4:1c:b5:86:df:98:2a:9b:
                    de:0e:e2:2b:e7:1d:1c:03:8a:d9:bc:da:5b:57:8a:
                    2b:e5:de:d5:60:24:29:e2:64:b1:ef:6b:be:a9:d1:
                    0c:56:93:10:c7:27:4d:dc:38:c7:f9:25:fe:7b:7c:
                    87:a7:68:48:1c:fa:ff:c7:57:a3:bc:d1:13:4b:33:
                    1d:54:2c:d6:53:aa:b1:c2:3c:8a:38:30:d6:61:f5:
                    cd:65:15:9f:c7:ed:ef:c6:a7:82:7e:6b:bb:09:3c:
                    0f:c3:1d:f6:1f:0c:df:83:58:18:b6:7f:ff:c2:6b:
                    fa:16:ed:80:c6:b7:77:67:8a:fa:56:1e:61:18:75:
                    5d:df:1a:89:bf:cd:79:6f:99:d6:60:a9:e6:57:da:
                    78:60:b1:ae:a3:7f:26:71:ce:81:46:f3:07:c0:3b:
                    6f:1e:eb:9f:97:b4:e6:37:b2:7f:97:14:f2:26:e0:
                    d3:55:0c:97:2a:3f:12:3a:ac:eb:b3:3d:f2:95:dc:
                    63:2e:44:41:4e:99:5c:aa:52:19:e1:1d:71:58:b9:
                    33:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:63:13:1F:F9:01:A7:E3:3E:DA:1E:0B:82:F2:D4:2B:E7:F5:20:B8
            X509v3 Authority Key Identifier:
                keyid:3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/AC286A60B0DA11F1908EC7D5CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.18.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         b1:d5:f0:f2:52:e4:29:dd:a1:24:a7:0a:fd:39:1e:55:34:a3:
         bf:25:06:59:5a:23:6c:1f:e2:09:f2:7b:5d:87:d0:b7:63:3f:
         19:87:c7:47:98:27:f1:7d:d0:8b:4f:1d:9a:10:39:b4:c2:84:
         d4:9e:86:65:14:00:7e:e2:69:1e:76:28:76:12:4a:12:54:26:
         38:a8:66:ef:33:aa:bd:dd:56:d4:c4:7b:25:9a:a5:2f:99:c9:
         42:dc:71:f1:14:79:05:f7:8c:5d:f0:e7:07:11:76:0b:30:ed:
         1f:dd:10:19:07:b5:4c:9a:de:9f:4d:1a:a0:86:ac:58:23:f3:
         57:dc:f2:5f:ce:65:3e:ed:73:87:64:6b:0a:11:5c:1d:9d:46:
         ff:14:09:a5:53:c4:70:e7:73:49:66:e7:57:1d:76:5b:1f:77:
         61:54:1e:7c:a6:ee:dd:71:fe:ae:aa:33:47:73:1c:7e:32:0e:
         22:5d:a6:b2:4d:7f:47:6b:32:11:ae:0b:8c:0f:cf:20:32:c2:
         d0:43:4b:18:08:db:d3:e5:58:83:3a:b7:02:d2:47:52:c1:b8:
         9c:05:81:8a:d6:90:99:21:4f:06:4f:52:cc:57:36:60:74:42:
         5a:80:3c:b4:f5:b6:48:48:e6:4e:62:ff:a3:6a:bf:5f:be:38:
         69:e0:31:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----