Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/B30AD26E9FAF11F1A10EDED9CE1D38B0.roa
File:                     B30AD26E9FAF11F1A10EDED9CE1D38B0.roa (raw, json)
Hash identifier:          DIW3nOdbNn1/AAfeXqg+yQQRjkduUsCE28EGKa+05d0=
Subject key identifier:   1A:AC:EF:0E:2C:C8:93:09:00:AE:66:9F:17:9F:5D:D8:CC:55:41:0D
Certificate issuer:       /CN=F364712FAF/serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
Certificate serial:       0862
Authority key identifier: 3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/B30AD26E9FAF11F1A10EDED9CE1D38B0.roa
Signing time:             Mon 24 Aug 2026 11:34:00 +0000
ROA not before:           Mon 24 Aug 2026 11:33:56 +0000
ROA not after:            Wed 31 Dec 2036 11:33:56 +0000
asID:                     29975
IP address blocks:        41.192.248.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Sep 2026 00:07:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2146 (0x862)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364712FAF, serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
        Validity
            Not Before: Aug 24 11:33:56 2026 GMT
            Not After : Dec 31 11:33:56 2036 GMT
        Subject: CN=6a8c2c28-63ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:8b:89:b9:ce:f3:5b:ec:95:52:9f:96:71:bd:
                    a1:e3:6e:91:65:c6:c9:da:44:fe:e9:f9:0f:73:91:
                    c2:a3:33:cf:ce:e8:12:44:25:a5:11:01:3d:02:cc:
                    9f:cc:79:d0:2d:7e:f0:2b:9d:7e:f0:b5:fa:f1:56:
                    8c:38:49:af:ff:a3:0d:17:eb:a6:23:1b:a3:a4:99:
                    2c:05:ef:de:46:54:5d:14:2d:8e:41:6c:ea:57:cc:
                    be:d6:04:9b:1b:ed:66:9f:f3:b2:9c:67:a8:66:a4:
                    cf:b4:e4:8d:50:d3:5c:32:37:6c:81:71:30:12:4c:
                    39:0e:24:e5:77:6a:f7:fd:d9:ac:d7:d6:33:ed:eb:
                    2b:01:c9:d7:e1:fc:2b:04:f2:c9:57:0f:a0:97:c6:
                    21:b1:6b:53:bf:92:3e:54:a5:11:be:e9:12:ce:d6:
                    e7:26:19:19:c5:ce:13:29:12:09:d7:cc:a7:28:7e:
                    74:db:f8:3b:11:80:36:51:6e:02:37:45:3f:99:96:
                    be:49:70:c7:38:2b:c4:57:47:99:d8:97:a6:00:15:
                    2e:fb:13:dc:74:84:40:31:42:b0:c4:4a:32:57:99:
                    aa:c8:b7:4a:6b:37:0c:5b:ef:f5:b8:67:e1:fb:69:
                    d7:d3:b7:16:57:95:95:aa:8a:b8:0c:a3:89:69:7c:
                    4f:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:AC:EF:0E:2C:C8:93:09:00:AE:66:9F:17:9F:5D:D8:CC:55:41:0D
            X509v3 Authority Key Identifier:
                keyid:3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/B30AD26E9FAF11F1A10EDED9CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.192.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         6d:81:21:a4:ef:ea:d7:72:35:03:4e:7c:7e:7c:10:0e:3e:ba:
         36:6e:5e:4d:8d:00:59:33:05:d7:13:0e:b7:db:2d:5c:ff:aa:
         0d:81:44:d8:8a:be:49:a4:8b:96:e8:a3:cf:78:02:0c:31:53:
         bb:05:3f:89:cb:ed:27:a8:26:7b:33:c3:9c:22:81:ed:c3:de:
         69:5a:a0:08:90:85:02:91:88:f1:56:ac:e8:89:63:4c:06:ed:
         9a:fe:11:88:f9:71:0e:e5:74:76:b2:ec:5d:33:d8:00:ae:d0:
         5f:df:95:64:08:9d:75:ff:45:3f:6a:cb:61:0d:6a:3c:69:33:
         73:56:e7:4e:69:94:a7:6b:b9:85:49:86:fe:6e:ab:50:29:7f:
         46:0d:62:c9:92:49:11:96:ab:cc:7a:07:06:16:d9:d9:dc:94:
         34:45:24:02:ae:ce:4c:b0:0a:72:9e:a5:73:94:cb:4f:ea:42:
         49:33:c0:ee:23:8d:5b:e4:5f:ed:6e:35:c8:17:d4:de:e7:6b:
         85:64:0c:13:ac:29:f6:9a:f5:72:47:a2:d8:b8:06:e3:61:53:
         b2:ff:76:54:bc:49:ad:2e:7e:99:2c:bd:28:94:e5:e1:11:7b:
         5e:18:95:42:80:00:d5:8b:89:3f:8f:0e:77:bb:43:4a:5f:64:
         7a:23:34:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----