Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/B94DA5A0B26C11F1A9F1EAD8CE1D38B0.roa
File:                     B94DA5A0B26C11F1A9F1EAD8CE1D38B0.roa (raw, json)
Hash identifier:          YseV/++Qa992HbSA1VWBSQIeOLdrlJcNEIxD9Jwbh00=
Subject key identifier:   F6:BA:48:7F:AD:C6:64:7C:EA:7C:C2:07:B4:35:9C:E2:F1:93:1B:A4
Certificate issuer:       /CN=F364712FAF/serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
Certificate serial:       08DF
Authority key identifier: 3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/B94DA5A0B26C11F1A9F1EAD8CE1D38B0.roa
Signing time:             Thu 17 Sep 2026 07:52:26 +0000
ROA not before:           Thu 17 Sep 2026 07:52:22 +0000
ROA not after:            Wed 31 Dec 2036 07:52:22 +0000
asID:                     29975
IP address blocks:        41.30.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 01 Oct 2026 02:05:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2271 (0x8df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364712FAF, serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
        Validity
            Not Before: Sep 17 07:52:22 2026 GMT
            Not After : Dec 31 07:52:22 2036 GMT
        Subject: CN=6aab9c3a-1235
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:23:97:23:42:4c:80:ab:ac:d7:3d:4f:7d:51:
                    6d:93:4d:1b:1f:a2:7e:57:99:5a:3f:b1:ca:c4:90:
                    72:ba:b1:5c:a3:7e:ee:10:1a:a0:e1:95:72:3b:b2:
                    95:e5:74:78:89:bb:6e:6a:7d:fd:1f:7a:2e:25:06:
                    29:48:bb:c1:9b:4f:60:00:67:dc:99:01:f9:73:37:
                    bc:51:ce:c8:5f:9c:02:21:d7:87:af:b6:52:9c:f5:
                    38:2c:66:f7:9d:14:d4:81:1c:29:31:29:0d:19:d5:
                    6d:41:f5:7d:1f:04:2a:e9:e9:3c:2a:b2:2c:b3:5d:
                    0a:95:d1:e4:5e:1d:fb:80:cb:92:5e:e8:0e:4a:7d:
                    6b:37:51:3e:23:96:26:b8:58:be:56:19:b1:88:cd:
                    60:f9:8e:9d:1e:5e:3a:aa:05:de:70:0e:24:2f:d0:
                    77:04:4d:98:f3:02:74:38:17:4b:2e:d3:12:01:ef:
                    f4:8c:b1:a3:3a:40:89:26:4a:7e:ca:c1:d0:fc:cb:
                    ef:01:03:c9:79:e8:38:21:60:ca:4b:27:6e:d0:04:
                    d8:28:7f:42:fc:a1:5e:98:1d:99:d4:9c:0e:55:70:
                    70:83:a5:69:0a:c3:e0:6e:8f:4d:60:f9:41:63:ba:
                    30:62:05:38:4a:58:06:56:c8:08:aa:fb:a9:c6:2e:
                    de:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:BA:48:7F:AD:C6:64:7C:EA:7C:C2:07:B4:35:9C:E2:F1:93:1B:A4
            X509v3 Authority Key Identifier:
                keyid:3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/B94DA5A0B26C11F1A9F1EAD8CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.30.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         29:2a:12:6a:7d:36:3a:e5:f6:c2:00:f8:91:63:fe:24:6f:4a:
         f0:f6:76:1c:86:0b:ff:ae:f8:d2:fe:4b:d6:ed:ea:bb:c7:f9:
         a4:35:68:d0:6b:40:6f:e6:d7:ab:c7:03:d3:38:bf:3f:8d:5c:
         c8:32:3c:77:80:29:f5:21:28:4e:99:16:76:bd:cd:a5:7b:88:
         3e:6f:81:23:9f:38:bb:a8:b3:89:10:57:cd:50:88:43:2f:24:
         c5:7a:6f:83:97:c3:79:94:af:99:99:47:a0:68:18:5b:d2:37:
         fa:e3:d2:d6:e1:71:ec:a3:82:b0:3e:a1:fb:fa:98:c8:a4:b7:
         11:45:2e:f2:8e:6b:f0:99:5a:74:a4:71:11:df:65:6e:da:b4:
         23:0e:05:e9:65:91:bc:32:49:49:fe:81:89:39:9c:74:51:0c:
         c9:73:5e:7a:3a:c4:4f:9d:42:04:25:55:6f:25:28:3b:b9:9b:
         d2:00:64:ef:6c:4a:09:cb:0b:25:2e:f8:09:ca:2b:6e:dd:dd:
         40:4e:2f:91:48:ad:92:f7:46:83:90:48:98:ac:5c:10:0c:3a:
         86:96:16:c1:cd:d3:9c:76:31:46:d5:0e:89:bb:f7:15:51:1e:
         71:b3:44:bb:bd:a0:bc:41:ef:5d:1b:3f:6f:10:63:67:d5:ab:
         5c:c1:31:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----