Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/BC7316D2AC1F11F186C684B1CE1D38B0.roa
File:                     BC7316D2AC1F11F186C684B1CE1D38B0.roa (raw, json)
Hash identifier:          hpVeFFBB7qhK0f7NDFtEIqbWy5QNAldnfY37ra3rp7o=
Subject key identifier:   7A:C8:7D:AE:6E:33:91:57:6C:25:7C:7B:AB:3E:59:A3:D1:D1:36:C1
Certificate issuer:       /CN=F364712FAF/serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
Certificate serial:       087A
Authority key identifier: 3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/BC7316D2AC1F11F186C684B1CE1D38B0.roa
Signing time:             Wed 09 Sep 2026 07:26:13 +0000
ROA not before:           Wed 09 Sep 2026 07:26:09 +0000
ROA not after:            Wed 31 Dec 2036 07:26:09 +0000
asID:                     29975
IP address blocks:        41.1.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2170 (0x87a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364712FAF, serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
        Validity
            Not Before: Sep  9 07:26:09 2026 GMT
            Not After : Dec 31 07:26:09 2036 GMT
        Subject: CN=6aa10a15-321c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:84:4a:3b:bf:2f:8f:19:d9:90:0a:61:e9:48:
                    e2:6d:a8:be:96:db:b8:d1:1c:6c:c1:65:e6:15:e0:
                    6e:2f:2f:96:92:8a:31:de:bf:c8:00:a0:6e:bb:de:
                    e0:dc:1e:e4:32:2e:ea:0f:19:fb:1b:44:6f:1c:d9:
                    57:c8:88:28:a4:72:9d:56:38:f0:c4:8d:4a:38:87:
                    48:ea:6a:bd:69:77:a4:7e:80:da:89:18:6f:f0:3c:
                    ce:a2:93:07:a5:d5:6c:8f:ef:45:e8:55:81:f5:4f:
                    8e:bf:9a:47:c2:a9:af:57:68:6a:bb:06:fc:62:24:
                    c8:37:8b:4a:69:49:64:6b:0b:45:5a:b4:6f:a1:10:
                    66:e4:15:b6:0b:03:8e:e1:87:ac:72:9c:3c:d0:f3:
                    47:4d:2c:df:7b:f2:b3:98:7d:13:f4:6e:97:c4:4d:
                    dd:90:1d:96:1e:ec:c2:7a:10:0f:bd:f9:91:ed:53:
                    96:c2:df:4c:bd:1b:39:86:04:9a:0c:88:b9:f2:ba:
                    07:5c:2f:f2:70:8f:cb:74:16:d5:57:97:d1:fe:bd:
                    a0:94:a8:fa:f9:77:97:20:e2:8d:c4:20:8d:de:2e:
                    09:fb:9a:c5:f1:12:c5:67:41:f4:68:e3:8e:0f:03:
                    48:bf:53:05:c3:bf:d6:e2:0f:10:f0:c4:42:1b:4d:
                    51:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:C8:7D:AE:6E:33:91:57:6C:25:7C:7B:AB:3E:59:A3:D1:D1:36:C1
            X509v3 Authority Key Identifier:
                keyid:3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/BC7316D2AC1F11F186C684B1CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.1.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         91:14:58:b9:d6:10:63:64:eb:7e:04:ed:3e:8b:e2:a6:75:85:
         25:5f:15:37:0a:05:04:b2:b3:1e:73:d5:bd:6f:37:dc:1f:60:
         91:1d:dc:0b:c7:12:01:f8:7a:b0:1b:31:2f:19:b5:af:a6:f6:
         ae:0b:87:5b:2d:2f:58:5d:0f:3c:29:6b:12:fb:ce:68:28:8f:
         3f:82:95:d6:f8:82:da:ec:72:8f:be:f1:54:36:be:59:54:94:
         89:1c:2c:ac:f6:66:4e:f9:43:f4:18:d5:76:c9:63:4e:c9:e7:
         03:81:8b:7b:94:40:55:60:1e:e3:76:e3:51:58:51:f5:fd:8f:
         ed:d8:af:04:af:c1:a9:50:5e:8c:d6:c4:9e:5b:74:86:23:b2:
         8a:b4:c7:a2:49:99:38:7b:ed:ae:b1:0d:17:79:6c:bf:86:93:
         d6:40:81:70:13:8c:cc:7b:6e:f6:be:2e:91:9f:d8:cc:99:83:
         eb:94:41:3f:a0:a7:ce:0d:37:b2:82:cf:4a:da:b8:70:82:48:
         0b:72:0b:9f:b8:2f:f9:c3:47:70:68:cd:d4:b3:72:42:15:43:
         61:71:cd:21:10:fd:55:96:53:3f:62:0f:c7:e7:cf:af:59:39:
         63:65:5c:42:64:fe:e3:5f:a7:4d:d4:b3:7a:6a:71:2b:25:1c:
         9b:76:4e:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----