Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/BD3F3A78B33111F1BADD6E02CF1D38B0.roa
File:                     BD3F3A78B33111F1BADD6E02CF1D38B0.roa (raw, json)
Hash identifier:          XRjJxTGCaiRVtDHBG89aVgIkVV+Sxcwt/cQagf9s738=
Subject key identifier:   8F:FA:F8:37:6B:47:29:8D:57:4C:96:12:8D:20:4C:18:C2:10:F6:50
Certificate issuer:       /CN=F364712FAF/serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
Certificate serial:       090E
Authority key identifier: 3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/BD3F3A78B33111F1BADD6E02CF1D38B0.roa
Signing time:             Fri 18 Sep 2026 07:22:44 +0000
ROA not before:           Fri 18 Sep 2026 07:22:39 +0000
ROA not after:            Wed 31 Dec 2036 07:22:39 +0000
asID:                     29975
IP address blocks:        105.252.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 03 Oct 2026 00:07:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2318 (0x90e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364712FAF, serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
        Validity
            Not Before: Sep 18 07:22:39 2026 GMT
            Not After : Dec 31 07:22:39 2036 GMT
        Subject: CN=6aace6c4-1d8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:dc:aa:5c:fc:14:43:66:14:ab:36:87:76:1d:
                    78:39:60:7a:7b:b4:7c:50:b9:c0:62:e2:47:74:5b:
                    f1:40:98:14:9b:84:b8:12:d5:34:cd:55:65:2b:ee:
                    74:34:07:7b:fc:da:91:69:4d:72:70:d4:5e:4f:fb:
                    cd:bf:cb:b5:df:d6:c9:25:25:19:29:12:3e:44:9b:
                    b5:0b:19:f6:50:cc:0a:d5:74:96:4f:2f:28:49:c1:
                    b1:68:ff:c2:78:3c:df:26:22:c7:a3:66:e1:33:2a:
                    e2:c9:d3:68:1e:96:ed:4e:1b:42:f8:91:61:71:b6:
                    4f:85:d5:71:18:00:58:b9:1b:16:4d:41:5d:c2:92:
                    20:fb:e7:d3:0b:87:28:f0:86:00:73:b9:a2:ec:4f:
                    2b:32:b5:f6:92:f9:01:8e:90:21:0b:b7:8b:87:f3:
                    d7:a5:c2:0b:bc:56:01:d5:54:31:8d:9d:c6:64:81:
                    db:94:28:ae:e0:66:7d:e1:b8:e4:09:5d:51:dc:77:
                    27:ba:f5:29:e3:55:29:6e:13:e8:e1:15:48:a7:06:
                    c3:63:28:dd:1c:d6:9f:d7:64:90:7b:10:22:04:f7:
                    b0:32:16:d8:4c:b9:76:03:58:aa:d4:55:0b:e9:c8:
                    ea:af:b5:8f:57:6d:0c:f2:7b:5c:da:a5:bb:4b:a6:
                    83:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:FA:F8:37:6B:47:29:8D:57:4C:96:12:8D:20:4C:18:C2:10:F6:50
            X509v3 Authority Key Identifier:
                keyid:3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/BD3F3A78B33111F1BADD6E02CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  105.252.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         93:f7:f2:f4:81:93:b3:4f:ee:50:dd:9f:03:4c:90:f4:52:9c:
         97:70:56:e1:f0:d0:47:7a:01:10:36:db:62:6a:7e:15:17:f3:
         3f:5b:f3:8d:78:fb:26:f1:01:0b:75:c1:bf:53:5d:41:fe:c0:
         a3:50:50:f6:99:73:f1:79:43:1d:c0:9b:72:93:46:67:38:a3:
         62:1c:f0:ac:57:ba:15:a0:68:a9:14:d9:08:65:e0:ca:19:e2:
         e7:29:e9:2b:cc:02:10:e3:87:e0:17:bf:45:ba:2b:6f:c8:3a:
         61:8f:4d:ac:96:a8:4e:21:45:51:54:56:c7:ce:c4:87:be:94:
         f0:e8:ad:80:b3:a0:49:51:7a:b0:88:3c:ac:c1:3b:f2:a6:ca:
         89:da:d5:64:02:3c:46:56:aa:8c:3c:b7:22:37:33:69:24:5d:
         5f:d8:fb:c1:d9:35:e0:42:be:6b:ff:32:d6:ec:9e:2f:34:4b:
         ab:5d:96:df:9d:27:d0:c3:bc:18:e0:98:cc:54:50:21:0d:57:
         04:3f:ba:fb:60:53:e6:ef:9d:28:87:93:ea:7e:8c:d2:5b:9b:
         8f:03:95:a6:f8:f7:d0:c9:b5:bb:62:8c:ae:88:c2:7b:64:c6:
         10:4a:ed:a6:b6:b8:73:f6:2e:46:d8:33:b4:47:3c:e7:9b:97:
         d8:45:19:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----