Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/BF02CAF4B19D11F199DCD4F5CE1D38B0.roa
File:                     BF02CAF4B19D11F199DCD4F5CE1D38B0.roa (raw, json)
Hash identifier:          RhRnilh7uhJx0QVP2n/+44LztNO3uKX4fVkJU4ZyicQ=
Subject key identifier:   9E:B5:51:0C:52:65:86:C1:22:54:1A:4A:99:91:29:2F:7A:BC:AA:D1
Certificate issuer:       /CN=F364712FAF/serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
Certificate serial:       08BA
Authority key identifier: 3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/BF02CAF4B19D11F199DCD4F5CE1D38B0.roa
Signing time:             Wed 16 Sep 2026 07:10:50 +0000
ROA not before:           Wed 16 Sep 2026 07:10:46 +0000
ROA not after:            Wed 31 Dec 2036 07:10:46 +0000
asID:                     29975
IP address blocks:        41.22.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2234 (0x8ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364712FAF, serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
        Validity
            Not Before: Sep 16 07:10:46 2026 GMT
            Not After : Dec 31 07:10:46 2036 GMT
        Subject: CN=6aaa40fa-145d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f8:13:f9:44:fe:e5:d1:32:92:9f:29:22:53:
                    bd:7f:71:6c:1b:fd:a1:a2:23:e9:72:01:28:dc:fd:
                    93:5e:b9:f8:ce:46:02:79:cd:76:d0:2c:74:3b:ac:
                    25:20:8a:30:13:6c:d0:f0:af:44:43:0b:1f:4a:56:
                    06:f1:4d:d2:18:38:08:17:71:c3:d9:0a:56:01:e9:
                    09:61:1e:d1:37:2b:ab:0f:de:11:16:6a:9a:a3:ce:
                    37:02:b8:7b:03:d2:68:0a:61:b6:1d:4f:97:ac:5f:
                    71:66:fa:48:11:26:fb:81:1c:1c:cc:ab:ac:2e:b6:
                    46:3d:2d:39:e2:1e:85:20:c9:e9:4e:f5:2b:d3:a1:
                    ea:eb:02:eb:ac:94:40:d0:0f:65:0b:48:79:aa:2e:
                    a2:ad:4d:67:3c:c9:a2:e0:b9:aa:3d:e2:c5:45:70:
                    35:5b:91:4d:9e:09:69:f8:0f:58:ef:34:d7:91:0c:
                    b8:22:1b:c9:35:e8:0f:6d:2c:73:81:8e:5f:1c:df:
                    26:6d:a1:3e:ca:5f:74:15:32:92:b0:25:ea:c9:7f:
                    d6:88:e6:69:ef:b7:be:f1:a3:1d:a8:f5:ee:bd:10:
                    2f:c7:55:89:79:6f:eb:85:2d:d6:0a:9d:fd:98:ab:
                    f8:67:91:7d:5d:33:26:0f:5f:f2:08:b2:bc:ce:12:
                    8c:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:B5:51:0C:52:65:86:C1:22:54:1A:4A:99:91:29:2F:7A:BC:AA:D1
            X509v3 Authority Key Identifier:
                keyid:3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/BF02CAF4B19D11F199DCD4F5CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.22.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         5b:30:ea:75:02:aa:a9:8c:2d:38:be:6b:c7:2f:7e:98:2d:ac:
         35:6d:40:5b:5c:84:b1:fa:1a:b4:31:a5:12:4b:a4:80:bc:c6:
         70:9a:57:4b:e5:40:3e:14:5f:6f:7d:6e:a2:45:20:39:d8:33:
         e8:4b:d4:cc:d9:f1:12:64:12:10:e8:c0:3b:82:62:d0:42:40:
         7e:4d:c0:8d:fa:0e:76:d6:a4:ad:4e:ca:14:f9:28:a4:63:5e:
         70:c8:e0:7a:bd:49:6e:a7:27:a7:b5:21:f2:2f:e9:34:ec:3e:
         35:93:2b:86:41:7f:ef:cb:9d:60:6e:cb:4f:9f:04:bc:8c:26:
         3e:6b:32:a5:19:e1:ff:b2:93:cd:93:5d:4a:1c:b2:af:81:65:
         f6:bd:cc:49:d2:ff:57:50:7a:8f:c8:9c:04:0a:84:57:c0:c1:
         e9:39:93:f5:71:a7:37:7b:cd:c0:b3:d8:da:e4:a5:b4:4a:1f:
         ec:b8:fc:68:a8:c9:40:b3:bb:fb:63:1e:aa:ef:99:a2:4a:d8:
         05:71:a9:22:af:db:eb:03:10:3b:44:48:fb:67:6f:d1:db:4a:
         3d:67:23:e4:85:ae:18:eb:81:f2:8c:d9:93:c6:ca:e3:2c:bd:
         c0:79:be:4e:ba:38:9c:08:ca:63:8d:0c:ec:52:98:df:72:67:
         4b:e4:b6:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----