Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/CFC37C80B1A211F1AC08F413CF1D38B0.roa
File:                     CFC37C80B1A211F1AC08F413CF1D38B0.roa (raw, json)
Hash identifier:          H6kdSE+XI1z8NkAwfc1yeC9yLuPhCGuqJ3FnpTeIF8o=
Subject key identifier:   9E:47:27:FF:65:E9:FA:71:19:CF:E9:C8:F8:73:E6:E9:8B:12:7A:89
Certificate issuer:       /CN=F364712FAF/serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
Certificate serial:       08C2
Authority key identifier: 3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/CFC37C80B1A211F1AC08F413CF1D38B0.roa
Signing time:             Wed 16 Sep 2026 07:47:06 +0000
ROA not before:           Wed 16 Sep 2026 07:47:02 +0000
ROA not after:            Wed 31 Dec 2036 07:47:02 +0000
asID:                     29975
IP address blocks:        41.26.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2242 (0x8c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364712FAF, serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
        Validity
            Not Before: Sep 16 07:47:02 2026 GMT
            Not After : Dec 31 07:47:02 2036 GMT
        Subject: CN=6aaa497a-4df7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:83:f6:9c:c5:c0:34:2e:d3:36:61:66:dd:cb:
                    bf:8e:b8:80:86:b8:e8:c3:fc:e7:f1:80:dc:3b:71:
                    62:62:06:9a:d1:1a:d8:e0:22:89:52:bf:99:ca:52:
                    ab:14:01:80:db:05:ef:d9:32:7a:22:6f:fe:c9:4b:
                    59:8c:c4:0a:06:5e:83:32:1f:08:f0:43:8d:a3:ce:
                    17:b9:a2:53:d8:79:5d:0d:51:b3:20:84:ca:55:7d:
                    e5:36:09:dd:1c:8c:34:16:37:18:85:3e:57:bb:80:
                    df:52:0b:33:0e:fd:bd:7b:c1:19:bf:af:74:f4:9b:
                    f3:60:c1:59:f0:d6:49:cc:28:12:4e:98:c0:7a:30:
                    43:12:33:3f:d4:d7:2d:59:3d:f7:3a:b3:e7:95:fb:
                    c1:0c:cc:61:21:4a:a5:9f:59:27:cf:62:b0:7b:b6:
                    34:18:46:95:e3:c4:37:03:93:06:29:e9:89:7b:99:
                    54:12:15:aa:29:f4:8f:bc:54:9c:53:15:6c:74:41:
                    bc:31:e9:ff:a3:02:bd:3f:f6:d0:1d:b8:48:fc:2d:
                    b9:ea:01:4e:d7:28:53:4e:3c:b2:2b:cb:c7:fd:a2:
                    70:7e:5a:ff:8a:15:ee:ea:22:a3:8e:02:22:ff:d9:
                    c2:14:03:b3:ef:89:fa:c6:b9:16:f1:6b:a5:fb:04:
                    d0:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:47:27:FF:65:E9:FA:71:19:CF:E9:C8:F8:73:E6:E9:8B:12:7A:89
            X509v3 Authority Key Identifier:
                keyid:3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/CFC37C80B1A211F1AC08F413CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.26.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         62:4a:84:43:e8:ca:d6:b0:dc:2a:a0:4f:02:18:0a:c2:e9:36:
         7f:d4:37:9a:45:0b:61:40:0e:90:e6:22:f3:8a:83:db:f9:62:
         63:32:e3:d7:02:f8:48:20:b9:4e:78:ce:9e:3e:a7:72:6a:b1:
         c4:3f:07:cd:fe:5e:e9:c9:1f:21:67:28:e0:62:62:09:69:9a:
         44:5e:20:4d:f8:ad:95:32:48:a2:05:67:f0:76:84:36:19:93:
         9a:7c:f0:3f:91:bb:8d:d2:6c:bb:eb:9d:d6:4d:3f:65:d1:5b:
         d8:c7:c6:4e:c5:28:a5:e1:c0:4d:c8:ba:9c:41:98:d1:a2:7f:
         9f:e3:58:5a:92:31:39:10:d7:ab:13:15:90:ac:c4:5b:ea:d4:
         ce:a3:a9:ca:52:2d:e6:5d:f4:60:1f:47:22:2e:81:23:fc:0e:
         05:36:6d:e4:41:b2:cc:cc:ef:b1:b0:4b:18:a3:a6:d8:77:5a:
         ad:2a:4f:80:91:3a:6e:5e:07:9d:6d:53:42:79:6f:7b:4b:9a:
         1e:36:0d:de:b3:01:b0:69:aa:d9:85:55:6c:d5:95:93:89:41:
         eb:90:2b:a7:15:e0:15:30:65:f2:a6:79:89:ba:ff:ff:a6:d0:
         1c:05:e6:37:55:c0:99:3a:b5:cc:0d:6c:cb:78:c3:84:76:a6:
         16:6a:a8:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----