Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/D4C073449A7F11F185E6521DCF1D38B0.roa
File:                     D4C073449A7F11F185E6521DCF1D38B0.roa (raw, json)
Hash identifier:          5DWqMaNbxJ2aQVX5MEQhT4ZYlP/uGhmTb9hlbWpI9lM=
Subject key identifier:   04:15:4D:0A:2D:A0:BA:0B:8A:12:A7:DA:91:42:FB:87:BA:D8:80:5E
Certificate issuer:       /CN=F364712FAF/serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
Certificate serial:       083B
Authority key identifier: 3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/D4C073449A7F11F185E6521DCF1D38B0.roa
Signing time:             Mon 17 Aug 2026 21:08:45 +0000
ROA not before:           Mon 17 Aug 2026 21:08:41 +0000
ROA not after:            Wed 31 Dec 2036 21:08:41 +0000
asID:                     29975
IP address blocks:        41.13.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Sep 2026 00:07:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2107 (0x83b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364712FAF, serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
        Validity
            Not Before: Aug 17 21:08:41 2026 GMT
            Not After : Dec 31 21:08:41 2036 GMT
        Subject: CN=6a83785d-d3fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:8a:6d:e8:24:ca:78:79:b3:cb:7e:c7:77:e0:
                    49:d2:9e:e2:93:c2:29:96:a6:c0:a0:fe:f3:66:7b:
                    40:8d:c4:13:fc:b4:b8:6a:f4:b9:2e:1b:0e:6d:c4:
                    a7:f2:1b:91:b2:fe:b6:51:23:a1:66:b4:69:8b:19:
                    9d:3b:a2:51:13:fe:d4:a0:c3:7b:63:29:a0:42:8e:
                    e2:50:cd:90:e0:a3:28:b6:cc:e0:26:5e:6a:38:08:
                    ef:89:b2:fe:e0:a5:30:55:a9:4e:2d:5c:14:4e:68:
                    6c:d1:b1:86:b1:2a:6c:da:f4:8e:dd:11:6d:bb:2d:
                    05:f0:39:e6:11:cc:95:e2:d7:7e:78:39:70:73:77:
                    35:25:11:95:86:95:23:95:1e:6d:3e:36:e7:23:c4:
                    90:05:b6:8c:9e:53:ab:53:07:63:0e:79:0e:ad:79:
                    fa:20:39:6b:83:a1:bb:f0:fd:ba:3b:ea:ad:25:50:
                    71:37:fa:12:18:cd:67:82:56:dc:a5:2e:42:7b:db:
                    ca:99:92:af:46:39:e7:06:3a:89:50:bc:f4:29:59:
                    b0:64:60:7d:f4:89:5d:2d:2e:da:04:b5:c4:df:73:
                    29:39:6f:3b:aa:e4:46:b9:13:7b:64:4a:7f:80:d8:
                    eb:2c:ad:40:94:10:12:c6:7f:7e:3b:e4:b3:74:65:
                    97:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:15:4D:0A:2D:A0:BA:0B:8A:12:A7:DA:91:42:FB:87:BA:D8:80:5E
            X509v3 Authority Key Identifier:
                keyid:3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/D4C073449A7F11F185E6521DCF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.13.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         1e:09:e0:a6:9e:8c:d9:f6:a4:88:45:37:ba:31:a0:74:86:25:
         bd:8c:09:41:5e:35:fb:7f:17:3d:87:9f:63:3b:79:bc:76:20:
         27:34:89:ab:21:01:df:65:b0:94:e8:ae:bd:6c:fd:32:50:d9:
         2a:26:16:d9:c7:2d:a8:ac:77:f6:62:5c:7c:69:fd:b1:bb:27:
         b1:1c:01:b9:e3:f9:a9:b5:96:83:be:17:8e:b1:f3:b1:2a:9b:
         b4:f8:4b:9c:b5:31:a1:98:5b:2c:70:5b:88:06:c8:13:6e:55:
         be:eb:99:a9:99:0e:5d:52:d8:0f:dc:d1:e2:7f:4f:87:0e:b8:
         28:d6:79:45:ea:a1:18:e2:51:7a:c7:c9:5a:9b:1d:fb:57:b5:
         f0:70:34:9e:63:50:33:4d:33:04:2b:52:58:2b:87:c7:b2:b1:
         9b:00:9f:46:d7:98:16:39:c0:81:bd:90:2c:c1:6f:78:20:ff:
         9f:15:bf:65:57:9b:81:e7:d2:44:55:49:58:d3:fc:95:5a:f4:
         f1:3b:b5:7d:7f:84:fe:bb:51:cb:91:89:d9:67:4f:f7:ca:15:
         5e:ff:71:21:e5:2c:15:09:8c:3a:97:61:53:c3:28:df:0b:9d:
         61:94:4b:bb:79:03:a9:d3:7b:c9:94:77:0d:91:c2:19:87:f2:
         68:31:21:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----