Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/DB1C6C98B0D711F1B23658C5CE1D38B0.roa
File:                     DB1C6C98B0D711F1B23658C5CE1D38B0.roa (raw, json)
Hash identifier:          /zs+qNOm3IvA8xT0nTKFKb6TU34dQQxMz9M+m/HFLoY=
Subject key identifier:   FB:BB:18:5E:CA:0D:31:3E:3E:45:D3:50:A1:BD:83:CB:37:E9:E1:7D
Certificate issuer:       /CN=F364712FAF/serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
Certificate serial:       08A7
Authority key identifier: 3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/DB1C6C98B0D711F1B23658C5CE1D38B0.roa
Signing time:             Tue 15 Sep 2026 07:34:17 +0000
ROA not before:           Tue 15 Sep 2026 07:34:13 +0000
ROA not after:            Wed 31 Dec 2036 07:34:13 +0000
asID:                     29975
IP address blocks:        41.17.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2215 (0x8a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364712FAF, serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
        Validity
            Not Before: Sep 15 07:34:13 2026 GMT
            Not After : Dec 31 07:34:13 2036 GMT
        Subject: CN=6aa8f4f9-512d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ea:ed:02:4d:2c:47:95:a5:bf:eb:72:aa:25:
                    d7:77:a1:28:d3:e5:9a:d9:5f:42:1e:fe:6f:56:17:
                    f4:b7:ce:ab:cf:7b:8c:df:66:90:1f:4b:bf:26:1a:
                    de:ff:c9:23:59:77:a2:fe:0f:5d:db:c7:18:2e:26:
                    58:77:98:60:a0:c9:d4:54:2a:8d:0c:56:ec:4e:5b:
                    92:45:53:23:b8:16:49:13:4f:8f:67:11:ad:1f:dc:
                    2f:c8:da:54:7f:eb:ac:ad:63:74:bd:0d:70:58:c2:
                    e2:37:80:32:ea:d9:e4:9e:a6:48:85:5b:26:f0:c7:
                    95:dd:6b:cf:d9:59:8e:33:1c:98:58:f2:9a:2c:9b:
                    6f:6f:42:92:b4:c9:d0:8c:2a:30:79:8b:50:de:96:
                    6c:63:de:8f:dd:2b:44:04:47:11:20:2e:ec:d8:4f:
                    df:49:8a:6d:a9:74:54:6b:bd:f8:7d:99:4c:aa:75:
                    f1:b6:90:6b:7c:be:d0:ad:91:70:fa:02:b0:18:20:
                    94:d1:bc:d1:22:64:7e:2e:5c:c8:0a:09:54:f6:6c:
                    3c:54:0f:b0:e4:60:6e:fb:ca:2d:72:af:36:66:d1:
                    79:20:13:86:d5:1b:7e:53:d2:8b:13:b6:6a:58:79:
                    69:89:35:62:20:92:14:d0:df:ac:1f:75:75:33:33:
                    3d:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:BB:18:5E:CA:0D:31:3E:3E:45:D3:50:A1:BD:83:CB:37:E9:E1:7D
            X509v3 Authority Key Identifier:
                keyid:3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/DB1C6C98B0D711F1B23658C5CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.17.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         c3:3a:0f:d1:92:4d:04:90:fd:a8:e3:97:82:2d:6c:98:ed:bd:
         f8:f3:50:ba:c5:14:8c:05:54:b3:78:33:0a:e9:5e:21:a1:c8:
         52:81:23:2a:47:1e:04:63:d5:08:b4:4e:23:63:6c:30:79:b4:
         cf:ce:b7:a2:ea:83:f5:cb:03:5b:6b:0c:a3:4c:ff:67:f2:02:
         b3:1c:65:e5:01:c4:2a:1d:bc:1c:3a:8b:df:e1:ae:d6:8a:ee:
         7d:6c:2b:ec:da:6b:f5:1f:b1:9f:3c:4a:57:69:16:2b:d2:e5:
         3b:a8:76:e6:39:55:c1:4b:27:bb:99:91:f3:b9:8c:f4:bd:24:
         ab:87:9c:92:3b:cf:89:f2:60:a1:db:b9:6a:5e:10:3a:ce:03:
         a3:99:01:28:e9:67:2f:81:eb:54:6b:12:09:17:9d:73:2c:00:
         e8:2a:6e:b1:96:94:26:a2:4f:d3:80:99:bd:80:7c:74:9c:76:
         65:4b:8d:0c:7f:41:27:ab:2d:01:b3:ad:91:16:de:b3:fe:a8:
         fc:ed:7d:a7:32:4c:1c:6f:58:ee:85:ad:0e:4e:62:40:3d:cc:
         6a:61:4a:17:fc:14:86:29:52:48:86:9d:5c:74:a3:25:9c:dc:
         f3:87:10:fe:99:a2:b5:40:64:ea:00:45:05:3b:7d:31:3d:92:
         de:d1:32:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----