Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/DE18517AB19D11F18539A6F7CE1D38B0.roa
File:                     DE18517AB19D11F18539A6F7CE1D38B0.roa (raw, json)
Hash identifier:          79MxQ5moNbWD+DGbMmV+tzmoh0ovsIaOU2vDZjunGBI=
Subject key identifier:   1C:54:D9:46:BF:1E:48:C2:25:44:66:10:BA:0C:16:D0:64:3F:E9:B1
Certificate issuer:       /CN=F364712FAF/serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
Certificate serial:       08BC
Authority key identifier: 3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/DE18517AB19D11F18539A6F7CE1D38B0.roa
Signing time:             Wed 16 Sep 2026 07:11:42 +0000
ROA not before:           Wed 16 Sep 2026 07:11:38 +0000
ROA not after:            Wed 31 Dec 2036 07:11:38 +0000
asID:                     29975
IP address blocks:        41.22.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 05 Oct 2026 00:08:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2236 (0x8bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364712FAF, serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
        Validity
            Not Before: Sep 16 07:11:38 2026 GMT
            Not After : Dec 31 07:11:38 2036 GMT
        Subject: CN=6aaa412e-3d23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:94:98:3f:a7:55:5d:c6:7c:e8:48:83:bf:43:
                    ba:4b:71:61:76:67:cb:b0:cf:af:ca:7c:2e:53:e3:
                    73:be:3d:d3:86:00:85:e6:e6:e0:44:49:30:ab:c8:
                    16:f7:15:7a:5a:f0:02:93:a3:fd:ff:a1:4b:d6:0a:
                    43:cf:e2:9b:0b:36:58:fe:25:55:c1:9c:eb:0a:9d:
                    5f:de:c3:43:5f:52:17:22:7f:9b:02:0f:70:0a:34:
                    89:97:83:f7:05:f4:b2:5e:2f:33:95:12:83:f0:d4:
                    9b:f0:d2:6e:d4:30:54:59:01:77:94:26:82:93:99:
                    d7:5a:a0:6a:92:aa:7f:73:eb:18:02:b0:a7:ba:d0:
                    77:52:13:26:24:3a:cc:9c:2d:e8:fe:d3:97:65:b5:
                    b3:c4:37:87:d9:4b:72:88:23:c1:89:22:39:20:66:
                    e2:de:57:bd:61:06:7a:bd:41:a2:cd:bf:d0:e3:80:
                    cc:89:71:f6:02:45:a6:f7:d8:ef:ef:8f:db:1d:e1:
                    28:f6:4b:4a:28:e8:9c:c1:f5:f6:3d:b5:b9:4d:46:
                    56:2c:1c:13:29:88:23:18:39:a0:dd:05:9c:77:f3:
                    e9:e0:d9:f8:d1:e7:62:27:38:3c:48:50:4d:3e:0a:
                    1e:9b:8b:be:49:4c:2e:54:b3:a4:cf:02:96:94:2e:
                    6b:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:54:D9:46:BF:1E:48:C2:25:44:66:10:BA:0C:16:D0:64:3F:E9:B1
            X509v3 Authority Key Identifier:
                keyid:3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/DE18517AB19D11F18539A6F7CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.22.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         ac:d0:f1:f6:29:87:79:f7:35:29:ed:57:fe:20:8a:c9:65:ea:
         4d:5c:17:28:de:15:19:8b:4f:b3:b8:82:7d:1d:a3:d2:aa:b9:
         eb:9a:7d:01:03:ad:53:ae:09:3e:d5:c9:88:85:e6:a4:8a:f0:
         50:89:6c:81:f9:91:e5:07:90:78:dc:fb:8f:e8:0d:5d:19:80:
         69:05:71:4b:3c:91:2a:f8:f0:05:83:bf:f8:6b:8d:c4:73:e0:
         7b:76:f3:5c:5d:e2:f2:ec:fe:99:31:b2:2e:f3:46:3e:cf:2c:
         58:44:ea:f7:0a:64:da:a9:e6:3e:a0:14:0c:40:eb:18:d4:56:
         53:33:b7:d0:a0:29:c3:6d:88:f0:f7:11:06:8d:a2:11:bc:b1:
         09:4f:47:71:d1:cf:7c:b4:80:fd:6c:43:23:81:a5:7f:9b:75:
         09:45:4f:ef:88:fb:d6:ad:fa:65:3f:82:ce:c3:5c:3a:f9:77:
         38:93:13:cf:3e:09:f5:ef:db:85:c8:74:aa:14:3e:73:10:f4:
         14:5e:9e:85:ac:92:ce:58:9c:99:1e:10:89:28:55:3b:5c:4e:
         c7:f4:30:e7:50:64:40:07:d2:61:0a:52:d0:6a:d8:3a:87:8d:
         e9:f8:46:3a:95:96:60:73:99:ed:05:e8:72:76:3c:8f:f1:6e:
         79:fa:68:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----