Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/EF3518DCB33A11F19831ABB8CE1D38B0.roa
File:                     EF3518DCB33A11F19831ABB8CE1D38B0.roa (raw, json)
Hash identifier:          KsvvSezm38wPJnEDr6SmnZaq8zph21wCwUkJglGcjuQ=
Subject key identifier:   99:0B:34:E5:DA:DA:E4:D1:B6:DD:0F:3C:5D:42:51:B5:B2:5F:49:1E
Certificate issuer:       /CN=F364712FAF/serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
Certificate serial:       0913
Authority key identifier: 3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/EF3518DCB33A11F19831ABB8CE1D38B0.roa
Signing time:             Fri 18 Sep 2026 08:28:33 +0000
ROA not before:           Fri 18 Sep 2026 08:28:29 +0000
ROA not after:            Wed 31 Dec 2036 08:28:29 +0000
asID:                     29975
IP address blocks:        105.253.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 01 Oct 2026 00:07:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2323 (0x913)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364712FAF, serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
        Validity
            Not Before: Sep 18 08:28:29 2026 GMT
            Not After : Dec 31 08:28:29 2036 GMT
        Subject: CN=6aacf631-76c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:66:87:62:57:ec:ca:b8:3e:6e:63:ef:d3:ea:
                    cf:d0:b8:79:72:93:56:fe:f2:f1:95:42:66:e4:f5:
                    23:04:09:80:b8:01:49:ab:a0:18:ae:74:71:a4:f6:
                    78:56:3b:0d:82:4c:31:b1:c5:41:53:a1:42:32:d5:
                    ba:b0:87:3f:ca:02:db:99:8f:19:60:50:ed:6e:5f:
                    40:7b:a5:f7:8b:f0:17:5d:56:d4:af:dd:bd:fb:be:
                    6c:6c:f2:46:2d:82:6f:9f:dd:44:43:06:80:72:2d:
                    23:4f:48:64:a3:25:91:05:c4:ef:28:59:68:8f:62:
                    c7:0c:18:95:0a:f8:fa:77:89:c2:d7:39:01:92:6b:
                    4c:20:6b:0b:8a:b5:ec:1a:20:a4:aa:7e:85:5f:c1:
                    fd:9d:27:b6:62:20:ec:d9:46:69:e3:76:f4:75:e2:
                    1a:38:4f:09:77:ee:b7:b1:50:3f:af:5f:07:5d:c0:
                    af:c8:2e:64:4d:1f:69:e3:b4:cd:6e:28:02:51:74:
                    2b:bb:5f:3b:2c:30:f9:45:29:a0:28:cb:08:6c:0a:
                    7f:0e:01:28:5e:83:b4:99:06:e0:47:d7:c0:c6:65:
                    44:c3:44:19:10:76:30:ef:e3:4c:10:bf:e2:8c:9f:
                    bd:0b:96:20:ab:9c:41:80:70:c6:c6:a3:d8:bc:53:
                    cb:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:0B:34:E5:DA:DA:E4:D1:B6:DD:0F:3C:5D:42:51:B5:B2:5F:49:1E
            X509v3 Authority Key Identifier:
                keyid:3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/EF3518DCB33A11F19831ABB8CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  105.253.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         99:31:4c:cb:65:9c:7c:8b:0c:e4:f1:4b:1d:db:4f:72:26:94:
         5c:2a:dd:fc:f1:cd:99:c7:15:ea:97:9b:35:b9:12:51:86:4c:
         c5:0a:2a:27:38:4a:0e:24:75:65:a0:14:5c:c9:c9:12:47:37:
         23:64:b2:f4:be:3f:fa:5b:22:61:88:a0:8e:11:f7:0a:15:87:
         c9:c5:95:e8:4f:3d:d9:c2:98:68:e3:75:7e:bf:e3:a6:10:47:
         4e:24:14:3e:22:94:03:52:15:38:df:a2:ac:33:83:74:d5:86:
         94:51:1e:e1:7c:6d:5a:22:67:1d:bf:ff:2a:27:fa:f2:3c:ae:
         e3:e4:8b:d4:b5:e3:cc:11:70:cb:e5:2c:2e:84:ac:2a:18:80:
         a8:d4:25:bb:a7:58:65:99:8f:30:e0:44:66:75:e5:f8:37:b3:
         56:91:88:75:87:50:40:db:d5:92:6e:08:24:90:5a:12:62:17:
         02:22:7f:3e:60:a6:e5:6d:0c:cc:11:40:d5:2a:84:86:bc:38:
         68:e5:57:73:fa:64:bb:82:03:fd:50:e6:9e:a8:e5:e5:ac:51:
         21:b2:1b:44:ad:6a:30:a0:62:9d:1c:02:a3:ef:a4:c8:8d:cd:
         d4:d6:20:cb:46:47:02:48:6c:37:5e:9e:94:d2:62:4b:7a:53:
         e8:88:77:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----