Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/FFCA9F329D4111F1B6A2F4E9CE1D38B0.roa
File:                     FFCA9F329D4111F1B6A2F4E9CE1D38B0.roa (raw, json)
Hash identifier:          zBR1XihZM3b0mLRD4jeFbXjZwc+PE0eylHfOHMU17Pk=
Subject key identifier:   3C:A3:C7:32:50:8B:85:1A:78:18:DE:93:2D:BA:A6:70:1D:FB:BF:65
Certificate issuer:       /CN=F364712FAF/serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
Certificate serial:       0853
Authority key identifier: 3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/FFCA9F329D4111F1B6A2F4E9CE1D38B0.roa
Signing time:             Fri 21 Aug 2026 09:23:42 +0000
ROA not before:           Fri 21 Aug 2026 09:23:38 +0000
ROA not after:            Wed 31 Dec 2036 09:23:38 +0000
asID:                     29975
IP address blocks:        41.9.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2131 (0x853)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364712FAF, serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
        Validity
            Not Before: Aug 21 09:23:38 2026 GMT
            Not After : Dec 31 09:23:38 2036 GMT
        Subject: CN=6a88191e-5652
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:29:06:e4:19:d8:ef:1c:04:02:ca:15:f2:7e:
                    03:81:98:6c:87:d1:ed:14:af:3f:c6:48:bf:b5:07:
                    02:ce:85:4f:87:ee:17:2f:17:7d:82:fb:84:3c:a6:
                    06:61:d0:1d:2c:d9:db:f9:8a:01:64:e0:f4:ad:74:
                    87:46:79:78:89:ba:5d:34:19:a9:08:d9:0e:60:14:
                    4a:9d:b9:52:46:b0:29:03:d1:d8:53:26:0d:50:10:
                    34:0d:bb:49:d7:bb:0a:e2:9e:5a:e3:d5:04:d1:59:
                    1d:d5:04:0d:ec:7b:fa:99:aa:2f:f5:12:b2:5b:5c:
                    ed:9a:23:b3:49:37:d6:cc:bc:23:ae:11:16:63:5e:
                    6a:69:6b:ab:92:7c:03:12:9f:9c:af:f8:ae:8c:f6:
                    1b:50:f9:6a:db:85:a3:40:3c:8e:0c:4d:52:b7:7f:
                    98:db:32:b7:8b:21:64:de:8d:f8:f6:df:b7:7b:67:
                    d5:3d:e7:4c:29:a2:ef:ca:34:15:fb:91:3a:f7:b6:
                    26:53:02:29:83:57:af:9f:5c:33:62:3b:89:d2:7b:
                    90:66:85:9c:fc:34:8a:de:6d:47:a8:3e:b3:d5:16:
                    b9:be:27:39:dc:a4:ee:ba:b9:f1:fb:4a:a4:66:02:
                    f4:b4:8b:9b:3c:0d:eb:36:aa:49:54:fb:96:10:4d:
                    c8:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:A3:C7:32:50:8B:85:1A:78:18:DE:93:2D:BA:A6:70:1D:FB:BF:65
            X509v3 Authority Key Identifier:
                keyid:3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/FFCA9F329D4111F1B6A2F4E9CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.9.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         11:77:58:a1:a4:ed:2b:96:b6:f2:65:bf:35:f9:8f:dc:97:5b:
         2d:f2:ea:da:fc:61:26:8a:8b:b2:ff:70:9d:41:56:61:4b:0f:
         30:d5:b5:72:41:82:8c:80:b1:6d:72:5e:4c:17:6d:25:4b:e8:
         db:a7:5f:fd:5b:06:2e:d6:9d:42:e5:3e:ff:d2:9e:81:2c:3a:
         2e:59:d1:c5:4a:ec:fa:fd:73:f3:8e:37:ce:c2:e9:85:b8:86:
         16:98:98:76:a3:89:18:3c:4b:d3:90:cb:c4:d0:00:72:13:0c:
         03:cd:2f:c2:9a:54:50:f7:fe:a4:eb:74:37:4d:ae:d9:3b:d8:
         df:ea:f9:3f:f8:9c:5b:33:3c:6c:ac:b5:89:0c:d8:b4:a1:c2:
         a8:a6:ed:40:96:2f:85:52:28:ac:7d:15:5a:a3:c1:4c:6d:36:
         72:72:24:54:46:80:c4:8e:7d:ec:4b:08:ac:f5:8e:5f:5e:fc:
         a4:e7:e7:04:26:d4:a6:d6:69:20:d8:49:91:1a:f8:6d:05:f3:
         b1:41:e3:c5:eb:c0:b4:2e:f5:60:24:e5:e7:e7:2e:fa:f2:94:
         43:81:bd:6a:b4:05:af:ac:b6:f4:2d:31:9c:b7:19:4b:42:ea:
         2d:13:ab:72:1e:2b:97:af:02:36:17:ce:b6:87:c6:06:ce:b3:
         00:ea:e1:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----