Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/58786010C79011F19C6EE114CF1D38B0.roa
File:                     58786010C79011F19C6EE114CF1D38B0.roa (raw, json)
Hash identifier:          rG2jvP06Rjeg7296CLFVGX7jm+fBWxSnVmx31ZOl7Yc=
Subject key identifier:   75:10:D3:D7:D7:9A:B9:61:42:AC:DA:67:6A:C9:33:1E:A6:C1:FF:F4
Certificate issuer:       /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial:       0D07
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/58786010C79011F19C6EE114CF1D38B0.roa
Signing time:             Wed 14 Oct 2026 05:30:20 +0000
ROA not before:           Wed 14 Oct 2026 05:30:15 +0000
ROA not after:            Tue 14 Oct 2036 05:30:15 +0000
asID:                     208959
IP address blocks:        41.180.224.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.mft
                          rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 18 Oct 2026 00:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3335 (0xd07)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3669D6BAF, serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
        Validity
            Not Before: Oct 14 05:30:15 2026 GMT
            Not After : Oct 14 05:30:15 2036 GMT
        Subject: CN=6acf136c-a180
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:23:c0:6d:ea:32:18:24:3b:de:91:85:17:55:
                    75:90:8c:0d:96:16:aa:d6:44:20:93:dd:d2:da:c8:
                    4d:fb:76:5a:e6:f4:3b:82:9f:23:2b:a5:27:c1:de:
                    73:99:a0:04:cb:68:0d:cf:29:2e:97:6c:64:06:38:
                    11:4c:b9:65:48:d1:e4:3a:d3:74:ad:9b:ec:82:74:
                    34:a5:91:2a:65:5b:1b:48:18:92:c8:5c:80:95:9f:
                    b8:65:bb:4a:84:e7:22:f7:48:e0:c3:12:d9:e6:be:
                    c2:0e:f9:32:36:d8:a4:26:0d:a8:1e:24:da:21:3f:
                    5e:46:7a:1c:b1:7f:9c:7b:ae:22:fa:96:f0:0a:4c:
                    e8:41:62:45:a3:07:a4:67:24:83:57:f8:00:f6:e8:
                    22:44:87:e5:4b:83:86:40:65:04:2c:90:fd:5a:ca:
                    86:46:a0:ab:0c:30:76:a0:73:af:1a:ce:60:47:4a:
                    66:e7:09:5b:c6:7b:77:ab:13:9c:21:6d:7f:5b:ab:
                    17:ea:d8:60:bb:17:7a:21:32:38:d2:61:ca:37:6c:
                    7d:8a:b8:f5:1e:8a:7f:51:84:13:0f:a4:cb:57:22:
                    19:c4:e2:ae:c5:d7:a4:18:83:47:e6:47:ed:49:ba:
                    c3:75:b1:45:6d:25:8e:19:6d:40:77:a1:d6:18:f8:
                    64:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:10:D3:D7:D7:9A:B9:61:42:AC:DA:67:6A:C9:33:1E:A6:C1:FF:F4
            X509v3 Authority Key Identifier:
                keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/58786010C79011F19C6EE114CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.180.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         93:28:49:7f:d3:33:b5:6e:f7:99:21:e5:d8:1c:59:2f:7d:41:
         1e:24:7e:37:e7:43:70:88:25:61:e0:4e:7d:1c:69:20:0a:bd:
         f7:5b:66:9c:75:81:a7:7e:47:34:50:02:f7:1e:0d:f5:6f:d0:
         72:77:9a:8c:ed:b0:48:03:37:06:10:19:dc:3c:e9:c7:0e:58:
         e6:a9:7d:cd:d6:d0:1d:f7:88:8b:dd:49:7e:66:dd:5f:43:f0:
         e2:a4:fa:d2:9f:40:68:95:31:c6:b0:e4:70:aa:5b:37:f2:23:
         e7:65:95:1b:42:a0:54:18:65:aa:9c:60:d2:75:1b:da:18:7d:
         5b:7b:33:e8:44:6e:8a:8d:7e:bd:1a:04:79:aa:14:97:e6:3a:
         f4:60:e0:f5:f7:2d:d4:92:54:58:43:7c:fe:55:cb:12:22:8b:
         e1:65:1b:96:4a:43:73:63:29:a1:5d:d3:b3:fa:ff:34:87:f3:
         7e:e6:f9:41:e9:fa:c0:75:2c:38:c2:f9:e1:fe:5f:94:e3:b7:
         bc:b5:d1:ab:7c:dd:94:9f:fe:be:33:b1:fc:03:eb:d2:86:cf:
         97:00:76:8b:92:aa:9c:85:60:1d:1b:95:e2:41:89:bf:69:4b:
         b5:37:ad:63:fe:05:2f:e3:73:aa:62:de:c5:ee:08:82:df:6a:
         7d:00:97:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----