Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/069DAC72965411F194148ADDCE1D38B0.roa
File:                     069DAC72965411F194148ADDCE1D38B0.roa (raw, json)
Hash identifier:          3PbP4tjF3F+6KtSaiqtH3lqR4s/PfsHzCc/W8sRwDbo=
Subject key identifier:   F8:08:FF:76:93:84:ED:92:3E:64:8B:D0:B3:17:3A:87:C4:31:7C:2D
Certificate issuer:       /CN=F366B0C9AF/serialNumber=A20E2067F0DB783DE3723E231517DC7E9FE5BAD3
Certificate serial:       05C7
Authority key identifier: A2:0E:20:67:F0:DB:78:3D:E3:72:3E:23:15:17:DC:7E:9F:E5:BA:D3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/og4gZ_DbeD3jcj4jFRfcfp_lutM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/069DAC72965411F194148ADDCE1D38B0.roa
Signing time:             Wed 12 Aug 2026 13:45:06 +0000
ROA not before:           Wed 12 Aug 2026 13:45:02 +0000
ROA not after:            Thu 31 Mar 2033 13:45:02 +0000
asID:                     37182
IP address blocks:        41.93.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/og4gZ_DbeD3jcj4jFRfcfp_lutM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/og4gZ_DbeD3jcj4jFRfcfp_lutM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/og4gZ_DbeD3jcj4jFRfcfp_lutM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Sep 2026 03:17:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1479 (0x5c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366B0C9AF, serialNumber=A20E2067F0DB783DE3723E231517DC7E9FE5BAD3
        Validity
            Not Before: Aug 12 13:45:02 2026 GMT
            Not After : Mar 31 13:45:02 2033 GMT
        Subject: CN=6a7c78e2-a8f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:3d:b1:60:8a:34:94:cb:93:db:bd:b7:4e:b0:
                    2d:93:4d:1b:1c:cd:56:ce:a6:25:82:49:fb:f5:bb:
                    45:97:39:6a:78:9a:54:20:45:89:ad:4b:fb:78:07:
                    72:74:83:08:0e:df:4d:0c:37:0d:c6:ad:d2:9e:fc:
                    06:47:b2:96:78:45:c5:6a:36:ec:7e:fe:46:b3:5a:
                    13:73:03:43:7c:a5:99:9e:37:8a:d2:48:95:a5:a5:
                    64:8e:b8:04:f7:43:e9:d1:ea:3c:f6:48:3f:c3:42:
                    cb:be:3d:96:5a:d8:f8:ec:9d:f0:9f:9a:b4:87:5f:
                    65:05:cd:b5:97:65:28:24:42:44:bd:6c:a1:fb:29:
                    54:34:c5:f1:28:f7:47:95:73:e8:a7:42:01:c0:45:
                    6d:15:b5:a0:91:7b:c4:7b:10:34:1f:ad:dc:99:39:
                    2d:b9:8c:95:0a:00:dd:e5:52:c6:ed:b6:67:9d:e3:
                    7a:36:e5:03:98:9c:a5:c5:be:81:d5:4a:58:71:e6:
                    1f:60:82:4f:48:6d:30:80:64:39:e7:d3:89:9b:5a:
                    5e:44:39:4c:ca:06:dd:b1:ea:48:55:29:0c:bb:f3:
                    bb:ba:35:cd:4b:49:03:14:60:73:43:22:0d:61:0e:
                    db:55:56:56:c2:dd:78:5a:1d:6d:95:75:16:d8:d7:
                    34:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:08:FF:76:93:84:ED:92:3E:64:8B:D0:B3:17:3A:87:C4:31:7C:2D
            X509v3 Authority Key Identifier:
                keyid:A2:0E:20:67:F0:DB:78:3D:E3:72:3E:23:15:17:DC:7E:9F:E5:BA:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/og4gZ_DbeD3jcj4jFRfcfp_lutM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/og4gZ_DbeD3jcj4jFRfcfp_lutM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/069DAC72965411F194148ADDCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.93.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:02:42:7a:ea:f7:d3:4d:d5:a3:f3:35:6d:bf:b0:ca:39:4a:
         f5:1e:dc:f9:04:8b:33:ae:70:50:dd:ec:92:95:46:93:15:37:
         3e:3a:a9:71:f2:a6:37:81:dd:76:00:c6:1a:3e:58:c2:09:9d:
         7a:b5:14:8f:36:e7:14:4b:64:e0:7b:9d:d6:60:e5:83:51:ae:
         cb:6c:04:3c:e6:e7:7f:ae:00:83:b4:3b:41:46:8e:91:0c:67:
         05:e6:dc:d3:7e:fb:fd:df:3c:6d:28:b4:a2:be:30:27:df:06:
         80:9d:6a:89:58:24:69:bb:34:ed:7b:a5:5e:5b:18:82:80:ba:
         10:2f:83:95:7f:1e:9b:71:78:0a:75:e5:c2:03:64:69:00:8b:
         e5:37:75:06:ce:c0:10:e1:32:a4:b4:fb:8d:bd:a5:91:9a:0d:
         38:50:5c:b3:6f:84:82:66:12:b4:26:80:3b:af:22:de:ac:de:
         6b:ba:79:cc:c8:54:90:42:fa:1e:40:8c:5d:c7:2b:17:d4:09:
         e7:17:e3:89:6d:50:de:da:9e:b4:a1:b5:70:c5:de:09:02:09:
         d1:4d:33:3b:0a:f0:01:c7:45:cd:e2:e2:d0:5f:ae:5f:93:22:
         8d:0b:07:58:bc:74:b4:8d:95:40:d8:84:9a:22:77:c1:47:4f:
         2a:c8:5a:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----