Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/71E3E33A964E11F1A68361BCCE1D38B0.roa
File:                     71E3E33A964E11F1A68361BCCE1D38B0.roa (raw, json)
Hash identifier:          x5Otd8hdlNV/UUKeHjaRjXYUsLKulBEKDrmSphp2Rv4=
Subject key identifier:   2E:5C:0B:90:27:75:D3:67:A9:36:81:DE:50:32:DD:05:C2:32:1B:FE
Certificate issuer:       /CN=F366B0C9AF/serialNumber=A20E2067F0DB783DE3723E231517DC7E9FE5BAD3
Certificate serial:       059D
Authority key identifier: A2:0E:20:67:F0:DB:78:3D:E3:72:3E:23:15:17:DC:7E:9F:E5:BA:D3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/og4gZ_DbeD3jcj4jFRfcfp_lutM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/71E3E33A964E11F1A68361BCCE1D38B0.roa
Signing time:             Wed 12 Aug 2026 13:05:09 +0000
ROA not before:           Wed 12 Aug 2026 13:05:05 +0000
ROA not after:            Thu 10 Mar 2033 13:05:05 +0000
asID:                     37182
IP address blocks:        41.93.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/og4gZ_DbeD3jcj4jFRfcfp_lutM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/og4gZ_DbeD3jcj4jFRfcfp_lutM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/og4gZ_DbeD3jcj4jFRfcfp_lutM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1437 (0x59d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366B0C9AF, serialNumber=A20E2067F0DB783DE3723E231517DC7E9FE5BAD3
        Validity
            Not Before: Aug 12 13:05:05 2026 GMT
            Not After : Mar 10 13:05:05 2033 GMT
        Subject: CN=6a7c6f85-d7e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:df:d1:cf:cf:04:c9:eb:73:22:fd:8e:7f:88:
                    85:c6:b9:a9:06:c3:13:f9:e2:25:1c:7f:f4:a0:bb:
                    bb:b8:10:e6:c7:68:63:9a:3d:51:58:bc:41:64:48:
                    dd:1e:05:db:cb:c2:1c:70:5c:f5:c7:d4:ae:80:e6:
                    79:79:bc:de:51:1c:2f:00:f5:ef:f0:a6:f2:d4:15:
                    5c:a6:76:53:14:04:da:e3:78:b6:35:43:c4:a3:ec:
                    c4:b1:00:22:7f:97:ea:4d:4d:40:00:33:e6:ee:20:
                    e9:df:03:b4:04:e7:d8:f3:0c:07:c0:b6:3b:ca:d1:
                    93:ea:c9:4c:77:d4:48:15:a9:b6:5b:de:03:3c:30:
                    3d:ba:35:4d:28:60:d6:1b:d1:db:e1:dd:00:e6:b1:
                    44:50:10:98:af:97:ac:46:52:fe:38:c6:15:85:f4:
                    03:b9:34:d8:12:59:53:47:86:b6:5a:03:36:15:7f:
                    49:17:81:84:4a:75:13:b4:d3:30:ed:1f:77:e4:79:
                    78:d4:4b:56:60:84:49:d0:9a:71:52:66:b3:fe:0c:
                    36:05:fc:46:e8:c9:cc:ef:ec:b9:d4:f8:af:8e:c0:
                    55:47:c6:66:f9:1a:30:bd:8b:01:f7:dd:18:e0:45:
                    64:fd:6e:4b:c7:00:86:0f:dd:00:96:66:3a:f9:56:
                    ec:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:5C:0B:90:27:75:D3:67:A9:36:81:DE:50:32:DD:05:C2:32:1B:FE
            X509v3 Authority Key Identifier:
                keyid:A2:0E:20:67:F0:DB:78:3D:E3:72:3E:23:15:17:DC:7E:9F:E5:BA:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/og4gZ_DbeD3jcj4jFRfcfp_lutM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/og4gZ_DbeD3jcj4jFRfcfp_lutM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/71E3E33A964E11F1A68361BCCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.93.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:28:55:6b:e5:67:ff:11:d1:df:f7:67:e4:94:3d:54:4d:af:
         dc:29:7a:58:7c:73:6d:15:ba:e8:22:5d:69:4e:3f:62:65:85:
         b2:24:00:7e:52:6a:d9:e7:d7:84:02:91:14:97:7f:9a:de:78:
         89:af:1a:74:7f:a2:04:e3:89:6d:1b:e2:f5:91:06:61:34:d3:
         dc:6b:ce:b7:ca:fa:0f:b8:02:54:ff:f9:2d:e7:65:17:4c:33:
         73:ba:41:e9:f9:a8:0b:ae:1d:9f:f1:28:2f:bd:e5:2c:9e:6f:
         db:8d:c3:a8:43:29:66:0d:15:35:a4:91:93:a7:f8:83:08:af:
         c3:5c:c9:43:fb:c3:1b:d2:7c:9a:5b:2f:b5:d3:80:12:8a:25:
         3e:0f:06:1b:7b:ab:a0:01:ab:57:dd:cc:0b:20:44:59:0f:35:
         f6:0d:b4:a5:2a:54:16:3c:5a:fa:52:63:4c:9d:a8:a4:5c:da:
         3c:ae:56:de:a4:06:63:06:2c:ea:6e:f7:1a:0c:eb:32:3a:61:
         de:c6:9e:d3:77:60:ed:1a:fd:c2:e9:a7:d9:43:d9:3c:e6:75:
         b4:22:a7:d7:23:72:a1:cc:3a:88:18:9e:40:77:f7:8a:e7:94:
         41:13:d1:90:98:c6:33:c4:41:b2:5d:e1:7a:f3:ce:70:8b:0f:
         a9:fc:e3:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----