Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/7245468C965011F1842EC3C6CE1D38B0.roa
File:                     7245468C965011F1842EC3C6CE1D38B0.roa (raw, json)
Hash identifier:          HrQYfa3tnHofYHdCTBNG+G+Rx2CjskAj29G6YJzxm5E=
Subject key identifier:   21:D7:96:01:CA:25:0D:EC:BB:A6:44:84:1D:5B:6F:5A:2D:24:65:47
Certificate issuer:       /CN=F366B0C9AF/serialNumber=A20E2067F0DB783DE3723E231517DC7E9FE5BAD3
Certificate serial:       05AC
Authority key identifier: A2:0E:20:67:F0:DB:78:3D:E3:72:3E:23:15:17:DC:7E:9F:E5:BA:D3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/og4gZ_DbeD3jcj4jFRfcfp_lutM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/7245468C965011F1842EC3C6CE1D38B0.roa
Signing time:             Wed 12 Aug 2026 13:19:29 +0000
ROA not before:           Wed 12 Aug 2026 13:19:25 +0000
ROA not after:            Thu 31 Mar 2033 13:19:25 +0000
asID:                     37182
IP address blocks:        41.93.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/og4gZ_DbeD3jcj4jFRfcfp_lutM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/og4gZ_DbeD3jcj4jFRfcfp_lutM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/og4gZ_DbeD3jcj4jFRfcfp_lutM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Sep 2026 03:17:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1452 (0x5ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366B0C9AF, serialNumber=A20E2067F0DB783DE3723E231517DC7E9FE5BAD3
        Validity
            Not Before: Aug 12 13:19:25 2026 GMT
            Not After : Mar 31 13:19:25 2033 GMT
        Subject: CN=6a7c72e1-9c44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:7d:f5:b7:64:c8:b0:09:35:f3:82:d7:9e:6e:
                    4d:bf:42:93:2b:80:08:96:a5:e1:4a:20:33:04:52:
                    ec:cd:19:c8:05:40:fd:b1:a9:2c:8f:3e:e4:6d:2c:
                    81:d8:61:8d:74:e0:e2:3d:de:8d:77:a6:9c:52:25:
                    26:9c:02:82:55:b2:a3:af:81:e3:84:a5:c1:e9:a1:
                    1b:8a:26:94:33:04:77:5a:dd:22:c7:0c:a2:0c:1e:
                    7c:5f:b6:d6:c6:b8:b8:49:89:9a:62:c2:6a:55:09:
                    de:fc:a3:aa:4c:d7:1c:7f:e0:07:05:a7:0f:2c:ee:
                    3a:93:69:8d:3f:52:6a:d5:82:9e:8c:ea:67:43:f2:
                    07:b4:75:8f:7b:2c:09:18:82:ce:54:30:51:9e:c2:
                    4f:38:f4:bc:40:b9:ee:a2:dc:84:26:86:47:cc:37:
                    4c:0d:86:c9:6d:17:91:0c:e2:d6:07:16:38:15:01:
                    c7:7d:61:29:56:16:fc:52:30:7e:66:7b:12:7b:6f:
                    cf:97:0f:19:9c:6b:4f:f7:0f:53:f3:cc:c6:d1:44:
                    03:bf:f8:81:03:b0:de:7e:a1:78:23:47:ee:d1:93:
                    9b:10:fd:dc:e7:f8:dc:1f:a1:2a:92:a3:7a:0f:01:
                    69:72:a2:0e:85:93:49:01:07:30:77:8d:cc:50:ec:
                    99:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:D7:96:01:CA:25:0D:EC:BB:A6:44:84:1D:5B:6F:5A:2D:24:65:47
            X509v3 Authority Key Identifier:
                keyid:A2:0E:20:67:F0:DB:78:3D:E3:72:3E:23:15:17:DC:7E:9F:E5:BA:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/og4gZ_DbeD3jcj4jFRfcfp_lutM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/og4gZ_DbeD3jcj4jFRfcfp_lutM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/7245468C965011F1842EC3C6CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.93.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b7:8c:ea:5e:8b:4f:c3:da:99:65:ac:4f:28:f1:b9:fa:2a:f4:
         77:3f:85:b7:d9:f1:7e:6c:a0:65:5f:a7:9e:1b:73:4e:2e:b0:
         68:3f:cc:a9:b0:4d:66:0c:3c:d5:f2:ed:72:45:11:a4:1c:81:
         d4:da:0b:a7:49:4f:80:45:85:1c:df:20:ca:92:bc:fd:69:89:
         8f:e4:7a:ca:72:cd:60:9c:86:5e:5a:28:56:7b:75:2c:73:e7:
         d3:47:aa:a1:20:51:18:ce:4b:1b:f4:5f:69:61:a0:f5:11:d4:
         ae:79:74:76:0c:0a:a9:5a:09:41:ad:25:6c:06:28:b4:0b:38:
         96:55:fc:af:22:03:e4:be:f8:db:3f:63:c2:52:bf:15:dc:c1:
         7b:a3:e1:15:dd:9b:10:22:6b:ed:a0:fc:ea:71:cf:9e:bb:70:
         cb:3b:61:b1:10:cc:71:bd:6f:e6:20:40:c6:de:df:c8:ae:ce:
         91:06:ea:9e:b0:3b:83:6a:df:2b:45:61:82:25:4e:02:d3:4c:
         f8:5f:75:c6:0c:65:b1:c1:28:bb:56:82:8b:ee:9d:52:4c:47:
         6a:1c:2f:1d:ba:88:3d:66:3e:49:36:31:67:69:08:3f:7d:21:
         27:20:67:76:4c:63:67:f5:3d:a6:3e:05:59:0c:1d:bb:3e:ee:
         95:02:5c:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----