Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/960FDF48964911F19D526C1DCF1D38B0.roa
File:                     960FDF48964911F19D526C1DCF1D38B0.roa (raw, json)
Hash identifier:          AVhNkjwkO2e7IM680bLe+1azTxSoOu5cdxDnIen3tpQ=
Subject key identifier:   35:47:93:F7:D3:5B:98:FA:81:28:6D:A4:BF:72:9F:EF:8D:B3:41:16
Certificate issuer:       /CN=F366B0C9AF/serialNumber=A20E2067F0DB783DE3723E231517DC7E9FE5BAD3
Certificate serial:       0579
Authority key identifier: A2:0E:20:67:F0:DB:78:3D:E3:72:3E:23:15:17:DC:7E:9F:E5:BA:D3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/og4gZ_DbeD3jcj4jFRfcfp_lutM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/960FDF48964911F19D526C1DCF1D38B0.roa
Signing time:             Wed 12 Aug 2026 12:30:22 +0000
ROA not before:           Wed 12 Aug 2026 12:30:18 +0000
ROA not after:            Thu 31 Mar 2033 12:30:18 +0000
asID:                     37182
IP address blocks:        41.93.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/og4gZ_DbeD3jcj4jFRfcfp_lutM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/og4gZ_DbeD3jcj4jFRfcfp_lutM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/og4gZ_DbeD3jcj4jFRfcfp_lutM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Sep 2026 03:17:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1401 (0x579)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366B0C9AF, serialNumber=A20E2067F0DB783DE3723E231517DC7E9FE5BAD3
        Validity
            Not Before: Aug 12 12:30:18 2026 GMT
            Not After : Mar 31 12:30:18 2033 GMT
        Subject: CN=6a7c675e-eaea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:4d:99:52:b4:bc:02:33:e1:4a:c6:57:c5:8d:
                    e4:67:9b:1d:3e:16:d7:94:a6:76:84:cf:6a:a6:dc:
                    69:c8:1b:b7:39:e0:4c:63:c5:a1:32:9d:6d:da:f8:
                    9d:fe:01:b8:25:a2:1b:80:ad:95:1d:54:85:39:f8:
                    ff:6f:6b:c1:44:c7:6c:1d:80:45:e5:8d:bf:09:de:
                    53:aa:1a:66:3a:ee:fd:8c:ce:54:cf:ef:eb:a5:20:
                    7c:ee:c7:33:b9:5a:cc:11:bd:1e:85:c4:a1:0c:59:
                    a6:15:90:6b:75:91:6b:e9:9b:89:49:8d:9b:5a:55:
                    1e:cc:aa:3d:04:5f:ff:c6:7d:79:9f:b6:3d:e6:e4:
                    33:42:5b:58:3d:c3:de:2d:bb:a4:30:04:21:da:c3:
                    e8:86:2b:c9:25:15:76:25:75:60:80:3f:28:c0:90:
                    4e:4b:a8:17:61:47:b4:eb:29:6c:09:87:80:0c:46:
                    35:ac:bc:99:3e:a5:67:3d:f6:c4:40:d8:ca:86:49:
                    97:42:81:1d:84:1f:f5:38:fd:5d:be:a5:f9:86:61:
                    6a:9d:a0:7c:31:30:b7:28:32:fb:d7:ff:12:68:cd:
                    6e:ad:54:60:94:60:1e:d3:26:72:75:da:2d:f5:95:
                    b3:f7:4d:d9:24:8e:25:2a:89:70:d6:bd:39:ec:37:
                    36:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:47:93:F7:D3:5B:98:FA:81:28:6D:A4:BF:72:9F:EF:8D:B3:41:16
            X509v3 Authority Key Identifier:
                keyid:A2:0E:20:67:F0:DB:78:3D:E3:72:3E:23:15:17:DC:7E:9F:E5:BA:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/og4gZ_DbeD3jcj4jFRfcfp_lutM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/og4gZ_DbeD3jcj4jFRfcfp_lutM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/960FDF48964911F19D526C1DCF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.93.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:0f:f5:d7:3e:1b:76:04:7b:4f:96:38:c9:83:99:71:82:29:
         18:74:04:f1:d6:73:cf:95:a4:c9:38:25:10:4c:b8:03:5e:25:
         3a:c3:e3:b3:2c:10:80:d8:ba:84:3d:0e:af:6d:36:c5:ab:0d:
         3b:8e:0b:53:e3:e1:53:ab:c4:be:d1:30:a5:e7:95:b8:4e:4d:
         1a:25:1e:2a:d2:03:52:a3:7b:9a:11:f4:51:2c:20:fe:9e:9f:
         8e:23:95:c8:18:b9:63:d1:21:47:57:7f:da:d3:56:e6:bc:7f:
         e6:ce:b6:65:e6:e8:5e:3e:d6:fc:53:33:87:b8:b3:99:c8:bb:
         cb:c6:61:ac:c5:7c:83:80:0b:a3:4b:5a:cf:23:59:dc:8e:ad:
         71:65:d9:68:62:a1:b2:da:bc:e9:68:8f:ad:01:64:ee:98:ff:
         c4:d2:e4:fd:65:df:59:5d:78:39:91:95:af:6b:f6:d7:56:9b:
         8c:76:e0:1c:b2:87:a6:68:91:d6:46:17:fd:34:ea:cb:88:30:
         a8:fd:84:43:73:0e:46:21:34:dc:77:ee:6f:d5:7b:c1:87:b1:
         ac:9a:f2:b9:a1:f9:99:06:2b:9b:66:d9:04:68:7c:21:10:1a:
         33:6e:85:b4:ad:46:d0:15:ee:28:5a:3c:58:54:ab:a7:bd:74:
         86:36:e4:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----