Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/9A0B5D56965411F199C7B7DFCE1D38B0.roa
File:                     9A0B5D56965411F199C7B7DFCE1D38B0.roa (raw, json)
Hash identifier:          9ydbrA3SKXkY1woYL88oh9nc8YGjXLXv6PoUJBg2810=
Subject key identifier:   0E:20:E1:81:A5:BB:DF:DE:4C:47:22:C5:51:C7:71:AB:15:49:99:48
Certificate issuer:       /CN=F366B0C9AF/serialNumber=A20E2067F0DB783DE3723E231517DC7E9FE5BAD3
Certificate serial:       05CD
Authority key identifier: A2:0E:20:67:F0:DB:78:3D:E3:72:3E:23:15:17:DC:7E:9F:E5:BA:D3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/og4gZ_DbeD3jcj4jFRfcfp_lutM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/9A0B5D56965411F199C7B7DFCE1D38B0.roa
Signing time:             Wed 12 Aug 2026 13:49:13 +0000
ROA not before:           Wed 12 Aug 2026 13:49:09 +0000
ROA not after:            Sat 30 Apr 2033 13:49:09 +0000
asID:                     37182
IP address blocks:        41.93.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/og4gZ_DbeD3jcj4jFRfcfp_lutM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/og4gZ_DbeD3jcj4jFRfcfp_lutM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/og4gZ_DbeD3jcj4jFRfcfp_lutM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Sep 2026 03:17:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1485 (0x5cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366B0C9AF, serialNumber=A20E2067F0DB783DE3723E231517DC7E9FE5BAD3
        Validity
            Not Before: Aug 12 13:49:09 2026 GMT
            Not After : Apr 30 13:49:09 2033 GMT
        Subject: CN=6a7c79d9-f450
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a7:1d:41:83:ef:54:b4:e0:19:80:7a:23:f8:
                    05:74:54:21:7d:96:0f:e4:4f:dd:dd:3c:8a:e4:32:
                    4b:ef:df:ea:64:dd:26:2c:33:c9:44:d5:7e:4b:6a:
                    df:77:c3:a4:7d:d7:f9:14:23:b4:b6:70:d2:f7:61:
                    bc:ee:e7:f0:f9:d7:46:1a:98:32:5b:24:05:4e:9d:
                    9d:9f:35:bd:db:f7:c9:a3:bb:09:ae:1f:cb:96:24:
                    ba:b5:20:8f:d2:82:6c:a6:c6:eb:f3:fe:38:0f:0e:
                    70:23:99:0a:53:4c:6c:41:c8:dd:50:9b:bd:2e:6f:
                    9a:56:5d:0c:27:89:ac:79:fd:05:40:fe:a7:38:92:
                    e7:05:f7:d8:a6:ed:a6:ea:35:fa:b5:ef:52:cc:13:
                    13:e6:f6:38:d4:a2:10:76:8d:34:a2:c2:8f:98:24:
                    82:84:53:ee:38:1e:a8:23:0b:9d:8f:67:0d:95:d2:
                    ce:fb:9b:01:2d:84:d8:e6:46:c5:6b:a7:fd:8e:1c:
                    2f:a2:10:9d:3d:3f:a7:ff:d2:44:26:ee:a9:6f:a8:
                    2f:47:db:1e:1b:e7:a7:e3:47:c5:50:93:e8:45:5f:
                    8b:43:56:21:43:c0:8f:d7:ea:f0:ad:42:67:36:cc:
                    77:21:7c:fc:9e:08:5c:f0:a6:c1:8e:12:39:aa:4e:
                    8e:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:20:E1:81:A5:BB:DF:DE:4C:47:22:C5:51:C7:71:AB:15:49:99:48
            X509v3 Authority Key Identifier:
                keyid:A2:0E:20:67:F0:DB:78:3D:E3:72:3E:23:15:17:DC:7E:9F:E5:BA:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/og4gZ_DbeD3jcj4jFRfcfp_lutM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/og4gZ_DbeD3jcj4jFRfcfp_lutM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/9A0B5D56965411F199C7B7DFCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.93.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:b7:32:71:21:01:79:3a:35:3a:90:68:d0:15:da:9f:91:e1:
         34:49:88:c3:25:34:b9:d0:ba:c0:fb:d6:f8:24:e8:8c:ab:68:
         b8:72:97:3d:01:2a:be:84:55:66:a7:60:bc:17:80:c8:28:e7:
         0e:ae:4c:b6:c1:e3:69:d9:3a:93:7b:88:87:ae:34:e9:e2:0e:
         ab:64:1e:43:82:fe:3f:f6:95:3f:37:e0:58:e3:bd:af:c7:53:
         cd:11:fb:bd:64:06:09:4a:01:7c:5b:91:03:bc:08:e9:28:d4:
         ef:e7:8e:59:ba:76:32:18:33:cd:99:4b:c8:36:bd:11:27:26:
         1c:9e:f6:40:b8:9f:98:e6:7c:a2:6d:cf:53:f5:29:d8:b9:21:
         7b:ed:13:b1:e1:8b:50:40:3f:cf:ff:4e:09:d8:f9:52:40:f9:
         20:ab:e6:30:62:f0:a5:ef:c8:df:df:4d:07:f2:d8:d2:c2:7a:
         8e:c2:ef:6c:45:83:dd:04:18:a0:f3:e1:4c:97:65:0c:a6:bc:
         ba:64:3d:c4:be:cb:96:b8:37:7c:29:15:a6:4a:39:f8:68:3f:
         bb:9a:a2:a2:ac:58:15:e2:9e:72:37:56:66:7a:36:af:18:36:
         99:77:31:f5:c6:a4:c3:c3:50:7e:dc:44:9b:0a:24:7c:47:42:
         e1:0e:50:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----