Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/D549DBCA964711F1B59E2C11CF1D38B0.roa
File:                     D549DBCA964711F1B59E2C11CF1D38B0.roa (raw, json)
Hash identifier:          0fB1EX6gjMfqiJL3NlytdowABaOXAWKUSBhWC8d6n3A=
Subject key identifier:   BD:64:1C:2F:39:32:50:08:1B:28:E1:1E:7F:59:5C:24:86:4C:C3:8F
Certificate issuer:       /CN=F366B0C9AF/serialNumber=A20E2067F0DB783DE3723E231517DC7E9FE5BAD3
Certificate serial:       056D
Authority key identifier: A2:0E:20:67:F0:DB:78:3D:E3:72:3E:23:15:17:DC:7E:9F:E5:BA:D3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/og4gZ_DbeD3jcj4jFRfcfp_lutM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/D549DBCA964711F1B59E2C11CF1D38B0.roa
Signing time:             Wed 12 Aug 2026 12:17:49 +0000
ROA not before:           Wed 12 Aug 2026 12:17:45 +0000
ROA not after:            Thu 31 Mar 2033 12:17:45 +0000
asID:                     37182
IP address blocks:        41.93.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/og4gZ_DbeD3jcj4jFRfcfp_lutM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/og4gZ_DbeD3jcj4jFRfcfp_lutM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/og4gZ_DbeD3jcj4jFRfcfp_lutM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Sep 2026 03:17:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1389 (0x56d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366B0C9AF, serialNumber=A20E2067F0DB783DE3723E231517DC7E9FE5BAD3
        Validity
            Not Before: Aug 12 12:17:45 2026 GMT
            Not After : Mar 31 12:17:45 2033 GMT
        Subject: CN=6a7c646d-2e22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:59:a2:7c:ea:f6:38:6f:4b:e9:e2:1f:b3:db:
                    d4:0b:85:9e:8c:a1:9e:87:75:c8:1b:ad:53:53:17:
                    3f:03:3f:69:6e:02:e7:99:d3:be:2a:03:79:02:00:
                    0e:95:f7:b6:ff:12:4b:9d:35:54:d7:1b:e9:85:f0:
                    8d:0a:fd:ff:69:b4:97:7d:56:15:75:af:fd:22:14:
                    c8:8c:b7:30:52:94:96:fe:60:c0:6d:c2:70:9c:83:
                    30:fc:4d:7e:82:40:e5:df:04:dc:9a:19:c4:e7:c0:
                    dd:cd:f9:68:13:22:68:57:1d:5a:7a:e1:85:42:f0:
                    ba:2d:37:7e:50:11:87:12:a5:ca:9f:0d:d6:63:f9:
                    d1:ea:5f:e0:00:35:5d:4d:b4:9d:3e:38:a0:65:54:
                    be:e4:3e:6c:3c:dc:96:fb:83:7b:b0:48:bb:7e:e8:
                    e1:71:0d:ae:29:d4:26:16:58:ce:a0:ce:c9:71:40:
                    fa:b9:da:26:b3:a4:46:47:20:74:66:4f:fa:c1:f7:
                    1f:b9:45:89:2b:9a:80:f6:89:5d:85:a0:70:88:e9:
                    a1:d5:e1:c1:6f:a5:e5:db:32:33:fd:66:77:20:50:
                    f8:5e:0e:0c:57:c9:c9:7d:9e:94:f1:e0:e8:b8:0d:
                    a8:59:fb:08:07:d1:ba:e7:6d:ec:3f:0b:62:3f:53:
                    6e:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:64:1C:2F:39:32:50:08:1B:28:E1:1E:7F:59:5C:24:86:4C:C3:8F
            X509v3 Authority Key Identifier:
                keyid:A2:0E:20:67:F0:DB:78:3D:E3:72:3E:23:15:17:DC:7E:9F:E5:BA:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/og4gZ_DbeD3jcj4jFRfcfp_lutM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/og4gZ_DbeD3jcj4jFRfcfp_lutM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/D549DBCA964711F1B59E2C11CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.93.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:31:c8:21:93:9c:8c:cd:42:66:63:f1:86:64:96:1e:3e:56:
         e4:62:9b:27:e3:10:9d:0c:f7:7d:7f:da:b4:14:79:13:94:9a:
         b9:23:8f:29:dc:53:93:cf:af:1c:5c:5a:5e:50:1a:30:4d:38:
         e7:b5:33:a1:3f:3b:b4:ec:82:5b:df:cc:08:55:4e:4e:9a:3d:
         3f:32:d2:22:a7:38:22:c4:f2:a2:4b:e3:04:8e:54:28:fb:a5:
         47:f5:cf:09:7c:ad:a4:ef:a9:e7:7e:13:2b:fa:eb:94:6f:63:
         cd:68:41:c7:ba:d0:72:df:9e:7d:f6:ae:eb:8d:9c:0f:6f:e8:
         c2:63:8e:36:9c:63:02:cb:1f:07:39:e2:f3:f9:43:d6:f2:46:
         a2:d1:61:73:c6:31:a9:37:ea:14:e5:40:26:af:01:3a:1a:05:
         a8:ef:67:ba:11:0c:87:d1:48:55:58:34:df:6d:3d:82:bd:6a:
         83:2a:3c:94:15:1e:52:21:8f:3c:3d:51:19:e7:e9:8e:11:5e:
         e6:36:4d:5c:cf:32:ee:7f:b2:be:89:47:64:04:0e:79:44:b1:
         99:88:0d:62:b3:f5:56:6a:e7:af:55:06:66:a1:83:e8:1d:51:
         ad:75:4a:e7:39:4b:bf:57:bb:d7:08:41:7e:b5:6e:69:7a:0d:
         f1:e3:d6:a1
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBW0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NkIwQzlBRjExMC8GA1UEBRMoQTIwRTIwNjdGMERCNzgzREUzNzIzRTIzMTUxN0RD
N0U5RkU1QkFEMzAeFw0yNjA4MTIxMjE3NDVaFw0zMzAzMzExMjE3NDVaMBgxFjAU
BgNVBAMTDTZhN2M2NDZkLTJlMjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCnWaJ86vY4b0vp4h+z29QLhZ6MoZ6HdcgbrVNTFz8DP2luAueZ074qA3kC
AA6V97b/EkudNVTXG+mF8I0K/f9ptJd9VhV1r/0iFMiMtzBSlJb+YMBtwnCcgzD8
TX6CQOXfBNyaGcTnwN3N+WgTImhXHVp64YVC8LotN35QEYcSpcqfDdZj+dHqX+AA
NV1NtJ0+OKBlVL7kPmw83Jb7g3uwSLt+6OFxDa4p1CYWWM6gzslxQPq52iazpEZH
IHRmT/rB9x+5RYkrmoD2iV2FoHCI6aHV4cFvpeXbMjP9ZncgUPheDgxXycl9npTx
4Oi4DahZ+wgH0brnbew/C2I/U24zAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUvWQc
LzkyUAgbKOEef1lcJIZMw48wHwYDVR0jBBgwFoAUog4gZ/DbeD3jcj4jFRfcfp/l
utMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjZCMEM5L0YxMjY1MThDQkM0MDExRURBQjU5NEVEQ0YxMjIyNDY4L29nNGda
X0RiZUQzamNqNGpGUmZjZnBfbHV0TS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL29nNGdaX0RiZUQzamNqNGpGUmZjZnBfbHV0TS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjZCMEM5L0YxMjY1MThDQkM0MDExRURBQjU5NEVEQ0Yx
MjIyNDY4L0Q1NDlEQkNBOTY0NzExRjFCNTlFMkMxMUNGMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAApXRwwDQYJKoZIhvcNAQEL
BQADggEBAJQxyCGTnIzNQmZj8YZklh4+VuRimyfjEJ0M931/2rQUeROUmrkjjync
U5PPrxxcWl5QGjBNOOe1M6E/O7TsglvfzAhVTk6aPT8y0iKnOCLE8qJL4wSOVCj7
pUf1zwl8raTvqed+Eyv665RvY81oQce60HLfnn32ruuNnA9v6MJjjjacYwLLHwc5
4vP5Q9byRqLRYXPGMak36hTlQCavAToaBajvZ7oRDIfRSFVYNN9tPYK9aoMqPJQV
HlIhjzw9URnn6Y4RXuY2TVzPMu5/sr6JR2QEDnlEsZmIDWKz9VZq569VBmahg+gd
Ua11Suc5S79Xu9cIQX61bml6DfHj1qE=
-----END CERTIFICATE-----