Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D987F/FC8A955C844111F1849AD5E1CE1D38B0/9E812784844911F1AC6FBF0FCF1D38B0.roa
File:                     9E812784844911F1AC6FBF0FCF1D38B0.roa (raw, json)
Hash identifier:          Zj1r2gfZfraM50g7PRhgtk7jKO4qQFKeKyiQrjo1A/0=
Subject key identifier:   E0:2F:A3:7D:0D:F9:A7:6B:CC:A9:58:22:15:84:47:51:24:CE:F1:00
Certificate issuer:       /CN=F36D987FAF/serialNumber=7BE49E2F8F2D68D9FEE73986D447937616A4ED88
Certificate serial:       05
Authority key identifier: 7B:E4:9E:2F:8F:2D:68:D9:FE:E7:39:86:D4:47:93:76:16:A4:ED:88
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/e-SeL48taNn-5zmG1EeTdhak7Yg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D987F/FC8A955C844111F1849AD5E1CE1D38B0/9E812784844911F1AC6FBF0FCF1D38B0.roa
Signing time:             Mon 20 Jul 2026 14:45:15 +0000
ROA not before:           Mon 20 Jul 2026 14:45:11 +0000
ROA not after:            Fri 20 Jul 2029 14:45:11 +0000
asID:                     328459
IP address blocks:        41.216.208.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D987F/FC8A955C844111F1849AD5E1CE1D38B0/e-SeL48taNn-5zmG1EeTdhak7Yg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D987F/FC8A955C844111F1849AD5E1CE1D38B0/e-SeL48taNn-5zmG1EeTdhak7Yg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/e-SeL48taNn-5zmG1EeTdhak7Yg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 26 Jul 2026 00:07:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D987FAF, serialNumber=7BE49E2F8F2D68D9FEE73986D447937616A4ED88
        Validity
            Not Before: Jul 20 14:45:11 2026 GMT
            Not After : Jul 20 14:45:11 2029 GMT
        Subject: CN=6a5e347b-6f36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:37:be:01:71:88:e3:15:68:d4:51:63:6c:66:
                    db:db:6a:05:48:cd:10:22:ef:12:d0:68:b7:df:62:
                    c0:7d:69:37:66:98:8e:91:51:60:af:23:56:31:9d:
                    0b:05:c5:7c:27:e8:69:88:b4:ec:7a:01:10:9d:6a:
                    a0:f7:f4:17:29:f7:8d:eb:b9:0e:a2:4d:d5:5a:b8:
                    52:73:63:40:74:e6:36:a9:52:18:f2:4b:9d:d1:86:
                    58:13:c7:f4:75:a7:d0:e9:48:6c:55:b5:ce:0a:50:
                    cb:be:3b:2a:bf:6a:8c:6b:de:58:9e:49:1f:1b:39:
                    69:15:a2:96:dd:77:5d:0f:b4:94:20:e0:8e:e2:07:
                    9e:08:22:79:5f:e0:d8:93:8d:21:48:35:16:44:fa:
                    2c:99:b9:c7:a9:42:5f:6b:a6:6c:50:5b:46:0f:40:
                    12:ba:1d:8e:c0:91:c7:9a:28:74:df:9c:60:dd:2c:
                    20:92:f4:86:ab:53:96:35:a4:cc:77:d1:87:2c:ce:
                    4a:6e:0f:9d:2c:49:95:29:42:32:28:8a:11:97:5e:
                    a9:da:e4:d0:ba:1f:ff:13:0f:44:7f:ce:e3:d5:e1:
                    53:13:e4:94:d2:27:09:37:5e:3d:3f:42:00:6c:62:
                    6c:70:07:91:3b:33:6c:fc:48:8c:42:a6:05:34:6a:
                    ff:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:2F:A3:7D:0D:F9:A7:6B:CC:A9:58:22:15:84:47:51:24:CE:F1:00
            X509v3 Authority Key Identifier:
                keyid:7B:E4:9E:2F:8F:2D:68:D9:FE:E7:39:86:D4:47:93:76:16:A4:ED:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D987F/FC8A955C844111F1849AD5E1CE1D38B0/e-SeL48taNn-5zmG1EeTdhak7Yg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/e-SeL48taNn-5zmG1EeTdhak7Yg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D987F/FC8A955C844111F1849AD5E1CE1D38B0/9E812784844911F1AC6FBF0FCF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.216.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         51:56:c9:b2:30:99:d8:63:cd:e8:ac:ec:18:b6:c0:87:f3:43:
         cf:78:75:8a:ec:5a:e4:4f:b1:90:ea:23:e4:2e:1b:11:0a:f7:
         6e:d9:8d:11:a3:bb:61:f7:eb:bc:74:91:45:44:14:c5:25:d9:
         3a:dc:08:ae:8a:3c:ce:12:36:73:56:c9:23:d6:42:e1:4a:02:
         66:8d:c5:00:8a:b0:3a:75:02:cc:f2:dd:7b:e8:53:fa:26:63:
         5b:59:8b:4f:c6:c6:0f:9b:a6:4d:d0:fa:3a:e3:13:5f:dc:56:
         8e:1a:a4:9f:6d:d6:5e:d0:95:87:70:ac:5b:6b:ad:0d:c2:be:
         e8:5f:da:f2:13:db:8f:c9:e9:96:40:af:eb:87:23:6f:0a:64:
         97:f5:37:ae:ce:40:0a:ac:f1:d1:c2:96:29:2d:55:3d:f3:51:
         1b:0a:03:56:fe:d1:0d:64:b8:9a:22:69:a8:9e:41:1a:7e:be:
         34:09:ab:ae:16:cb:6f:95:24:36:6d:85:e8:a3:d0:98:26:d6:
         ea:e8:62:31:52:d0:12:7b:ae:af:aa:30:db:51:a0:14:93:ae:
         4c:25:83:95:c2:b2:d9:66:4c:dd:cf:06:be:f9:8f:62:11:aa:
         17:40:fb:9a:40:b5:7b:d6:dc:64:b1:fe:6b:d3:0d:58:da:b1:
         ec:40:58:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----