Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3623CAF/D13F9DB0F4F111E5BE8A634CF8AEA228/27DC768CA2DB11F1B6223A13CF1D38B0.roa
File:                     27DC768CA2DB11F1B6223A13CF1D38B0.roa (raw, json)
Hash identifier:          jy4r26xUOc8REFs1sp6Uhxq7c9j7wmwiV0e4g5o0vfI=
Subject key identifier:   72:95:C1:54:FB:1F:5F:5B:1D:5B:D9:DC:37:AC:34:BF:43:2A:EF:A8
Certificate issuer:       /CN=F3623CAFAF/serialNumber=334DE7D2EB862018BB95749B648DCBAF50D13DA8
Certificate serial:       0F3A
Authority key identifier: 33:4D:E7:D2:EB:86:20:18:BB:95:74:9B:64:8D:CB:AF:50:D1:3D:A8
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/M03n0uuGIBi7lXSbZI3Lr1DRPag.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3623CAF/D13F9DB0F4F111E5BE8A634CF8AEA228/27DC768CA2DB11F1B6223A13CF1D38B0.roa
Signing time:             Fri 28 Aug 2026 12:22:38 +0000
ROA not before:           Fri 28 Aug 2026 12:22:34 +0000
ROA not after:            Sun 06 Feb 2033 12:22:34 +0000
asID:                     22690
IP address blocks:        41.242.140.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3623CAF/D13F9DB0F4F111E5BE8A634CF8AEA228/M03n0uuGIBi7lXSbZI3Lr1DRPag.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3623CAF/D13F9DB0F4F111E5BE8A634CF8AEA228/M03n0uuGIBi7lXSbZI3Lr1DRPag.mft
                          rsync://rpki.afrinic.net/repository/afrinic/M03n0uuGIBi7lXSbZI3Lr1DRPag.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 00:07:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3898 (0xf3a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3623CAFAF, serialNumber=334DE7D2EB862018BB95749B648DCBAF50D13DA8
        Validity
            Not Before: Aug 28 12:22:34 2026 GMT
            Not After : Feb  6 12:22:34 2033 GMT
        Subject: CN=6a917d8e-8f6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:da:93:43:b9:44:09:67:08:d8:15:6c:0a:3b:
                    3d:90:ea:a4:a6:7f:0c:cf:3f:83:f5:17:6b:63:03:
                    64:95:95:56:1d:be:45:df:45:9f:04:9b:cb:43:05:
                    4a:b8:88:3e:09:d7:97:2a:53:1d:8c:bf:5b:2a:b9:
                    18:93:3e:51:18:da:9a:f8:47:28:94:b4:17:9b:4d:
                    0c:a0:34:86:d2:79:ad:f8:be:da:df:ca:ca:69:b1:
                    b1:13:21:21:8b:49:a6:fe:92:19:69:ea:a4:5a:18:
                    be:6d:0c:61:cc:49:1f:18:fb:98:b2:d6:eb:8e:7d:
                    04:59:fa:ae:63:60:96:0f:17:16:97:dc:9b:2c:6a:
                    e0:bb:7f:f5:a1:c3:5c:d6:2e:92:11:36:16:80:63:
                    ec:0c:e5:48:3d:d2:15:09:3c:12:9b:e7:f4:dd:a5:
                    06:29:6f:df:1e:af:5f:cc:ec:a8:6a:03:db:9d:4e:
                    b8:6a:1d:3b:0d:a6:2b:43:7c:17:80:91:07:35:9f:
                    f7:21:79:07:3e:24:1d:70:e4:07:a4:b0:c2:39:80:
                    27:c7:d1:bc:a6:30:18:b8:0f:c2:32:29:e0:ab:fa:
                    29:01:17:d7:a0:37:4b:46:9a:5b:16:9e:11:4e:09:
                    7c:ff:fd:eb:98:c7:11:3d:32:97:85:10:8f:e5:3e:
                    9a:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:95:C1:54:FB:1F:5F:5B:1D:5B:D9:DC:37:AC:34:BF:43:2A:EF:A8
            X509v3 Authority Key Identifier:
                keyid:33:4D:E7:D2:EB:86:20:18:BB:95:74:9B:64:8D:CB:AF:50:D1:3D:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3623CAF/D13F9DB0F4F111E5BE8A634CF8AEA228/M03n0uuGIBi7lXSbZI3Lr1DRPag.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/M03n0uuGIBi7lXSbZI3Lr1DRPag.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3623CAF/D13F9DB0F4F111E5BE8A634CF8AEA228/27DC768CA2DB11F1B6223A13CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.242.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         80:2a:6f:32:77:82:0c:f0:6c:76:64:d5:d4:07:e0:e7:e8:39:
         43:a0:97:7b:14:3d:03:04:56:07:eb:91:94:af:27:6e:7d:66:
         82:9a:47:fb:2d:21:0b:c9:24:99:47:d2:14:59:7e:0d:69:1d:
         9e:0c:ad:4e:44:fb:5e:b3:4c:70:20:78:5c:53:3b:9c:25:c3:
         9b:b3:59:21:b7:5b:2f:39:31:34:22:a2:53:f6:b6:7d:7a:3f:
         4d:84:f6:55:51:4b:d7:a2:4c:f5:b9:46:7b:e7:91:ec:58:d7:
         a9:a9:71:ab:bf:b7:d1:bc:61:b6:4c:fd:d9:e4:24:74:a4:f7:
         0a:05:54:84:8c:d6:27:1d:e6:4b:d4:02:6c:b7:f4:bb:42:c1:
         85:28:b3:97:68:49:a0:4b:b7:de:75:e5:82:98:0e:21:dd:7f:
         cd:bb:88:14:e9:7c:60:64:b6:e3:d0:a6:c3:78:27:61:9d:a9:
         f0:f1:c3:e7:e8:21:43:2a:44:0b:09:b1:0a:bf:8a:91:f3:1e:
         4a:1d:9f:a5:f1:a4:94:e5:46:ea:06:c1:e8:80:76:7e:2a:87:
         83:f2:97:10:b4:5c:a9:d9:25:bd:1d:2a:3f:99:f3:9a:08:b3:
         f4:51:80:3a:9d:cf:10:1b:5d:a7:57:86:6d:bb:1c:0f:02:16:
         11:d6:2f:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----