Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F364386B/58D5B756EE0511EC98EDA389F1222468/7338398EA39111F1925398E7CE1D38B0.roa
File:                     7338398EA39111F1925398E7CE1D38B0.roa (raw, json)
Hash identifier:          KklqFodPk024WmEeD9hmlTQAo902LvAfcUVbvASz7Uw=
Subject key identifier:   66:ED:14:1D:3B:2D:98:CA:5B:A5:1A:96:05:2A:E3:7E:87:92:9F:54
Certificate issuer:       /CN=F364386BAF/serialNumber=211E5B988632F53D4CC1220CE2930FED82D04C9C
Certificate serial:       0645
Authority key identifier: 21:1E:5B:98:86:32:F5:3D:4C:C1:22:0C:E2:93:0F:ED:82:D0:4C:9C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/IR5bmIYy9T1MwSIM4pMP7YLQTJw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364386B/58D5B756EE0511EC98EDA389F1222468/7338398EA39111F1925398E7CE1D38B0.roa
Signing time:             Sat 29 Aug 2026 10:07:33 +0000
ROA not before:           Sat 29 Aug 2026 10:07:29 +0000
ROA not after:            Fri 31 Aug 2046 10:07:29 +0000
asID:                     36930
IP address blocks:        2c0f:fdc0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364386B/58D5B756EE0511EC98EDA389F1222468/IR5bmIYy9T1MwSIM4pMP7YLQTJw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364386B/58D5B756EE0511EC98EDA389F1222468/IR5bmIYy9T1MwSIM4pMP7YLQTJw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/IR5bmIYy9T1MwSIM4pMP7YLQTJw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1605 (0x645)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364386BAF, serialNumber=211E5B988632F53D4CC1220CE2930FED82D04C9C
        Validity
            Not Before: Aug 29 10:07:29 2026 GMT
            Not After : Aug 31 10:07:29 2046 GMT
        Subject: CN=6a92af65-ff8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ae:4d:88:22:0f:0e:5a:3b:ac:0c:b6:26:fd:
                    81:9d:53:f3:d8:01:90:23:e2:70:c0:35:bf:8a:89:
                    42:1b:d3:c9:88:e8:52:15:e8:dd:8a:35:63:bc:0e:
                    8e:c0:86:f0:c5:ce:c3:7e:a9:e5:91:92:d7:86:88:
                    bf:a2:da:b8:f5:4f:ad:51:82:66:f5:8b:3c:a0:ef:
                    3e:9e:f7:ff:d5:1e:1b:61:95:d4:38:c6:fe:40:c6:
                    39:be:8c:90:3b:d5:26:3b:88:ac:0a:a6:b7:3e:d1:
                    e5:e5:6b:9d:a3:e3:38:8d:61:56:b1:82:43:6c:dd:
                    a9:c1:cd:14:b2:9c:55:af:12:89:4b:ba:c6:e5:4c:
                    00:51:30:e8:24:e9:b1:fb:c0:76:a0:f4:29:5c:40:
                    0b:7a:65:36:e6:37:65:a2:3f:85:27:7a:cf:63:0a:
                    c5:2a:7e:61:a5:ec:af:cd:b5:04:60:6c:51:65:37:
                    8a:c2:0b:df:e6:86:6a:d1:74:14:8b:af:7c:a4:1c:
                    dd:da:fb:6c:26:49:1b:c9:73:28:7a:06:87:d0:1f:
                    e3:db:4f:0c:e7:a1:3d:d8:bc:b7:50:ab:64:fd:b0:
                    47:62:b0:26:02:16:0f:52:cc:f1:1c:98:64:aa:32:
                    ca:5b:79:e3:50:4a:d6:81:58:12:26:7a:ab:09:aa:
                    5c:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:ED:14:1D:3B:2D:98:CA:5B:A5:1A:96:05:2A:E3:7E:87:92:9F:54
            X509v3 Authority Key Identifier:
                keyid:21:1E:5B:98:86:32:F5:3D:4C:C1:22:0C:E2:93:0F:ED:82:D0:4C:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364386B/58D5B756EE0511EC98EDA389F1222468/IR5bmIYy9T1MwSIM4pMP7YLQTJw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/IR5bmIYy9T1MwSIM4pMP7YLQTJw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364386B/58D5B756EE0511EC98EDA389F1222468/7338398EA39111F1925398E7CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:fdc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         92:ae:f2:f9:ab:fe:39:6d:16:0e:f8:be:a3:3e:54:6c:ab:25:
         7a:4f:9b:d5:51:83:70:74:6f:c8:e5:cb:76:47:1b:31:f7:eb:
         63:b2:2a:88:ee:85:0a:91:8a:69:44:de:4b:fe:13:84:3e:56:
         2b:87:8a:97:74:36:bd:60:00:e7:6e:7a:f3:11:b0:8e:f2:0f:
         86:40:e4:2d:6f:ff:f1:69:3d:d0:4f:7d:cb:37:86:56:87:bd:
         46:74:59:2e:43:f9:7c:ee:41:54:74:08:da:01:59:0d:59:56:
         5e:bc:a4:5b:5b:75:ae:03:80:80:ce:fc:40:94:67:30:9f:e9:
         3e:4f:ea:0a:fb:2f:cb:14:3e:50:1e:c1:d6:f7:97:a7:7c:86:
         5a:41:c9:a6:ef:fa:2c:99:58:58:5f:5c:e5:6f:4b:80:67:6d:
         e9:3f:af:f5:b3:cf:e4:76:9d:17:84:8a:62:40:96:61:3d:16:
         f7:c4:71:a4:2d:c9:bf:a3:1f:92:a6:5b:53:65:52:93:0c:4f:
         4f:f4:4f:90:61:9b:c4:b4:7e:c6:1e:48:6f:32:41:76:be:1f:
         4a:5b:d9:54:ec:7c:2d:f1:bd:27:61:87:9a:24:f1:48:17:50:
         e1:17:7b:17:db:4a:c5:f1:f3:4e:48:cb:f1:e3:39:fd:7a:96:
         bc:36:c0:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----