Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/160D25E49D3D11F1A2DE42CCCE1D38B0.roa
File:                     160D25E49D3D11F1A2DE42CCCE1D38B0.roa (raw, json)
Hash identifier:          stSWux1sCKRO/Qm2aCQgpr6JaJJ3yxzStFBkur8GQpQ=
Subject key identifier:   BA:B8:AC:05:87:60:2E:BB:3F:BA:BD:E4:44:95:13:A7:10:80:18:83
Certificate issuer:       /CN=F364712FAF/serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
Certificate serial:       0843
Authority key identifier: 3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/160D25E49D3D11F1A2DE42CCCE1D38B0.roa
Signing time:             Fri 21 Aug 2026 08:48:32 +0000
ROA not before:           Fri 21 Aug 2026 08:48:27 +0000
ROA not after:            Sun 31 Aug 2036 08:48:27 +0000
asID:                     29975
IP address blocks:        41.5.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 16 Oct 2026 02:05:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2115 (0x843)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364712FAF, serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
        Validity
            Not Before: Aug 21 08:48:27 2026 GMT
            Not After : Aug 31 08:48:27 2036 GMT
        Subject: CN=6a8810e0-953d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:0f:4e:00:28:04:9d:0b:b1:11:38:6c:4d:7a:
                    cd:c5:ff:ff:d4:8e:78:b6:91:68:32:48:fb:58:d6:
                    11:3d:81:31:62:ad:cf:97:77:42:f3:9b:43:8f:0a:
                    74:41:54:94:80:8f:ee:81:75:4a:87:4f:7a:35:a0:
                    42:3e:9b:c4:f8:c1:87:5a:47:95:08:c3:a7:a9:c0:
                    9b:d8:fd:2a:9c:b7:0e:c2:e4:2b:5e:03:bf:c4:fb:
                    22:cf:49:fc:79:aa:74:03:72:88:c7:d6:9b:03:b4:
                    46:2d:d2:9d:85:14:d0:71:67:04:ab:7c:85:d5:22:
                    ce:3d:65:0e:82:d0:ee:72:29:97:ad:94:d5:6c:93:
                    b5:12:f6:6c:60:6f:43:45:e4:60:53:07:6a:44:76:
                    c8:a4:77:4e:43:4f:b1:3c:db:b0:79:2b:5a:50:e1:
                    21:9d:cb:67:d9:49:19:69:e4:e6:3b:a8:d0:79:40:
                    aa:e8:9a:51:76:41:11:0e:5c:48:75:a6:18:9d:fd:
                    4f:3a:a7:89:82:38:52:00:f6:b9:c1:1f:33:0f:7d:
                    42:cc:aa:6b:5b:8d:6d:25:e2:e8:32:ac:6d:65:ce:
                    ea:11:31:59:c3:e8:63:84:73:17:a1:a4:71:d8:16:
                    90:6e:3e:6b:b8:ba:be:97:d5:77:e3:30:70:06:37:
                    de:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:B8:AC:05:87:60:2E:BB:3F:BA:BD:E4:44:95:13:A7:10:80:18:83
            X509v3 Authority Key Identifier:
                keyid:3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/160D25E49D3D11F1A2DE42CCCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.5.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         3a:a2:92:dc:87:a0:48:4c:14:f4:1d:ae:c5:04:a0:aa:6e:8c:
         41:c4:93:66:5a:82:7d:3c:19:ac:29:1f:f8:9f:07:18:89:09:
         7d:c8:47:80:86:f7:64:ef:2b:71:83:6d:87:6a:88:a6:5e:d6:
         fa:ae:de:ee:55:0d:c5:bc:65:16:1b:be:9a:9c:ad:54:4a:8a:
         75:e5:2d:bd:35:aa:6a:7d:62:a7:4a:ef:a2:29:1a:8e:47:21:
         bb:26:e7:6a:63:21:51:b1:a5:2a:1f:2a:d0:ad:07:a1:9b:b5:
         f9:92:bd:a5:26:bb:e2:21:17:59:da:49:06:43:c1:4e:d4:f6:
         b6:95:61:ff:02:78:f1:ec:0a:ad:5e:70:f2:21:00:1e:98:e5:
         cf:a2:52:eb:51:31:42:d4:1d:a2:46:5f:2a:f7:96:5b:29:01:
         ac:46:7b:c0:c1:2e:15:4e:a3:aa:b5:fe:37:3f:be:c1:50:12:
         35:65:21:1d:cc:57:dd:44:89:72:a4:62:60:de:f1:43:b2:85:
         81:6c:16:48:8d:cc:60:2d:1f:21:33:5f:a1:06:33:3c:b1:fc:
         1f:f3:5a:c2:e4:d1:2e:0a:c6:a2:e8:10:aa:dd:a8:1a:a6:3f:
         19:2d:98:68:77:28:f3:ad:7c:f3:96:ef:0e:4d:d4:94:c0:6b:
         b9:a5:79:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----