Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/0003EB00965511F1A89214E2CE1D38B0.roa
File:                     0003EB00965511F1A89214E2CE1D38B0.roa (raw, json)
Hash identifier:          bJ/AwVbXvH5oI9Wq9Bx4pjeoWSjMX2y9ocj2t2wOSlQ=
Subject key identifier:   B2:FE:DF:ED:01:D4:E6:25:D1:46:66:DB:B3:AE:12:0F:0C:9E:79:08
Certificate issuer:       /CN=F366B0C9AF/serialNumber=A20E2067F0DB783DE3723E231517DC7E9FE5BAD3
Certificate serial:       05D0
Authority key identifier: A2:0E:20:67:F0:DB:78:3D:E3:72:3E:23:15:17:DC:7E:9F:E5:BA:D3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/og4gZ_DbeD3jcj4jFRfcfp_lutM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/0003EB00965511F1A89214E2CE1D38B0.roa
Signing time:             Wed 12 Aug 2026 13:52:04 +0000
ROA not before:           Wed 12 Aug 2026 13:52:00 +0000
ROA not after:            Sat 30 Apr 2033 13:52:00 +0000
asID:                     37182
IP address blocks:        41.93.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/og4gZ_DbeD3jcj4jFRfcfp_lutM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/og4gZ_DbeD3jcj4jFRfcfp_lutM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/og4gZ_DbeD3jcj4jFRfcfp_lutM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 03:17:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1488 (0x5d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366B0C9AF, serialNumber=A20E2067F0DB783DE3723E231517DC7E9FE5BAD3
        Validity
            Not Before: Aug 12 13:52:00 2026 GMT
            Not After : Apr 30 13:52:00 2033 GMT
        Subject: CN=6a7c7a84-10f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:03:36:5d:c6:50:18:da:c6:0c:4b:82:c4:88:
                    9f:97:e0:60:3f:96:43:cd:7f:47:a4:55:c4:0d:44:
                    72:07:4a:17:de:c6:99:c1:fa:ad:4a:03:32:83:8f:
                    37:12:ae:93:a2:a4:fe:6e:33:97:a6:39:88:ac:33:
                    f9:44:0e:9c:ec:96:1a:52:c2:99:91:8b:7c:a2:0f:
                    eb:b5:6d:8b:1e:d8:44:f1:a1:eb:de:45:c8:38:40:
                    cf:81:89:86:52:5d:59:96:5e:b4:68:2c:da:f2:3b:
                    f9:fb:2f:a9:84:76:09:31:c1:96:33:ce:1a:f9:60:
                    47:fb:91:43:a1:f4:30:13:f5:26:29:a5:42:4c:b4:
                    ac:02:14:1b:d6:4a:73:62:3a:11:85:fd:78:f4:1c:
                    05:ab:00:c5:9e:ee:a2:83:cc:71:77:24:e3:12:f2:
                    0d:1b:1d:64:cf:c3:78:00:69:6a:58:1a:ef:be:5a:
                    b7:bf:27:bf:bd:2a:e4:76:4e:c8:80:4f:ad:3a:62:
                    ab:84:83:db:7b:e0:c9:af:84:de:08:38:1f:cb:61:
                    7e:d9:89:64:52:f8:f0:01:7a:84:6b:76:d0:4d:2e:
                    36:ec:95:57:d4:3e:4c:ea:df:ae:0f:2d:88:05:4f:
                    c3:80:1b:8e:04:75:df:9f:d7:a7:f4:cf:6c:c9:07:
                    d6:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:FE:DF:ED:01:D4:E6:25:D1:46:66:DB:B3:AE:12:0F:0C:9E:79:08
            X509v3 Authority Key Identifier:
                keyid:A2:0E:20:67:F0:DB:78:3D:E3:72:3E:23:15:17:DC:7E:9F:E5:BA:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/og4gZ_DbeD3jcj4jFRfcfp_lutM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/og4gZ_DbeD3jcj4jFRfcfp_lutM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/0003EB00965511F1A89214E2CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.93.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:bb:3f:7b:19:2d:3d:c0:14:87:f3:d0:c9:32:e8:fd:49:a7:
         9e:7c:d8:d1:5a:65:34:c7:c6:41:e5:ce:8f:5c:c9:aa:20:c8:
         f9:b5:98:9d:bb:e7:99:8d:dc:00:67:d9:6b:a4:f2:ee:6a:48:
         dd:62:a9:57:2c:43:ad:1c:d6:80:59:1e:fc:b3:49:1d:ae:51:
         a9:f1:8d:ce:1b:3f:7a:a1:d8:2b:08:5a:42:97:30:9c:ec:05:
         d8:ca:e2:9b:eb:94:3e:b8:96:86:4b:a6:3c:3b:23:eb:c3:69:
         43:b5:0d:ff:16:05:bf:ac:92:08:fb:57:0b:95:98:50:9b:99:
         48:0e:d4:c5:7d:10:b4:88:a6:d3:f1:43:9c:f1:d2:2f:08:48:
         b7:8a:7a:aa:9f:e9:58:43:ec:30:b4:cb:30:8b:08:d0:79:5b:
         7d:89:60:c1:18:9f:33:5f:63:61:31:be:dc:55:f5:69:de:89:
         01:0f:16:d6:e4:f9:ed:87:87:ff:7a:0f:aa:7b:85:24:7c:4a:
         0b:8c:17:41:c9:19:29:2c:8e:41:2c:bb:f0:34:ad:99:59:34:
         ff:51:b4:aa:2d:9a:f3:5c:cf:cc:db:da:41:1e:0b:94:6e:20:
         0b:fd:24:4d:58:b2:cf:cd:80:99:3d:20:4b:b3:70:7c:f0:cf:
         c0:31:94:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----