Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/0D690D88965111F1ADA822C9CE1D38B0.roa
File:                     0D690D88965111F1ADA822C9CE1D38B0.roa (raw, json)
Hash identifier:          9hnmT+6YWfz8wjXRc165uqZHOTs37SFKJzvLVlmoeF4=
Subject key identifier:   D7:95:DB:17:85:D6:66:1A:FF:A3:82:50:0D:95:32:0C:33:D4:5B:D6
Certificate issuer:       /CN=F366B0C9AF/serialNumber=A20E2067F0DB783DE3723E231517DC7E9FE5BAD3
Certificate serial:       05B2
Authority key identifier: A2:0E:20:67:F0:DB:78:3D:E3:72:3E:23:15:17:DC:7E:9F:E5:BA:D3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/og4gZ_DbeD3jcj4jFRfcfp_lutM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/0D690D88965111F1ADA822C9CE1D38B0.roa
Signing time:             Wed 12 Aug 2026 13:23:49 +0000
ROA not before:           Wed 12 Aug 2026 13:23:45 +0000
ROA not after:            Thu 31 Mar 2033 13:23:45 +0000
asID:                     37182
IP address blocks:        41.93.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/og4gZ_DbeD3jcj4jFRfcfp_lutM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/og4gZ_DbeD3jcj4jFRfcfp_lutM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/og4gZ_DbeD3jcj4jFRfcfp_lutM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 03:17:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1458 (0x5b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366B0C9AF, serialNumber=A20E2067F0DB783DE3723E231517DC7E9FE5BAD3
        Validity
            Not Before: Aug 12 13:23:45 2026 GMT
            Not After : Mar 31 13:23:45 2033 GMT
        Subject: CN=6a7c73e5-2da7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:f1:c9:d5:44:f5:3e:8b:37:a5:7d:2a:cc:cd:
                    4a:3d:f7:fc:02:87:ef:68:e3:5a:5a:07:e2:57:d8:
                    b5:d9:7c:96:ab:ca:1c:80:2f:3e:f5:d4:ee:19:d1:
                    79:c8:7c:99:8d:9e:8b:91:85:ae:00:10:55:55:fc:
                    79:a1:fa:64:fc:ce:04:ec:53:c8:01:ad:90:64:1a:
                    0f:25:7c:c3:1d:14:d0:8c:36:b3:a3:ae:56:d4:f6:
                    d3:27:44:bf:bd:bf:1b:32:2d:2e:0b:ba:60:02:db:
                    a1:b2:0c:5b:49:44:9c:ab:ab:d9:3c:45:a7:09:54:
                    4c:7f:f7:be:22:78:e6:bc:6e:cf:fc:27:b5:06:19:
                    14:23:d5:c7:3e:39:67:eb:1b:40:d4:7e:d3:2b:1b:
                    81:aa:06:33:28:ac:85:03:42:64:90:75:a8:37:66:
                    af:99:71:3c:58:35:e0:fe:5c:19:da:42:a2:6f:dd:
                    45:44:76:43:5a:6b:45:a8:f9:fb:a0:ff:85:92:cd:
                    d9:6a:75:01:26:d2:7b:9b:25:56:ea:b3:21:c9:f7:
                    06:3e:16:06:78:4b:28:a2:01:ed:bf:6b:66:48:b6:
                    1f:eb:36:33:1f:b1:63:6b:ea:72:f7:9e:a2:e4:56:
                    7a:d7:ff:8a:86:95:0e:99:0e:64:a5:45:48:f0:3d:
                    68:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:95:DB:17:85:D6:66:1A:FF:A3:82:50:0D:95:32:0C:33:D4:5B:D6
            X509v3 Authority Key Identifier:
                keyid:A2:0E:20:67:F0:DB:78:3D:E3:72:3E:23:15:17:DC:7E:9F:E5:BA:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/og4gZ_DbeD3jcj4jFRfcfp_lutM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/og4gZ_DbeD3jcj4jFRfcfp_lutM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/0D690D88965111F1ADA822C9CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.93.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:05:54:c3:80:3a:a8:9c:33:49:f2:f8:87:dd:2f:58:ab:4f:
         89:62:4e:5d:97:c9:ca:43:e2:b3:4a:4a:b5:0e:c2:44:a9:ae:
         01:fa:8a:c7:60:c6:d3:4c:6d:3d:24:70:ce:5e:5a:de:5f:d5:
         1f:5c:ee:79:12:83:7a:2f:6f:85:bd:5a:9e:8c:97:82:3a:bc:
         ac:79:da:95:b3:91:f0:69:46:cc:57:2a:eb:9d:f9:66:66:7d:
         27:e9:56:ea:96:53:6c:17:b6:63:ec:f7:9f:f4:4d:3a:ef:59:
         6a:72:85:29:23:80:28:96:03:4a:63:45:a1:58:50:af:6a:5c:
         47:bc:f1:d2:65:70:ef:72:67:6a:70:79:d3:b1:19:40:5e:cd:
         01:7a:25:f2:76:1f:f4:41:bd:2c:77:18:36:74:cd:ba:62:ac:
         94:5d:19:9f:f9:59:37:97:13:26:67:12:6d:f5:82:4d:ba:ec:
         e3:1f:bf:cd:26:11:0b:a9:3e:6e:a8:4e:41:40:13:6d:af:f2:
         47:d6:80:fd:89:be:fa:24:14:2d:05:20:8d:48:a7:36:35:cb:
         aa:33:31:7b:40:09:37:2a:99:12:02:b4:df:47:ff:08:52:c5:
         b3:4a:92:51:09:0e:a4:c1:73:1a:b8:65:ad:eb:8e:73:9e:33:
         25:73:08:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----