Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/2A47C3AC965311F18D5555D7CE1D38B0.roa
File:                     2A47C3AC965311F18D5555D7CE1D38B0.roa (raw, json)
Hash identifier:          qjEV8QH6QAXL5LpzhD+gWImbfu5cMq7Xzhp/85av8GA=
Subject key identifier:   52:E1:B8:69:45:32:EB:0E:CA:05:DC:2E:FD:A3:4F:83:02:00:75:2A
Certificate issuer:       /CN=F366B0C9AF/serialNumber=A20E2067F0DB783DE3723E231517DC7E9FE5BAD3
Certificate serial:       05C1
Authority key identifier: A2:0E:20:67:F0:DB:78:3D:E3:72:3E:23:15:17:DC:7E:9F:E5:BA:D3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/og4gZ_DbeD3jcj4jFRfcfp_lutM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/2A47C3AC965311F18D5555D7CE1D38B0.roa
Signing time:             Wed 12 Aug 2026 13:38:57 +0000
ROA not before:           Wed 12 Aug 2026 13:38:52 +0000
ROA not after:            Thu 31 Mar 2033 13:38:52 +0000
asID:                     37182
IP address blocks:        41.93.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/og4gZ_DbeD3jcj4jFRfcfp_lutM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/og4gZ_DbeD3jcj4jFRfcfp_lutM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/og4gZ_DbeD3jcj4jFRfcfp_lutM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 03:17:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1473 (0x5c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366B0C9AF, serialNumber=A20E2067F0DB783DE3723E231517DC7E9FE5BAD3
        Validity
            Not Before: Aug 12 13:38:52 2026 GMT
            Not After : Mar 31 13:38:52 2033 GMT
        Subject: CN=6a7c7770-5d2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:a8:b3:2e:ef:bd:a4:9c:df:aa:3a:7c:e3:ec:
                    4a:66:e5:28:4d:53:a5:d8:36:e7:ab:69:e8:f5:25:
                    c3:40:df:42:09:ae:a3:05:dd:1d:35:c5:f9:0e:53:
                    bf:d1:07:9a:6b:e4:85:ce:ae:5b:a3:1c:5e:c4:5c:
                    c1:81:3f:65:1c:d2:71:a3:60:1b:36:d6:32:73:9e:
                    38:1b:23:77:19:c7:20:80:9d:45:14:2e:84:3d:d5:
                    60:78:d5:d5:66:07:3a:fd:6e:0b:e3:db:b7:c3:cb:
                    f4:3c:69:ac:b0:77:92:a1:97:a2:f3:c6:1c:c0:82:
                    ad:18:55:62:cd:4b:ab:97:16:dc:f3:75:6a:f6:49:
                    d4:78:ce:c8:d6:85:c7:a6:35:85:e6:e9:da:8a:70:
                    79:b6:a6:c8:f8:a5:0b:77:a5:d2:eb:29:00:93:f6:
                    a8:4b:8c:73:43:bb:1b:ac:56:3a:97:62:81:b2:c9:
                    77:17:bc:7b:55:71:3c:3d:a3:1e:f9:de:be:90:5e:
                    3b:d5:71:96:3b:80:a2:2d:89:51:be:fe:83:c5:53:
                    3e:0b:7f:bc:ce:39:ab:e2:ec:32:78:98:88:e7:07:
                    d9:0d:b0:80:6c:a5:fc:e2:34:24:94:35:7e:95:57:
                    d2:22:fe:be:79:aa:cf:6a:e1:58:3d:8d:b3:5e:fa:
                    71:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:E1:B8:69:45:32:EB:0E:CA:05:DC:2E:FD:A3:4F:83:02:00:75:2A
            X509v3 Authority Key Identifier:
                keyid:A2:0E:20:67:F0:DB:78:3D:E3:72:3E:23:15:17:DC:7E:9F:E5:BA:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/og4gZ_DbeD3jcj4jFRfcfp_lutM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/og4gZ_DbeD3jcj4jFRfcfp_lutM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/2A47C3AC965311F18D5555D7CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.93.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:f4:72:03:10:06:f0:70:7f:63:75:1d:92:44:2b:14:c0:41:
         1a:1f:4a:84:ab:77:70:cd:cb:c8:fc:0a:57:2d:89:4c:94:1e:
         28:40:b7:6c:68:6a:53:9f:f1:c6:4d:a2:9b:11:42:4f:6d:dc:
         54:9f:c8:75:35:16:df:5f:6a:9b:c8:d1:dd:33:b1:18:f8:98:
         ac:05:df:55:d1:7a:82:61:6a:6b:14:2e:8c:27:b8:63:8e:17:
         95:4b:7f:02:29:4e:8d:f4:7b:88:53:f8:06:ed:f9:59:47:d6:
         bd:39:bf:ca:f3:aa:36:1d:0b:ad:c1:b5:49:75:82:f0:b0:32:
         be:4c:9e:36:c1:63:1a:28:45:aa:bb:8a:b8:28:8d:f9:65:96:
         12:79:76:42:48:a3:64:9c:97:00:31:5f:26:ca:b8:5a:25:3d:
         8d:fb:f9:2d:9e:53:03:d6:dc:16:22:01:ef:c2:ff:4b:ab:ef:
         d0:8d:af:50:ee:84:aa:8d:87:79:1b:22:0e:75:47:3f:22:6b:
         e4:5c:f2:33:d1:d4:e5:9d:03:1e:8e:56:2e:8a:3c:7e:85:7e:
         58:e8:0b:cf:e3:7f:0f:05:c7:5f:f0:67:ae:fd:89:79:c2:1e:
         8a:80:ef:43:1b:0f:b8:fe:6a:25:e2:63:8c:98:99:e2:71:70:
         1b:61:a4:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----