Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/3130C2F4964911F1A2536719CF1D38B0.roa
File:                     3130C2F4964911F1A2536719CF1D38B0.roa (raw, json)
Hash identifier:          CKqRQ8VCsWfAtTEx+RFsh/l0NkveqUa6IZQlvQAby7E=
Subject key identifier:   2D:90:0E:F7:70:9D:94:9E:38:DD:36:53:5C:26:FD:A8:3C:48:9A:8C
Certificate issuer:       /CN=F366B0C9AF/serialNumber=A20E2067F0DB783DE3723E231517DC7E9FE5BAD3
Certificate serial:       0576
Authority key identifier: A2:0E:20:67:F0:DB:78:3D:E3:72:3E:23:15:17:DC:7E:9F:E5:BA:D3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/og4gZ_DbeD3jcj4jFRfcfp_lutM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/3130C2F4964911F1A2536719CF1D38B0.roa
Signing time:             Wed 12 Aug 2026 12:27:33 +0000
ROA not before:           Wed 12 Aug 2026 12:27:29 +0000
ROA not after:            Thu 31 Mar 2033 12:27:29 +0000
asID:                     37182
IP address blocks:        41.93.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/og4gZ_DbeD3jcj4jFRfcfp_lutM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/og4gZ_DbeD3jcj4jFRfcfp_lutM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/og4gZ_DbeD3jcj4jFRfcfp_lutM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 03:17:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1398 (0x576)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366B0C9AF, serialNumber=A20E2067F0DB783DE3723E231517DC7E9FE5BAD3
        Validity
            Not Before: Aug 12 12:27:29 2026 GMT
            Not After : Mar 31 12:27:29 2033 GMT
        Subject: CN=6a7c66b5-a326
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:fb:5e:8f:88:b9:4f:72:10:8a:69:3c:82:3d:
                    8c:2b:4e:3c:23:2f:3a:d0:bf:1f:16:d5:1d:09:59:
                    06:7b:89:b0:31:6a:d6:93:fd:de:32:4f:bf:e1:05:
                    7b:0e:ae:0f:14:94:08:2f:bb:99:8c:56:be:c2:18:
                    e8:6a:0a:96:cd:7b:5f:86:bb:ac:a4:93:58:b2:1e:
                    52:c9:dc:f2:a1:c4:0a:71:b6:92:df:ba:a1:84:7d:
                    55:d6:b7:91:4f:0a:dc:62:31:a2:a3:c7:32:7e:6a:
                    26:ff:de:bc:53:09:a0:c3:02:f3:03:6f:83:89:dd:
                    b3:31:d0:d4:3d:ba:ad:34:81:3f:f3:ac:85:97:d4:
                    56:59:55:78:07:fa:c5:72:0c:81:6a:f0:cc:8a:1b:
                    44:54:f2:a0:6b:7f:da:b6:f8:fa:b1:dc:fe:06:a4:
                    25:ec:72:82:2d:35:e7:ec:fc:2f:57:5b:8c:5e:e3:
                    f8:e6:3a:2d:d2:31:29:bd:e5:5b:c1:5f:5f:8d:b8:
                    d7:a5:04:1e:de:03:10:bb:09:32:e0:09:91:d3:e2:
                    ed:a8:df:b6:af:de:ad:a5:c0:b2:9e:ef:9d:32:aa:
                    72:00:d4:4a:0e:c5:60:c9:8f:cd:f6:0e:40:31:12:
                    ac:53:e5:30:8a:ff:d7:c8:32:a4:13:49:04:db:df:
                    9f:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:90:0E:F7:70:9D:94:9E:38:DD:36:53:5C:26:FD:A8:3C:48:9A:8C
            X509v3 Authority Key Identifier:
                keyid:A2:0E:20:67:F0:DB:78:3D:E3:72:3E:23:15:17:DC:7E:9F:E5:BA:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/og4gZ_DbeD3jcj4jFRfcfp_lutM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/og4gZ_DbeD3jcj4jFRfcfp_lutM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/3130C2F4964911F1A2536719CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.93.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:32:e3:c5:ca:f4:c0:e1:50:ba:14:ea:62:68:e7:83:35:a5:
         1d:cb:cc:4a:ee:10:24:ad:fa:21:81:bf:58:7e:6a:49:f2:29:
         c1:16:6d:fe:6c:13:5c:75:5b:6e:2f:2e:0c:a8:93:d6:4a:f6:
         63:12:03:b5:8d:cd:e2:ef:6c:25:fd:3c:fd:4e:00:4c:13:0e:
         39:a5:0f:06:31:6d:08:d0:7b:72:46:4d:e5:1a:01:d3:23:b9:
         a9:1a:d0:4f:55:3f:5b:86:22:4c:9b:1d:4a:5f:f0:fe:94:d3:
         30:b7:a6:0b:c7:e4:ea:e6:fc:d8:13:7c:32:c7:ae:ad:25:02:
         ad:2b:58:87:29:5d:ba:d1:c0:fa:68:79:96:98:28:00:9a:b1:
         90:73:ea:59:38:57:1b:51:09:39:bb:c9:94:09:e5:b1:e4:88:
         24:41:b5:dc:e2:3a:88:9b:a1:f8:d1:95:bf:23:74:21:14:fa:
         6e:d9:3b:51:ee:46:0b:3b:d9:48:f0:41:5e:cd:c2:c8:a9:5e:
         d6:2d:09:f2:71:84:6d:8a:18:18:14:4e:e9:bf:02:ce:3e:78:
         ca:6d:00:da:9d:30:7c:d0:ec:8c:8e:5b:ac:85:e0:79:91:33:
         d4:b8:05:b7:ea:08:27:a7:f8:ee:ff:f3:66:84:05:b2:8f:39:
         ea:b8:ec:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----