Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/47728E20965411F1BBD9CDDDCE1D38B0.roa
File:                     47728E20965411F1BBD9CDDDCE1D38B0.roa (raw, json)
Hash identifier:          Qeo3H1HGcevLZTN4Nuv51fd5pxKh2Gq/5XICKwoKtgw=
Subject key identifier:   65:3A:53:A9:E6:41:70:93:CE:85:EA:CB:A5:D1:D5:50:BF:DD:2D:D7
Certificate issuer:       /CN=F366B0C9AF/serialNumber=A20E2067F0DB783DE3723E231517DC7E9FE5BAD3
Certificate serial:       05CA
Authority key identifier: A2:0E:20:67:F0:DB:78:3D:E3:72:3E:23:15:17:DC:7E:9F:E5:BA:D3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/og4gZ_DbeD3jcj4jFRfcfp_lutM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/47728E20965411F1BBD9CDDDCE1D38B0.roa
Signing time:             Wed 12 Aug 2026 13:46:55 +0000
ROA not before:           Wed 12 Aug 2026 13:46:51 +0000
ROA not after:            Thu 31 Mar 2033 13:46:51 +0000
asID:                     37182
IP address blocks:        41.93.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/og4gZ_DbeD3jcj4jFRfcfp_lutM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/og4gZ_DbeD3jcj4jFRfcfp_lutM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/og4gZ_DbeD3jcj4jFRfcfp_lutM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 03:17:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1482 (0x5ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366B0C9AF, serialNumber=A20E2067F0DB783DE3723E231517DC7E9FE5BAD3
        Validity
            Not Before: Aug 12 13:46:51 2026 GMT
            Not After : Mar 31 13:46:51 2033 GMT
        Subject: CN=6a7c794f-7631
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:7b:de:73:03:cf:88:c8:18:cc:f2:a3:15:3b:
                    7a:1a:79:25:bb:69:56:bd:17:99:e9:08:62:15:10:
                    49:50:9a:31:a7:42:34:23:6a:02:8f:4f:5d:81:0d:
                    d3:27:16:1a:f1:22:36:9d:fd:46:a4:a8:80:f3:60:
                    24:90:f8:3b:b7:74:39:b9:06:36:b7:cf:6a:cf:c6:
                    f8:04:a4:df:79:1c:a1:6d:19:65:ec:70:61:ac:60:
                    90:99:9f:cf:a7:a9:34:31:d8:c6:34:45:84:c3:16:
                    01:39:3b:f1:e3:49:32:2c:3f:5c:c4:45:4a:c5:f3:
                    0e:86:1f:32:35:5a:80:5d:a9:45:62:8a:e4:8f:9a:
                    a5:cb:75:15:5c:15:3c:7e:11:fb:ee:12:3b:98:1a:
                    71:e6:3b:a0:62:43:0b:a8:65:5f:a8:4e:1f:94:b8:
                    f5:43:ec:ac:8d:35:2a:78:26:fc:6d:0a:7c:1c:21:
                    4a:66:94:ba:58:3c:cf:6c:fe:10:8b:38:72:b9:90:
                    9a:a0:90:7d:df:62:d5:53:98:2e:0b:5b:52:4f:1c:
                    e3:fc:d8:44:e7:55:c8:91:fa:7a:da:51:b3:8b:6a:
                    da:a1:2a:3c:ca:ee:65:76:4a:52:12:14:68:70:30:
                    f6:9e:0f:95:d6:fc:8e:af:cd:65:d6:4b:b4:92:2d:
                    1e:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:3A:53:A9:E6:41:70:93:CE:85:EA:CB:A5:D1:D5:50:BF:DD:2D:D7
            X509v3 Authority Key Identifier:
                keyid:A2:0E:20:67:F0:DB:78:3D:E3:72:3E:23:15:17:DC:7E:9F:E5:BA:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/og4gZ_DbeD3jcj4jFRfcfp_lutM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/og4gZ_DbeD3jcj4jFRfcfp_lutM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/47728E20965411F1BBD9CDDDCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.93.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:f1:ef:72:7a:ad:3c:ce:f3:7f:88:90:d7:11:c9:85:ac:a8:
         17:fc:5a:f7:2b:59:5b:a6:bf:16:7b:54:0e:41:cd:dc:6f:c6:
         04:83:36:56:c4:c1:71:58:1f:32:56:42:4c:6e:0d:d4:52:d4:
         a6:2f:e2:0f:32:c4:f1:6c:b3:52:94:7a:3e:d0:0b:00:88:51:
         f7:18:31:a8:cf:7c:29:eb:59:4e:5a:75:f2:5a:70:83:8f:08:
         42:50:62:86:3f:10:52:59:56:25:ce:24:72:e1:3a:03:7d:6f:
         6b:27:81:54:da:a9:6e:f0:ad:6a:a7:e7:32:6d:5d:73:82:63:
         44:26:f5:a3:b1:17:30:72:b3:66:a3:37:27:a3:33:79:7f:36:
         21:3a:c8:0a:f0:31:d5:9a:ef:a4:6e:ac:4e:16:f3:08:d9:32:
         87:c8:da:87:58:23:5f:e6:f9:d7:4b:58:68:60:3f:ca:f8:ea:
         34:2d:da:80:23:5a:3d:e7:07:87:86:ea:d8:da:1a:7a:16:35:
         ad:b8:35:b5:56:ff:3b:9e:44:8b:ec:a3:80:54:53:e0:50:01:
         05:ae:7e:6b:21:67:22:94:2f:e8:2f:29:e6:03:e4:b8:0a:7c:
         26:ad:f0:f6:51:49:5a:31:b3:71:9e:6c:2c:ce:85:e4:c4:65:
         98:fd:16:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----