Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/506DD63C965511F1968EF6E3CE1D38B0.roa
File:                     506DD63C965511F1968EF6E3CE1D38B0.roa (raw, json)
Hash identifier:          n+XL1c/UPDisymY/PcMZ8UKIJ0mv9YkHTerYJqqWEnM=
Subject key identifier:   22:2E:46:5F:9B:FA:58:09:E4:69:75:B0:2A:64:D6:52:DD:89:CD:E5
Certificate issuer:       /CN=F366B0C9AF/serialNumber=A20E2067F0DB783DE3723E231517DC7E9FE5BAD3
Certificate serial:       05D3
Authority key identifier: A2:0E:20:67:F0:DB:78:3D:E3:72:3E:23:15:17:DC:7E:9F:E5:BA:D3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/og4gZ_DbeD3jcj4jFRfcfp_lutM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/506DD63C965511F1968EF6E3CE1D38B0.roa
Signing time:             Wed 12 Aug 2026 13:54:19 +0000
ROA not before:           Wed 12 Aug 2026 13:54:15 +0000
ROA not after:            Thu 24 Mar 2033 13:54:15 +0000
asID:                     37182
IP address blocks:        41.93.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/og4gZ_DbeD3jcj4jFRfcfp_lutM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/og4gZ_DbeD3jcj4jFRfcfp_lutM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/og4gZ_DbeD3jcj4jFRfcfp_lutM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Sep 2026 00:08:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1491 (0x5d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366B0C9AF, serialNumber=A20E2067F0DB783DE3723E231517DC7E9FE5BAD3
        Validity
            Not Before: Aug 12 13:54:15 2026 GMT
            Not After : Mar 24 13:54:15 2033 GMT
        Subject: CN=6a7c7b0b-d78e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:5b:25:87:40:19:a5:5b:78:6e:1e:9a:76:47:
                    2a:bd:fa:b2:8d:da:28:7f:fd:31:52:7d:4c:0f:df:
                    da:3c:f1:15:6e:e1:9c:cd:6d:e9:32:8b:9a:9b:e3:
                    13:27:74:2a:2d:09:ee:44:a2:32:56:a2:df:e1:f1:
                    0a:c9:86:89:7d:58:d4:ff:38:f1:ef:5b:e4:60:ea:
                    30:dc:f6:27:5a:a5:d5:7c:04:3d:d2:29:71:7b:fb:
                    06:43:ad:a2:31:c4:fa:d1:2b:36:1d:b9:17:8a:9e:
                    3d:35:77:83:30:e3:9d:b0:70:c0:1b:5d:b6:d3:dc:
                    82:76:9b:13:61:8a:a9:b4:e4:b3:0f:cd:c9:cb:5b:
                    21:8a:f0:9b:00:6b:80:6f:4d:cf:24:41:e9:9a:da:
                    77:d7:95:14:52:6d:75:3d:85:ca:19:70:53:e1:94:
                    68:f5:64:88:81:d2:39:0b:46:69:4d:97:6d:d1:56:
                    da:26:d0:16:48:19:8b:e4:05:f0:92:ef:d8:c1:e7:
                    93:8f:fd:40:7c:5d:31:94:e0:a8:8e:73:4d:26:94:
                    53:c4:40:ae:7d:e9:db:85:48:30:ec:c3:a8:18:f3:
                    7c:4e:a7:49:6c:15:24:aa:f3:ab:4c:cc:23:e0:65:
                    22:80:f6:83:0d:f6:f9:48:7c:76:83:54:5b:35:a3:
                    90:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:2E:46:5F:9B:FA:58:09:E4:69:75:B0:2A:64:D6:52:DD:89:CD:E5
            X509v3 Authority Key Identifier:
                keyid:A2:0E:20:67:F0:DB:78:3D:E3:72:3E:23:15:17:DC:7E:9F:E5:BA:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/og4gZ_DbeD3jcj4jFRfcfp_lutM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/og4gZ_DbeD3jcj4jFRfcfp_lutM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/506DD63C965511F1968EF6E3CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.93.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:44:2f:ac:51:9b:88:f0:38:e5:55:52:7b:6b:e2:c8:e7:16:
         26:5c:c3:10:38:a7:3e:91:ef:d3:27:89:55:d0:2d:07:cd:c1:
         17:7a:c1:a1:4f:e8:84:4a:da:6e:43:88:30:e5:d9:f3:11:17:
         3b:67:41:cf:b5:8f:25:d7:6c:cd:47:b5:07:d5:40:83:0d:55:
         5f:15:28:4f:de:2b:8e:b5:e1:d7:96:7c:c4:4b:c4:96:5c:b9:
         01:7a:db:45:4e:59:7b:b0:f1:b4:e7:0e:96:63:fa:04:96:7d:
         7e:3a:1b:7f:1a:41:af:8c:5e:d9:29:11:69:95:71:83:97:a0:
         3c:3f:5c:3c:cc:77:82:6f:96:58:f4:03:55:10:13:cb:23:7a:
         4c:0c:f0:e1:47:59:97:96:71:69:b0:0a:be:19:c0:93:89:48:
         a1:25:ea:27:93:67:c8:e1:3d:30:82:a8:df:62:f3:c5:8a:9c:
         cb:5f:d0:df:36:61:b2:ed:05:df:f6:0d:51:73:16:ec:dd:4b:
         b3:ab:8d:3c:e5:44:89:75:08:ca:22:58:d1:a9:c1:fb:46:b9:
         15:3b:c8:79:53:a5:6f:53:94:0d:c6:65:28:70:21:c4:89:3b:
         d2:d3:9b:cd:69:b9:b5:e7:83:b7:60:be:78:65:57:b5:37:11:
         90:aa:8a:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----