Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/66E964AC964711F195C4B810CF1D38B0.roa
File:                     66E964AC964711F195C4B810CF1D38B0.roa (raw, json)
Hash identifier:          ILS3iLDN82STJQc2xF3bz3uYstdUmIRt5SQtcGnOkDE=
Subject key identifier:   91:31:D1:C0:C8:5B:07:4A:E6:AB:85:F8:C7:4E:31:5C:06:9E:AB:2F
Certificate issuer:       /CN=F366B0C9AF/serialNumber=A20E2067F0DB783DE3723E231517DC7E9FE5BAD3
Certificate serial:       056A
Authority key identifier: A2:0E:20:67:F0:DB:78:3D:E3:72:3E:23:15:17:DC:7E:9F:E5:BA:D3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/og4gZ_DbeD3jcj4jFRfcfp_lutM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/66E964AC964711F195C4B810CF1D38B0.roa
Signing time:             Wed 12 Aug 2026 12:14:44 +0000
ROA not before:           Wed 12 Aug 2026 12:14:40 +0000
ROA not after:            Sat 31 Dec 2033 12:14:40 +0000
asID:                     37182
IP address blocks:        41.93.32.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/og4gZ_DbeD3jcj4jFRfcfp_lutM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/og4gZ_DbeD3jcj4jFRfcfp_lutM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/og4gZ_DbeD3jcj4jFRfcfp_lutM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 03:17:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1386 (0x56a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366B0C9AF, serialNumber=A20E2067F0DB783DE3723E231517DC7E9FE5BAD3
        Validity
            Not Before: Aug 12 12:14:40 2026 GMT
            Not After : Dec 31 12:14:40 2033 GMT
        Subject: CN=6a7c63b4-da6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:22:2d:b6:e2:0d:fd:82:8a:cc:47:6f:5b:34:
                    bb:bf:bd:22:fb:ec:51:b0:62:25:0d:85:39:fe:73:
                    42:3f:73:7b:5c:09:14:d3:32:98:c1:73:f9:f4:96:
                    8a:eb:85:7f:12:e4:e7:57:0c:a6:6a:7b:30:ce:f9:
                    8e:a8:44:6c:33:a7:3f:53:b7:f8:d6:2c:c0:0c:88:
                    68:19:c1:6e:d3:e7:0e:9f:28:98:c7:69:ce:0d:ab:
                    c3:21:4f:ff:61:56:6b:b2:0a:fc:f2:cc:35:2f:26:
                    21:87:c1:96:2e:8f:e2:d0:dd:e7:84:a0:c8:b5:2c:
                    60:e4:8f:d0:87:db:56:3e:7c:61:3b:1a:1b:86:6f:
                    1b:82:9e:a2:14:df:ca:d8:87:77:09:72:0c:a6:0b:
                    6f:9f:0f:4d:ac:d9:3f:5d:c2:bb:9b:7d:06:fe:37:
                    35:e1:55:fc:15:f3:a5:2e:b6:e2:55:f2:26:47:e8:
                    bd:db:c0:4d:3c:32:e3:f4:f4:3c:0a:37:18:09:4e:
                    55:6d:0c:ef:44:e3:e4:75:7c:79:b0:d8:6e:07:3d:
                    aa:91:98:75:e9:6d:47:23:53:93:e6:2d:1c:13:ea:
                    40:11:19:a7:dd:f8:19:6c:94:00:44:1b:62:ee:e6:
                    9c:19:37:23:67:6a:7f:cd:ac:3c:49:2b:73:5b:dc:
                    04:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:31:D1:C0:C8:5B:07:4A:E6:AB:85:F8:C7:4E:31:5C:06:9E:AB:2F
            X509v3 Authority Key Identifier:
                keyid:A2:0E:20:67:F0:DB:78:3D:E3:72:3E:23:15:17:DC:7E:9F:E5:BA:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/og4gZ_DbeD3jcj4jFRfcfp_lutM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/og4gZ_DbeD3jcj4jFRfcfp_lutM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/66E964AC964711F195C4B810CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.93.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:45:48:63:e5:07:24:d5:3c:b9:ea:7a:df:99:89:b0:8d:5b:
         a0:6c:a5:97:ef:aa:91:fd:78:8b:d1:4c:fb:7e:13:2b:50:6e:
         a1:e8:be:c9:c7:0a:43:bc:f3:69:18:1c:e8:30:a8:82:4a:63:
         fd:9b:dc:8a:b1:9e:86:a1:1f:71:de:b1:be:98:93:3b:49:b4:
         08:31:9e:27:2e:b0:03:22:c4:43:ff:5f:2f:ac:5f:9f:a3:64:
         96:f1:3d:6b:ab:f3:fb:1f:62:f5:a8:2d:f3:5d:99:a0:65:dc:
         73:07:64:46:e4:cb:9f:00:3d:bf:63:db:5b:9d:2a:a8:f0:70:
         1c:f0:86:56:e6:53:43:43:06:08:7c:2d:0c:36:66:c0:ae:fd:
         33:a2:e8:3d:1b:6b:ba:70:51:03:8b:ab:32:25:f8:d2:ce:05:
         2a:76:30:22:f8:47:cd:ca:13:40:fc:a7:03:b4:bb:e0:d0:95:
         35:b0:5f:ce:9e:10:bd:24:99:cb:2c:03:76:43:f8:c8:83:12:
         8a:69:4f:5d:52:5a:76:3c:59:b9:6f:c1:65:bd:fd:52:13:8f:
         5b:dc:e7:a1:33:c0:75:a6:e7:70:80:01:8e:b7:8b:1f:ec:b4:
         c8:b3:34:5a:8b:4f:5d:6e:2f:aa:da:d7:dc:8f:56:ec:2a:09:
         6b:85:78:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----