Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/74CB7A60965111F188B326CDCE1D38B0.roa
File:                     74CB7A60965111F188B326CDCE1D38B0.roa (raw, json)
Hash identifier:          KenKvsRCEIepoC4MYAMufus226uqT0wFb407ViaQ1Dc=
Subject key identifier:   75:6A:B8:85:E7:50:7B:E3:34:F3:5A:44:40:76:0E:63:6E:B7:B6:4C
Certificate issuer:       /CN=F366B0C9AF/serialNumber=A20E2067F0DB783DE3723E231517DC7E9FE5BAD3
Certificate serial:       05B5
Authority key identifier: A2:0E:20:67:F0:DB:78:3D:E3:72:3E:23:15:17:DC:7E:9F:E5:BA:D3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/og4gZ_DbeD3jcj4jFRfcfp_lutM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/74CB7A60965111F188B326CDCE1D38B0.roa
Signing time:             Wed 12 Aug 2026 13:26:42 +0000
ROA not before:           Wed 12 Aug 2026 13:26:39 +0000
ROA not after:            Thu 31 Mar 2033 13:26:39 +0000
asID:                     37182
IP address blocks:        41.93.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/og4gZ_DbeD3jcj4jFRfcfp_lutM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/og4gZ_DbeD3jcj4jFRfcfp_lutM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/og4gZ_DbeD3jcj4jFRfcfp_lutM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 03:17:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1461 (0x5b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366B0C9AF, serialNumber=A20E2067F0DB783DE3723E231517DC7E9FE5BAD3
        Validity
            Not Before: Aug 12 13:26:39 2026 GMT
            Not After : Mar 31 13:26:39 2033 GMT
        Subject: CN=6a7c7492-3a6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:e1:6c:76:15:de:f1:f5:27:ba:81:40:a3:78:
                    f7:e5:37:5e:22:04:3d:38:73:19:9a:71:53:09:ae:
                    a6:74:56:1e:f5:04:f1:25:d1:e1:ab:14:b2:a4:e3:
                    2a:5c:0e:93:49:77:ac:d3:ff:b8:4a:47:ce:67:a4:
                    96:dc:6a:4e:4e:5c:8c:bf:f8:9d:2d:6e:f6:05:e9:
                    3b:9a:eb:0f:72:e6:fd:e2:68:a0:2e:49:75:64:81:
                    37:d6:f2:16:5d:b8:a5:fe:6a:80:44:dc:05:e2:2d:
                    d1:da:00:5a:6e:44:a5:1d:fa:b2:34:3e:29:f3:80:
                    cd:04:99:79:c5:54:b2:b3:a3:81:98:94:70:7c:54:
                    a3:d4:44:33:5c:91:94:74:78:13:86:f1:c1:2c:68:
                    2c:20:18:8b:c9:e0:79:79:19:ac:9b:5e:30:ef:22:
                    98:ce:a1:db:44:aa:ed:e1:55:95:6b:6b:1c:26:d9:
                    48:f9:49:b0:a9:4e:ac:3a:48:3e:59:97:da:a5:96:
                    16:42:c1:2f:ee:45:f0:45:8e:15:d4:1d:c3:9a:f3:
                    99:24:70:83:6f:e0:71:39:c6:2f:c1:7b:ab:61:b4:
                    10:d4:f4:68:0f:f9:ed:be:c6:c0:ea:c4:02:8f:1f:
                    bc:02:d2:07:a7:ca:ea:73:a4:a9:1e:b7:b5:06:42:
                    77:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:6A:B8:85:E7:50:7B:E3:34:F3:5A:44:40:76:0E:63:6E:B7:B6:4C
            X509v3 Authority Key Identifier:
                keyid:A2:0E:20:67:F0:DB:78:3D:E3:72:3E:23:15:17:DC:7E:9F:E5:BA:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/og4gZ_DbeD3jcj4jFRfcfp_lutM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/og4gZ_DbeD3jcj4jFRfcfp_lutM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/74CB7A60965111F188B326CDCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.93.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:ca:3d:e9:aa:15:4b:68:a6:85:d5:27:bd:a5:c8:07:a0:0f:
         13:b4:3f:56:38:cb:de:2d:b4:1e:17:46:d1:df:86:65:75:7a:
         e8:a4:bf:8c:d8:ea:fa:39:c0:ec:54:09:0f:e6:ef:66:e4:a2:
         3f:18:18:88:d8:46:f0:8a:16:a8:29:08:2b:08:e5:c4:4a:ca:
         e4:45:e2:52:23:fd:e4:3e:67:f0:85:b7:fa:bb:bf:06:16:a0:
         7b:df:5b:28:e8:65:d6:ae:99:99:6c:ca:98:2b:17:5f:40:30:
         e9:b8:bf:35:fb:1d:fe:40:7d:fa:40:6f:e4:80:2c:ea:1d:e1:
         b2:66:01:4e:ac:95:1a:db:b0:1a:23:98:80:42:ff:c2:e2:01:
         46:b4:30:af:d6:26:83:4f:d6:ee:a6:ed:cd:fd:9e:b6:47:32:
         5e:98:46:75:46:d8:ae:11:d1:2c:cb:94:8d:5d:10:f7:a6:87:
         19:10:bf:af:93:da:a2:7b:1f:96:54:9d:7f:74:c5:65:3a:2d:
         ea:2a:c8:91:78:17:13:9d:f2:0d:e7:1c:e4:4e:df:ae:b2:a1:
         d5:59:a3:f2:60:f8:53:b3:a4:ad:6e:e8:ee:2d:1b:d4:39:f5:
         8d:17:0b:70:fd:23:68:1e:1a:f6:b7:bb:fa:5a:f1:d3:41:e2:
         03:9a:3a:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----