Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/7952BE8A964D11F1825431B4CE1D38B0.roa
File:                     7952BE8A964D11F1825431B4CE1D38B0.roa (raw, json)
Hash identifier:          HjvUFT6JThr4YWNVzTDVNW61g/yIvKBsGAr5vlAGCt0=
Subject key identifier:   A6:A4:F7:5A:0D:34:48:9B:37:7B:59:22:73:FC:AB:8B:8B:01:B0:85
Certificate issuer:       /CN=F366B0C9AF/serialNumber=A20E2067F0DB783DE3723E231517DC7E9FE5BAD3
Certificate serial:       0594
Authority key identifier: A2:0E:20:67:F0:DB:78:3D:E3:72:3E:23:15:17:DC:7E:9F:E5:BA:D3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/og4gZ_DbeD3jcj4jFRfcfp_lutM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/7952BE8A964D11F1825431B4CE1D38B0.roa
Signing time:             Wed 12 Aug 2026 12:58:12 +0000
ROA not before:           Wed 12 Aug 2026 12:58:08 +0000
ROA not after:            Thu 10 Mar 2033 12:58:08 +0000
asID:                     37182
IP address blocks:        41.93.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/og4gZ_DbeD3jcj4jFRfcfp_lutM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/og4gZ_DbeD3jcj4jFRfcfp_lutM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/og4gZ_DbeD3jcj4jFRfcfp_lutM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Sep 2026 03:17:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1428 (0x594)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366B0C9AF, serialNumber=A20E2067F0DB783DE3723E231517DC7E9FE5BAD3
        Validity
            Not Before: Aug 12 12:58:08 2026 GMT
            Not After : Mar 10 12:58:08 2033 GMT
        Subject: CN=6a7c6de4-72c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:83:37:fd:fe:a1:eb:02:f0:28:57:c5:a2:54:
                    9e:9d:da:0b:8b:1f:b4:a2:72:e9:55:a8:37:33:53:
                    d5:8d:99:12:78:de:10:b8:97:82:4b:72:1a:10:89:
                    03:bf:74:3c:51:6f:a4:8d:30:9e:26:dc:bc:29:77:
                    fc:1e:b4:3b:6b:22:2b:01:c0:37:c0:2c:e1:65:a6:
                    9e:18:85:f9:91:f1:07:a1:fb:98:66:c5:84:14:06:
                    08:35:57:ba:36:62:31:b8:a7:fa:f5:91:77:37:ba:
                    2b:9c:c8:f7:55:b6:bb:be:2c:ce:26:4f:f0:5a:0a:
                    8d:8b:7f:b9:b7:02:2a:ea:bd:c8:3d:60:0b:4c:77:
                    b6:eb:ca:24:15:79:06:ed:f7:71:b4:05:b2:c2:c5:
                    4c:b9:80:da:10:fe:67:f8:ec:55:09:b2:00:79:d5:
                    aa:a1:75:aa:6d:e5:28:0b:32:37:b4:6e:35:23:13:
                    ee:5a:a6:bb:41:fa:b2:12:2e:e8:12:c1:8b:09:37:
                    9f:15:7d:2a:78:bc:f4:b8:4f:ed:3e:a9:d9:a9:e4:
                    fb:29:1f:8f:28:86:19:c1:c2:c9:08:32:fa:f1:6f:
                    cd:bf:8d:b0:eb:79:58:d0:12:27:c3:7e:53:a7:1c:
                    a7:66:8a:43:c8:2a:f0:11:5e:ca:89:a5:b0:bc:c7:
                    de:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:A4:F7:5A:0D:34:48:9B:37:7B:59:22:73:FC:AB:8B:8B:01:B0:85
            X509v3 Authority Key Identifier:
                keyid:A2:0E:20:67:F0:DB:78:3D:E3:72:3E:23:15:17:DC:7E:9F:E5:BA:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/og4gZ_DbeD3jcj4jFRfcfp_lutM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/og4gZ_DbeD3jcj4jFRfcfp_lutM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/7952BE8A964D11F1825431B4CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.93.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:88:1c:6f:c3:8d:c1:84:10:a3:41:7d:88:90:6f:eb:f5:01:
         56:48:da:56:63:b8:26:20:01:a9:a3:cd:fc:f3:f2:42:7b:f1:
         30:87:99:69:d7:ac:4b:cf:2d:57:13:8b:4a:40:10:91:c5:05:
         d4:d6:f8:b1:b7:ce:07:6a:59:70:62:8e:44:dd:63:71:7b:54:
         a6:bb:f7:33:c3:1e:91:a5:e6:20:8e:20:83:22:ec:38:ce:03:
         7d:70:bb:2b:a6:7d:b4:c7:b6:ee:8a:fe:e8:0f:a8:24:cd:33:
         47:4f:83:50:34:5d:4e:b4:f0:09:c4:2f:5f:f6:7b:9c:7e:11:
         ab:19:ca:68:95:94:ee:58:df:55:ab:0d:00:a4:5d:3a:53:fa:
         81:2d:96:57:d6:d7:32:da:f9:43:54:2c:d7:d0:fc:09:31:a1:
         84:76:54:ad:f9:e2:42:73:31:6c:0f:c2:07:d9:b9:b6:d2:34:
         d9:b3:ce:8a:34:e7:41:3f:12:69:b7:45:e9:42:f4:8b:97:35:
         5b:75:98:7a:a8:ff:80:86:24:b4:dd:1a:5c:da:36:44:18:75:
         83:be:0b:ab:a5:3d:14:db:4f:1d:0c:9c:cd:b1:57:22:41:c2:
         e2:04:1e:9e:70:14:22:a9:8f:8f:ff:a4:28:6c:bd:5f:5f:41:
         86:b5:08:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----