Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/7D941AD0965611F19A827AEACE1D38B0.roa
File:                     7D941AD0965611F19A827AEACE1D38B0.roa (raw, json)
Hash identifier:          2gcd6W5bGv8XPY7TPxINGmpsn4kpkNoI84Aj+LDRq4E=
Subject key identifier:   A4:9C:10:FF:64:07:31:FF:C7:22:15:B7:B3:0E:54:76:92:9E:6E:48
Certificate issuer:       /CN=F366B0C9AF/serialNumber=A20E2067F0DB783DE3723E231517DC7E9FE5BAD3
Certificate serial:       05DC
Authority key identifier: A2:0E:20:67:F0:DB:78:3D:E3:72:3E:23:15:17:DC:7E:9F:E5:BA:D3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/og4gZ_DbeD3jcj4jFRfcfp_lutM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/7D941AD0965611F19A827AEACE1D38B0.roa
Signing time:             Wed 12 Aug 2026 14:02:45 +0000
ROA not before:           Wed 12 Aug 2026 14:02:41 +0000
ROA not after:            Thu 31 Mar 2033 14:02:41 +0000
asID:                     37182
IP address blocks:        41.93.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/og4gZ_DbeD3jcj4jFRfcfp_lutM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/og4gZ_DbeD3jcj4jFRfcfp_lutM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/og4gZ_DbeD3jcj4jFRfcfp_lutM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 03:17:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1500 (0x5dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366B0C9AF, serialNumber=A20E2067F0DB783DE3723E231517DC7E9FE5BAD3
        Validity
            Not Before: Aug 12 14:02:41 2026 GMT
            Not After : Mar 31 14:02:41 2033 GMT
        Subject: CN=6a7c7d04-c4e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:5a:3a:8c:7c:18:aa:8d:81:40:6e:53:bf:41:
                    d7:b9:a2:57:09:2f:d2:4c:97:1d:48:f8:45:42:51:
                    8d:22:01:7e:66:62:d6:f3:51:30:44:61:67:f3:0a:
                    06:b5:7f:b1:f0:fa:b6:22:43:7a:e3:14:4c:12:b8:
                    7e:e2:79:90:aa:eb:24:b0:c0:0e:55:38:c9:27:90:
                    86:9f:b1:a9:ea:80:85:f4:c6:0f:45:f7:4c:9b:ee:
                    e7:a3:d1:26:4e:5f:22:75:bc:e5:41:47:62:91:6a:
                    d6:b6:9c:99:90:26:2c:6a:4e:80:c0:35:0c:04:c8:
                    ee:e8:44:c3:b5:51:2e:b1:8c:58:98:dd:42:96:7c:
                    98:4e:18:ef:34:03:79:20:0f:3c:5e:bf:05:3b:bc:
                    49:ff:15:af:2a:3b:51:f0:a3:ca:83:9b:e5:a5:40:
                    69:28:ce:1d:ee:6c:e9:32:0f:75:15:66:ad:7d:59:
                    1e:2e:2b:1c:1c:c9:01:33:21:06:48:3d:0e:77:9f:
                    a0:0a:ab:c6:50:bf:4f:9b:59:53:55:81:05:aa:a8:
                    85:49:83:6a:97:93:03:3b:6c:72:07:e1:9a:05:2b:
                    fb:28:52:30:64:1e:b9:61:03:f4:29:8c:7e:41:71:
                    04:0c:36:83:87:16:07:39:e1:82:46:07:c5:df:0a:
                    44:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:9C:10:FF:64:07:31:FF:C7:22:15:B7:B3:0E:54:76:92:9E:6E:48
            X509v3 Authority Key Identifier:
                keyid:A2:0E:20:67:F0:DB:78:3D:E3:72:3E:23:15:17:DC:7E:9F:E5:BA:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/og4gZ_DbeD3jcj4jFRfcfp_lutM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/og4gZ_DbeD3jcj4jFRfcfp_lutM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/7D941AD0965611F19A827AEACE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.93.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:e0:0a:d9:91:d9:96:34:c7:e5:10:4e:93:f0:96:4f:eb:89:
         ef:86:bc:47:f5:1e:8f:e2:aa:a7:de:76:a8:c5:2a:c4:b5:26:
         66:12:66:cb:6d:21:53:43:b6:cd:ba:ba:c7:8c:b6:7e:20:ef:
         b8:7c:af:09:cb:15:a2:26:83:8c:a0:eb:01:7f:18:f5:88:1a:
         16:b4:b0:1f:cb:ae:83:62:9e:e6:86:90:96:82:07:0d:54:0a:
         62:44:ec:37:9a:92:60:48:a0:9b:db:26:9b:8f:84:80:58:53:
         42:32:17:ab:d9:f6:09:4b:0e:97:cc:6f:3b:ed:42:e2:72:70:
         c5:ce:29:92:7f:f0:e1:f4:93:57:49:72:77:aa:8e:91:d7:45:
         c3:e5:2f:04:1c:85:53:73:b0:9a:a4:3f:f1:38:3d:13:f9:c9:
         df:da:95:6a:06:ab:3e:99:4c:c4:ec:b7:51:cb:c4:8c:a0:41:
         bb:c3:a2:b5:39:6f:7f:e5:b6:01:6d:b2:e4:07:fc:33:c6:36:
         de:9f:9a:24:2a:65:e8:61:24:17:d9:4f:24:92:71:9c:cb:52:
         00:9b:c3:85:30:ec:86:88:93:e8:8a:df:cf:be:66:c3:dc:83:
         0a:6d:1d:03:5c:b5:71:e9:55:a2:29:bf:97:a4:00:6c:49:da:
         2a:83:d0:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----