Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/87484988965211F18E4923D3CE1D38B0.roa
File:                     87484988965211F18E4923D3CE1D38B0.roa (raw, json)
Hash identifier:          A7BQL9sVmwfNQ72W1lrec16zLPKtPRst/xTvfysNk+U=
Subject key identifier:   01:A9:CB:0B:F2:AE:77:08:C9:A3:CA:27:17:A6:9B:FE:F3:5A:D4:67
Certificate issuer:       /CN=F366B0C9AF/serialNumber=A20E2067F0DB783DE3723E231517DC7E9FE5BAD3
Certificate serial:       05BB
Authority key identifier: A2:0E:20:67:F0:DB:78:3D:E3:72:3E:23:15:17:DC:7E:9F:E5:BA:D3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/og4gZ_DbeD3jcj4jFRfcfp_lutM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/87484988965211F18E4923D3CE1D38B0.roa
Signing time:             Wed 12 Aug 2026 13:34:23 +0000
ROA not before:           Wed 12 Aug 2026 13:34:19 +0000
ROA not after:            Thu 31 Mar 2033 13:34:19 +0000
asID:                     37182
IP address blocks:        41.93.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/og4gZ_DbeD3jcj4jFRfcfp_lutM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/og4gZ_DbeD3jcj4jFRfcfp_lutM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/og4gZ_DbeD3jcj4jFRfcfp_lutM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 03:17:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1467 (0x5bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366B0C9AF, serialNumber=A20E2067F0DB783DE3723E231517DC7E9FE5BAD3
        Validity
            Not Before: Aug 12 13:34:19 2026 GMT
            Not After : Mar 31 13:34:19 2033 GMT
        Subject: CN=6a7c765f-f959
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:32:6d:a2:c2:a8:2f:b5:14:6f:39:04:e0:56:
                    34:d2:6c:f5:92:6b:ae:42:b5:0b:11:42:f5:e1:e8:
                    d6:24:d3:58:eb:8b:88:09:e3:0c:c1:2c:46:52:2e:
                    f3:b5:db:74:48:20:a3:f8:6d:f3:52:3f:a2:b9:53:
                    97:f2:24:cf:77:a4:cc:25:03:c7:9f:95:31:39:08:
                    85:4b:0f:3d:86:3e:18:d6:62:ff:6e:f3:17:43:30:
                    c6:df:09:5a:a4:d4:8c:71:4b:10:a3:54:a5:22:56:
                    c9:d6:df:fb:45:56:ba:37:21:83:ea:3f:9c:2d:5a:
                    42:54:aa:8a:33:f2:78:b7:ba:45:29:d0:af:23:10:
                    76:a0:43:2c:18:a2:5f:85:11:0e:03:bb:07:a9:fb:
                    7c:0d:1f:8a:ff:08:c5:6f:00:bf:fd:6d:f0:6c:c5:
                    b8:fe:e2:97:29:98:fe:d7:77:74:cc:5f:24:d7:09:
                    81:2e:60:18:8e:2d:dc:b6:ba:cb:77:25:b0:3d:10:
                    8a:53:37:84:e0:76:fa:44:af:87:db:82:f4:a1:a1:
                    ec:51:b8:c8:34:19:58:af:14:66:e4:a8:f6:1e:3a:
                    fe:11:62:95:a3:b6:43:c6:9e:cb:85:ca:9e:2c:7e:
                    75:7d:7d:d2:9a:37:f6:fd:ea:99:f6:4c:f2:84:20:
                    90:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:A9:CB:0B:F2:AE:77:08:C9:A3:CA:27:17:A6:9B:FE:F3:5A:D4:67
            X509v3 Authority Key Identifier:
                keyid:A2:0E:20:67:F0:DB:78:3D:E3:72:3E:23:15:17:DC:7E:9F:E5:BA:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/og4gZ_DbeD3jcj4jFRfcfp_lutM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/og4gZ_DbeD3jcj4jFRfcfp_lutM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/87484988965211F18E4923D3CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.93.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c0:1a:fa:77:71:0a:21:44:96:d9:98:90:89:08:63:d3:c6:e9:
         f6:3a:f6:ba:93:5c:82:63:16:c4:5f:da:07:0d:1a:c0:41:bf:
         5e:48:5e:6d:6d:2b:66:09:36:57:24:9b:1e:55:15:d4:35:a4:
         00:48:86:64:cf:0f:69:fb:2b:6d:dc:b5:a5:65:e6:35:e9:67:
         de:2a:84:7d:4c:ab:ca:ec:dd:1a:6f:2a:b7:3e:be:40:54:95:
         31:92:f5:5f:82:d4:8e:29:a5:e5:31:da:b8:21:63:53:95:23:
         1e:16:44:a4:f4:bf:34:97:8d:0a:bb:1d:d0:e0:8d:1b:24:3c:
         05:bf:af:a1:46:ce:f4:0f:6f:f1:00:0c:1d:98:3e:07:cc:f3:
         28:af:65:46:83:d8:44:46:e0:0c:66:40:c9:3b:32:69:4c:9b:
         16:8e:52:c9:e2:84:70:a7:8d:9b:55:9b:3b:98:ad:4a:ab:14:
         86:a6:d5:f6:14:d2:cb:81:e2:67:e2:bb:13:43:06:84:39:90:
         29:3f:4f:b7:a1:a0:ef:d1:e9:23:9b:01:8d:96:36:47:49:37:
         23:4b:f3:d5:47:53:30:3a:12:62:32:27:f4:c9:84:cc:2c:1c:
         6a:d7:47:84:7d:9e:2d:d4:23:66:79:5e:ab:7e:41:f9:7e:9b:
         0e:70:e1:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----