Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/AABDD70C965711F1BE51AEF2CE1D38B0.roa
File:                     AABDD70C965711F1BE51AEF2CE1D38B0.roa (raw, json)
Hash identifier:          Z0i6TcmIXn9kp704Tq1dtAyqgD1SdNCro1rAUYTSegM=
Subject key identifier:   B0:87:64:00:46:D1:24:66:00:1A:39:8B:21:F0:41:E2:75:86:FB:C8
Certificate issuer:       /CN=F366B0C9AF/serialNumber=A20E2067F0DB783DE3723E231517DC7E9FE5BAD3
Certificate serial:       05E5
Authority key identifier: A2:0E:20:67:F0:DB:78:3D:E3:72:3E:23:15:17:DC:7E:9F:E5:BA:D3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/og4gZ_DbeD3jcj4jFRfcfp_lutM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/AABDD70C965711F1BE51AEF2CE1D38B0.roa
Signing time:             Wed 12 Aug 2026 14:11:10 +0000
ROA not before:           Wed 12 Aug 2026 14:11:06 +0000
ROA not after:            Thu 31 Mar 2033 14:11:06 +0000
asID:                     37182
IP address blocks:        41.93.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/og4gZ_DbeD3jcj4jFRfcfp_lutM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/og4gZ_DbeD3jcj4jFRfcfp_lutM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/og4gZ_DbeD3jcj4jFRfcfp_lutM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 03:17:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1509 (0x5e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366B0C9AF, serialNumber=A20E2067F0DB783DE3723E231517DC7E9FE5BAD3
        Validity
            Not Before: Aug 12 14:11:06 2026 GMT
            Not After : Mar 31 14:11:06 2033 GMT
        Subject: CN=6a7c7efe-b3c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d1:f1:b6:df:c7:ee:78:b2:cf:68:75:5b:db:
                    a1:3a:4f:d1:89:12:b5:8d:01:85:4c:8a:4b:36:d6:
                    3d:d1:29:c2:fc:9d:80:92:ac:ae:5b:ae:4c:7e:8b:
                    e2:ed:9a:4e:ca:dc:8f:26:63:e4:f1:b4:3b:7f:d0:
                    3a:d1:c0:9d:3a:8d:c2:54:3a:f0:2b:e5:46:a6:fc:
                    b5:31:01:69:8c:1b:ba:6c:d9:0a:15:78:1b:b0:77:
                    10:d4:ba:17:80:66:e9:46:be:59:a1:ad:58:27:1c:
                    ea:22:ce:06:e2:a3:89:f3:a7:71:3f:e4:09:66:74:
                    b1:1e:87:bf:d1:97:37:4d:93:f3:7d:3a:24:3f:ea:
                    ef:07:06:ae:20:9c:a7:5d:75:37:3a:be:63:25:03:
                    50:3d:1f:7d:60:b9:b3:51:d2:dd:e3:54:2c:f1:e6:
                    97:51:b3:93:ea:3f:ff:1c:77:21:13:6c:b6:05:00:
                    81:34:b0:85:8b:87:1c:35:41:48:c9:ad:2f:31:fe:
                    45:52:7a:1b:ef:ef:dc:8f:00:58:80:a0:54:e3:df:
                    f6:e5:a2:19:19:e0:55:0c:03:a2:19:f9:fd:55:c4:
                    a9:14:4c:65:bf:85:fc:46:ea:eb:3b:e5:fc:34:ab:
                    05:53:41:fd:65:d7:cf:4e:eb:14:e6:bd:98:55:b9:
                    ce:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:87:64:00:46:D1:24:66:00:1A:39:8B:21:F0:41:E2:75:86:FB:C8
            X509v3 Authority Key Identifier:
                keyid:A2:0E:20:67:F0:DB:78:3D:E3:72:3E:23:15:17:DC:7E:9F:E5:BA:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/og4gZ_DbeD3jcj4jFRfcfp_lutM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/og4gZ_DbeD3jcj4jFRfcfp_lutM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/AABDD70C965711F1BE51AEF2CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.93.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:d0:a2:e2:31:0d:b2:dc:8f:fd:72:db:7f:68:57:c9:8e:a1:
         e2:fa:1a:a9:7c:79:4f:26:49:63:8f:ea:80:4d:1d:87:71:3c:
         3f:1b:36:d2:3e:50:a9:fb:65:56:b6:22:e1:15:88:c1:3c:c0:
         43:ac:ad:e1:1b:9d:29:c7:6c:d1:fc:fb:6e:95:aa:f4:f2:96:
         62:0d:7a:87:27:b4:d4:ef:b0:37:91:1e:cf:ad:dc:8f:02:a2:
         d1:0c:3a:58:15:e9:51:d5:79:8f:3c:c2:b0:1b:cc:4b:cc:13:
         71:13:fb:48:b3:24:c7:07:ea:f3:db:e9:0f:32:55:77:e1:c2:
         0f:3d:c3:f7:2d:6c:12:43:6d:01:50:36:31:85:48:c5:ef:54:
         80:5a:f5:7b:f4:7b:ed:8d:81:b1:2d:24:99:a7:20:38:37:ca:
         7d:4b:0f:0d:4e:69:aa:a1:bb:80:3a:36:27:8a:75:37:75:24:
         38:cf:e8:11:2a:74:ee:c2:2f:57:e5:a5:6d:e1:6c:2a:29:ae:
         a4:89:a5:4c:54:b2:06:56:64:a0:13:ea:54:5e:98:e7:f3:9a:
         69:8c:97:24:10:b2:9b:d6:79:a8:ba:83:6b:88:0f:c8:2c:64:
         2a:8e:d2:10:62:47:30:46:01:99:3d:34:f3:c3:89:23:43:d4:
         25:73:56:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----