Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/BEC2EABC964D11F1966B28B8CE1D38B0.roa
File:                     BEC2EABC964D11F1966B28B8CE1D38B0.roa (raw, json)
Hash identifier:          dBXag7eweIDHY4x5vWF18oTMja/pLioNe8TURJJOtVk=
Subject key identifier:   E3:E1:7E:83:08:C4:50:4F:55:25:C5:D5:69:79:3B:A7:2B:CB:C0:FF
Certificate issuer:       /CN=F366B0C9AF/serialNumber=A20E2067F0DB783DE3723E231517DC7E9FE5BAD3
Certificate serial:       0597
Authority key identifier: A2:0E:20:67:F0:DB:78:3D:E3:72:3E:23:15:17:DC:7E:9F:E5:BA:D3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/og4gZ_DbeD3jcj4jFRfcfp_lutM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/BEC2EABC964D11F1966B28B8CE1D38B0.roa
Signing time:             Wed 12 Aug 2026 13:00:08 +0000
ROA not before:           Wed 12 Aug 2026 13:00:04 +0000
ROA not after:            Thu 10 Mar 2033 13:00:04 +0000
asID:                     37182
IP address blocks:        41.93.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/og4gZ_DbeD3jcj4jFRfcfp_lutM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/og4gZ_DbeD3jcj4jFRfcfp_lutM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/og4gZ_DbeD3jcj4jFRfcfp_lutM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Sep 2026 03:17:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1431 (0x597)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366B0C9AF, serialNumber=A20E2067F0DB783DE3723E231517DC7E9FE5BAD3
        Validity
            Not Before: Aug 12 13:00:04 2026 GMT
            Not After : Mar 10 13:00:04 2033 GMT
        Subject: CN=6a7c6e58-714d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:71:e2:a2:47:41:9b:00:4c:d0:04:e7:62:df:
                    44:4b:64:c5:4d:12:6e:51:04:46:3c:f9:2f:2c:b7:
                    12:38:14:31:2a:ed:be:e4:db:f9:62:67:73:10:4d:
                    d4:e1:57:9f:c4:88:6b:74:b6:6a:10:14:36:b7:51:
                    2c:76:54:13:1b:2f:24:06:bf:84:67:be:5a:ea:bc:
                    08:33:9b:bc:cf:da:e1:cd:e5:9e:7e:18:ac:bc:71:
                    d7:25:05:d3:21:88:59:ca:8d:3b:bc:35:61:c6:d5:
                    8d:02:65:16:47:29:27:56:79:fb:af:29:82:5b:e6:
                    b4:6a:48:9c:86:57:f2:a2:cf:76:9a:38:f6:47:81:
                    17:31:36:ce:82:22:c4:b4:21:1d:bb:7c:0a:a5:55:
                    20:c7:2e:96:f5:3f:f1:1d:dd:8d:73:74:a6:32:b0:
                    a2:73:06:2c:97:e5:1c:a3:de:30:9b:20:96:c1:17:
                    ae:bd:42:c8:3c:5f:f4:b0:af:54:9e:d5:6f:64:00:
                    62:e9:8e:cf:37:01:cf:6c:1a:04:f6:76:b1:0d:3f:
                    f8:2a:51:c1:ae:90:27:de:e0:f7:83:37:9c:76:2d:
                    56:2b:73:39:07:8f:c8:84:74:e9:01:51:db:ce:6d:
                    3c:25:60:d8:4c:65:2d:31:f1:37:bb:3b:1d:9f:72:
                    13:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:E1:7E:83:08:C4:50:4F:55:25:C5:D5:69:79:3B:A7:2B:CB:C0:FF
            X509v3 Authority Key Identifier:
                keyid:A2:0E:20:67:F0:DB:78:3D:E3:72:3E:23:15:17:DC:7E:9F:E5:BA:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/og4gZ_DbeD3jcj4jFRfcfp_lutM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/og4gZ_DbeD3jcj4jFRfcfp_lutM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/BEC2EABC964D11F1966B28B8CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.93.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:e8:be:59:ca:3c:55:94:63:b1:b9:f2:09:ad:44:36:b7:15:
         6c:3f:5f:ef:3c:29:ac:d5:65:31:d8:6b:bd:37:00:88:76:17:
         26:41:39:28:35:35:9b:72:a0:b0:81:87:77:f2:2b:17:66:a8:
         05:34:17:bc:f0:5a:c7:b2:04:dd:b4:4e:f1:f2:3d:8e:eb:42:
         b6:33:55:af:97:da:5b:63:8b:5c:77:0d:59:40:c4:8d:fd:27:
         a2:7c:4b:40:cc:9d:d3:a6:90:38:f2:3b:07:28:6c:06:f6:25:
         d1:51:ae:75:44:0e:cf:bf:b1:f7:b8:4d:eb:f0:b7:6d:ad:55:
         f9:4b:1d:5e:0a:75:c9:cb:d9:be:ce:40:54:50:ad:16:60:7f:
         ef:1e:cb:19:f5:15:0b:f4:15:3e:56:c1:4a:94:eb:d7:c5:2e:
         2f:5c:72:24:40:48:5f:0e:13:67:bc:56:5e:36:9c:1a:41:02:
         4e:29:99:14:44:24:a6:04:4d:25:a2:05:3e:d1:cc:23:e0:4e:
         45:9d:ef:eb:ba:8c:7a:b1:9d:eb:8e:fd:8d:70:dd:08:9a:33:
         24:07:fa:4d:5e:ae:cd:93:a6:90:b3:6c:be:86:98:6a:05:31:
         b9:a0:4c:cf:38:0e:d9:42:7c:a2:d4:6c:57:84:b4:0b:2d:87:
         3c:70:05:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----