Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/C4646E40965311F1BFDBA2D9CE1D38B0.roa
File:                     C4646E40965311F1BFDBA2D9CE1D38B0.roa (raw, json)
Hash identifier:          C4lZeYETrv/x0WVhqFFuv6SNxCRMb2VywH8lQ3I94B4=
Subject key identifier:   F2:48:70:64:94:79:A6:7F:F3:80:42:47:80:61:38:C7:A4:1C:CE:D2
Certificate issuer:       /CN=F366B0C9AF/serialNumber=A20E2067F0DB783DE3723E231517DC7E9FE5BAD3
Certificate serial:       05C4
Authority key identifier: A2:0E:20:67:F0:DB:78:3D:E3:72:3E:23:15:17:DC:7E:9F:E5:BA:D3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/og4gZ_DbeD3jcj4jFRfcfp_lutM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/C4646E40965311F1BFDBA2D9CE1D38B0.roa
Signing time:             Wed 12 Aug 2026 13:43:15 +0000
ROA not before:           Wed 12 Aug 2026 13:42:11 +0000
ROA not after:            Thu 31 Mar 2033 13:42:11 +0000
asID:                     37182
IP address blocks:        41.93.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/og4gZ_DbeD3jcj4jFRfcfp_lutM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/og4gZ_DbeD3jcj4jFRfcfp_lutM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/og4gZ_DbeD3jcj4jFRfcfp_lutM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Sep 2026 03:17:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1476 (0x5c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366B0C9AF, serialNumber=A20E2067F0DB783DE3723E231517DC7E9FE5BAD3
        Validity
            Not Before: Aug 12 13:42:11 2026 GMT
            Not After : Mar 31 13:42:11 2033 GMT
        Subject: CN=6a7c7873-c06e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:27:f2:ef:3d:a8:57:cf:c3:69:19:63:19:52:
                    f3:ba:8a:ba:ef:a8:22:2e:54:fa:c6:9c:cf:aa:a2:
                    27:cc:91:07:80:eb:71:8a:23:e0:c1:e0:0d:b0:97:
                    ba:1e:b3:3c:dd:ef:74:d2:56:ef:3f:c3:f7:67:f0:
                    3e:d3:a3:ba:70:12:3b:05:ae:b1:1a:22:5f:b2:49:
                    3d:47:77:e7:30:6f:37:55:39:61:92:bf:ea:46:aa:
                    8c:62:ec:58:d8:34:d1:62:e3:33:ab:41:f3:3b:0f:
                    60:c6:d7:da:e2:33:ef:66:a7:7d:55:5d:57:84:f3:
                    f3:26:91:2e:8d:cf:c1:5c:9a:88:b6:89:c4:b3:57:
                    5d:32:05:95:73:1a:7c:88:5d:09:2f:6c:8a:d5:14:
                    94:84:ed:c9:aa:d9:ce:e6:0f:7c:c3:be:60:db:3c:
                    70:88:23:8a:8b:b1:77:36:13:2b:c6:02:b8:c6:ee:
                    43:a8:dd:f5:29:fc:61:a1:d8:90:72:b1:ae:84:e1:
                    0d:88:44:45:30:11:47:14:a2:db:cb:a6:b4:f3:f5:
                    4e:67:63:a4:bc:ea:21:cd:50:d5:49:51:9d:a9:ee:
                    e9:d7:47:20:07:eb:c8:3c:d5:b6:bc:10:a6:85:9e:
                    cb:d4:e6:81:a9:7e:75:02:07:06:77:32:c9:0e:5c:
                    2e:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:48:70:64:94:79:A6:7F:F3:80:42:47:80:61:38:C7:A4:1C:CE:D2
            X509v3 Authority Key Identifier:
                keyid:A2:0E:20:67:F0:DB:78:3D:E3:72:3E:23:15:17:DC:7E:9F:E5:BA:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/og4gZ_DbeD3jcj4jFRfcfp_lutM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/og4gZ_DbeD3jcj4jFRfcfp_lutM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/C4646E40965311F1BFDBA2D9CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.93.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:26:3b:49:59:6e:4a:dd:0f:2a:54:07:f1:a8:24:fb:99:98:
         bc:4d:3d:13:66:ae:5c:57:4e:45:a9:6b:23:d1:9d:aa:1d:d7:
         2e:96:0d:7f:c7:fb:71:f0:98:ca:19:61:5d:f5:c2:7c:0f:94:
         63:1f:4c:50:65:07:2c:02:ad:c9:f0:5f:3e:d2:c5:4d:f0:af:
         e9:49:02:f2:00:a6:d3:90:1a:b1:9f:f4:9a:a2:13:7d:2c:ef:
         9d:fb:83:75:69:79:8a:dd:70:2f:bc:57:cf:a8:79:61:1b:44:
         5e:77:4b:ed:3b:b1:c3:f9:bd:6c:b6:bf:bb:1e:12:e8:8c:1b:
         2f:ad:42:f9:95:7c:61:51:1e:bb:04:68:c7:1d:99:ac:fd:47:
         7b:31:57:c0:dd:4c:d6:20:9f:ac:e4:1a:5b:03:cf:4e:0d:43:
         ce:d5:21:08:79:52:76:7c:de:3a:b8:0b:38:3b:10:25:a5:4d:
         94:74:5a:b2:e6:19:6c:cd:16:1c:9a:e4:25:b1:7e:66:bf:5c:
         33:61:9f:39:8c:a7:08:06:7c:fb:09:81:1c:79:8d:86:53:25:
         e2:e4:54:e4:88:60:92:27:69:20:a1:cf:da:91:13:f4:c5:e2:
         5a:92:32:68:c3:e2:0a:49:2e:16:94:8b:27:49:81:25:48:b5:
         31:84:21:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----