Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/C66F961E964F11F1BF4A62C4CE1D38B0.roa
File:                     C66F961E964F11F1BF4A62C4CE1D38B0.roa (raw, json)
Hash identifier:          HJdeVzZ+KAFj48NbnrJ/Sd5n8n4QCNPNvEuR5VhY8mw=
Subject key identifier:   75:C0:B6:A8:9E:34:AA:93:02:2F:45:B7:99:7A:59:CB:BE:3C:D4:3B
Certificate issuer:       /CN=F366B0C9AF/serialNumber=A20E2067F0DB783DE3723E231517DC7E9FE5BAD3
Certificate serial:       05A6
Authority key identifier: A2:0E:20:67:F0:DB:78:3D:E3:72:3E:23:15:17:DC:7E:9F:E5:BA:D3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/og4gZ_DbeD3jcj4jFRfcfp_lutM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/C66F961E964F11F1BF4A62C4CE1D38B0.roa
Signing time:             Wed 12 Aug 2026 13:14:40 +0000
ROA not before:           Wed 12 Aug 2026 13:14:36 +0000
ROA not after:            Thu 10 Mar 2033 13:14:36 +0000
asID:                     37182
IP address blocks:        41.93.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/og4gZ_DbeD3jcj4jFRfcfp_lutM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/og4gZ_DbeD3jcj4jFRfcfp_lutM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/og4gZ_DbeD3jcj4jFRfcfp_lutM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 03:17:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1446 (0x5a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366B0C9AF, serialNumber=A20E2067F0DB783DE3723E231517DC7E9FE5BAD3
        Validity
            Not Before: Aug 12 13:14:36 2026 GMT
            Not After : Mar 10 13:14:36 2033 GMT
        Subject: CN=6a7c71c0-f143
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:0b:52:52:ac:9b:b1:a2:9b:5a:cb:fb:c7:47:
                    cf:bf:99:58:04:ae:6e:72:89:da:9d:01:eb:cc:7d:
                    04:7e:cc:ee:33:60:49:79:ed:8c:92:be:6a:aa:9a:
                    3e:d6:1d:6a:13:0f:ce:62:23:df:14:bd:4c:b8:97:
                    21:54:dd:2e:ff:3b:78:ab:5d:7a:17:7c:0b:78:8a:
                    28:2a:1a:4e:6e:77:45:45:21:16:69:49:ba:60:2b:
                    38:4e:df:0b:6b:fd:9b:39:a3:9f:a4:04:e1:df:4b:
                    57:44:25:7d:4a:67:16:0d:60:42:dc:7f:50:ff:87:
                    da:06:d4:60:68:25:d3:c5:d5:d6:36:bd:e3:bb:5d:
                    03:73:f6:52:ab:b6:7f:42:5c:b5:f9:fb:b6:be:4e:
                    49:6a:a7:99:94:3c:fc:48:6a:12:e1:18:c6:9c:2a:
                    17:ed:9b:21:e0:67:e6:23:01:1f:dd:0f:fe:06:1c:
                    d6:71:7a:87:2b:ff:fb:c4:be:df:fd:9f:6c:f5:6f:
                    ea:51:73:37:fc:dd:4c:aa:72:08:fa:55:3b:2f:86:
                    d2:fe:82:84:83:b7:b8:79:c5:2e:b5:95:c0:dc:1c:
                    65:b8:23:5f:a1:89:b3:60:69:ab:71:5b:24:06:15:
                    2a:38:06:58:3a:7f:32:8f:be:6d:0b:1b:83:42:35:
                    ba:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:C0:B6:A8:9E:34:AA:93:02:2F:45:B7:99:7A:59:CB:BE:3C:D4:3B
            X509v3 Authority Key Identifier:
                keyid:A2:0E:20:67:F0:DB:78:3D:E3:72:3E:23:15:17:DC:7E:9F:E5:BA:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/og4gZ_DbeD3jcj4jFRfcfp_lutM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/og4gZ_DbeD3jcj4jFRfcfp_lutM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/C66F961E964F11F1BF4A62C4CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.93.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:a6:38:75:29:e4:bd:56:d4:a7:8d:e8:13:39:3e:bd:be:7f:
         87:ad:21:56:ef:21:04:1d:ea:f4:81:f6:27:13:f0:af:cd:c4:
         64:00:53:8c:82:30:10:3d:90:06:4e:15:78:6f:bf:31:6c:4a:
         06:d7:88:0b:ea:47:a9:83:31:c9:db:24:06:d6:14:c3:2a:98:
         b7:05:82:0a:ee:c0:e0:c1:56:f6:bc:6f:f7:84:e3:3c:24:4d:
         c8:40:25:6b:32:d7:14:81:a5:67:9c:be:bf:4e:e7:88:fd:61:
         24:6c:9b:1b:7f:35:04:c1:73:89:2c:f6:4e:f0:4f:98:75:89:
         af:93:17:54:af:ab:50:7e:a7:28:bf:9c:c8:8b:ef:95:41:63:
         77:7d:2a:e1:92:5e:23:bb:44:e2:43:f8:26:72:d3:3e:67:1d:
         aa:9b:75:d1:a1:22:26:4b:52:52:47:65:a1:49:96:cd:db:6e:
         fc:b4:40:3b:3f:73:50:11:4f:da:bf:2f:e9:69:83:fb:c5:bc:
         87:7d:de:c8:01:8e:4b:a0:8e:9c:d0:16:37:f7:9e:d3:33:fd:
         84:b7:97:51:af:f9:92:53:09:3d:df:cb:cf:a6:1b:ad:b2:b0:
         72:8d:81:d8:06:dc:18:70:a7:6f:15:f3:99:36:ae:52:be:00:
         0d:b4:d5:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----