Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/E34E8CE4964B11F1BA3BC8ABCE1D38B0.roa
File:                     E34E8CE4964B11F1BA3BC8ABCE1D38B0.roa (raw, json)
Hash identifier:          FUldvyvWluOkUisORmlMzKGCqazC5G2frJ97FyzShnM=
Subject key identifier:   80:8C:C8:B0:DF:DD:08:AA:1A:15:21:CE:04:00:08:05:FC:12:60:00
Certificate issuer:       /CN=F366B0C9AF/serialNumber=A20E2067F0DB783DE3723E231517DC7E9FE5BAD3
Certificate serial:       0588
Authority key identifier: A2:0E:20:67:F0:DB:78:3D:E3:72:3E:23:15:17:DC:7E:9F:E5:BA:D3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/og4gZ_DbeD3jcj4jFRfcfp_lutM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/E34E8CE4964B11F1BA3BC8ABCE1D38B0.roa
Signing time:             Wed 12 Aug 2026 12:46:51 +0000
ROA not before:           Wed 12 Aug 2026 12:46:47 +0000
ROA not after:            Thu 10 Mar 2033 12:46:47 +0000
asID:                     37182
IP address blocks:        41.93.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/og4gZ_DbeD3jcj4jFRfcfp_lutM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/og4gZ_DbeD3jcj4jFRfcfp_lutM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/og4gZ_DbeD3jcj4jFRfcfp_lutM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 03:17:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1416 (0x588)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366B0C9AF, serialNumber=A20E2067F0DB783DE3723E231517DC7E9FE5BAD3
        Validity
            Not Before: Aug 12 12:46:47 2026 GMT
            Not After : Mar 10 12:46:47 2033 GMT
        Subject: CN=6a7c6b3b-9c01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:5a:92:f1:68:71:86:3b:3d:80:c5:99:5c:84:
                    c9:8a:27:9f:4c:6a:8e:ac:22:02:f7:94:e2:97:10:
                    19:74:d9:6d:e9:e3:ca:6d:29:53:ee:92:aa:ac:55:
                    e2:7e:f5:69:c7:a8:ff:93:ae:c7:ad:fe:b3:75:4f:
                    b7:9f:16:c6:f0:37:ed:2c:cd:e9:c6:59:37:40:85:
                    e3:67:09:ee:ee:16:b2:3c:cf:8e:03:b8:e1:18:00:
                    fe:e9:0b:4f:71:06:7a:39:1f:49:e8:fe:5e:ab:86:
                    96:fc:bb:af:4c:a5:7b:76:3f:f9:44:2e:b8:fe:a3:
                    c0:06:47:95:52:33:6b:27:f5:f4:07:3d:fa:66:7c:
                    a4:9f:61:2c:a8:6c:d4:fc:0b:fc:84:5f:66:e8:a4:
                    15:9c:57:b3:77:8d:14:9b:15:8c:1c:cc:cb:2a:fe:
                    27:bf:fe:75:4e:7c:64:e8:cf:31:51:73:51:09:ad:
                    3d:07:af:f2:ad:c8:c4:5e:cd:06:e2:37:20:3f:54:
                    be:c0:cf:80:8d:57:c1:27:0c:16:51:7e:38:0d:f5:
                    84:2a:09:85:f4:74:57:d7:f2:a3:4a:ca:23:99:63:
                    ba:be:cc:19:05:49:c3:36:df:85:d6:e7:27:af:d2:
                    6d:49:13:c2:34:d3:e7:d1:ae:b4:23:cb:79:cd:53:
                    94:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:8C:C8:B0:DF:DD:08:AA:1A:15:21:CE:04:00:08:05:FC:12:60:00
            X509v3 Authority Key Identifier:
                keyid:A2:0E:20:67:F0:DB:78:3D:E3:72:3E:23:15:17:DC:7E:9F:E5:BA:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/og4gZ_DbeD3jcj4jFRfcfp_lutM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/og4gZ_DbeD3jcj4jFRfcfp_lutM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/E34E8CE4964B11F1BA3BC8ABCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.93.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:42:f6:b4:b2:10:23:09:24:9f:fb:dc:7f:86:6a:1d:20:f7:
         df:8c:05:e4:cb:9c:0e:d9:0a:76:8a:44:d5:9f:07:13:a8:12:
         bd:3d:7c:5b:55:87:f3:11:b9:70:5b:72:61:d6:27:a8:3f:0a:
         13:dd:52:6f:42:8a:32:03:0f:01:30:0b:fb:8b:7b:f0:54:5e:
         e5:42:48:62:89:ba:38:41:e3:a3:9c:9f:ab:d6:d5:cb:c4:fe:
         22:fd:98:fc:7e:2e:6a:9a:a4:f6:33:72:63:b7:18:fb:37:c5:
         15:ec:cc:3c:97:28:4e:4e:28:ae:75:52:1a:5f:ea:18:10:a8:
         d2:01:15:66:54:f2:1b:bc:d2:c8:36:23:6a:46:f9:20:7c:46:
         67:9a:7d:20:7f:dd:89:54:62:c6:e7:fe:7b:87:5e:1b:38:56:
         0c:eb:ea:1f:5e:3f:67:da:7b:af:f8:f3:f3:05:67:2f:da:c6:
         d2:3e:8b:ed:65:21:dc:06:dd:86:28:db:ba:65:a3:1d:3c:bb:
         59:e2:16:0f:94:d1:2f:fe:97:e8:c1:c1:6d:33:7f:6c:42:be:
         d8:60:8d:e5:88:34:75:7d:f4:f7:6d:61:3f:15:e6:a5:42:cf:
         58:3e:53:aa:51:b9:67:4d:21:ef:d2:b1:55:eb:bc:8b:89:19:
         5b:31:20:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----