Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/E77534C88A3711F1B2B2FBC1CE1D38B0.roa
File:                     E77534C88A3711F1B2B2FBC1CE1D38B0.roa (raw, json)
Hash identifier:          yziUiooyXrsUvndGzdM8BJHLbvwfCsSTiTgJ/ok16eU=
Subject key identifier:   AE:23:04:89:1B:B9:06:7E:D2:5B:58:FA:AA:23:F0:DD:90:C0:AC:50
Certificate issuer:       /CN=F367B216AF/serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Certificate serial:       09EA
Authority key identifier: 2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/E77534C88A3711F1B2B2FBC1CE1D38B0.roa
Signing time:             Tue 28 Jul 2026 03:53:34 +0000
ROA not before:           Tue 28 Jul 2026 03:53:29 +0000
ROA not after:            Wed 31 Aug 2033 03:53:29 +0000
asID:                     20011
IP address blocks:        197.95.0.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 31 Jul 2026 00:07:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2538 (0x9ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367B216AF, serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
        Validity
            Not Before: Jul 28 03:53:29 2026 GMT
            Not After : Aug 31 03:53:29 2033 GMT
        Subject: CN=6a6827be-1a12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c4:1b:90:e2:83:9d:a3:ba:99:4c:7f:14:2d:
                    7c:56:4a:70:8c:01:d6:76:e0:f6:28:f2:20:f1:68:
                    c2:b3:00:69:04:fd:4c:2e:f0:f9:ee:9d:3e:84:8d:
                    a8:6e:86:b9:fd:f1:f9:94:1c:4a:7b:2a:8c:68:9f:
                    9c:af:22:32:7f:ef:92:dc:53:1f:8f:0d:29:dc:5a:
                    71:45:a0:d5:34:fe:e6:7b:82:72:46:6f:7c:a5:4a:
                    3e:09:59:29:e2:6c:ba:cb:69:0c:20:cd:85:15:94:
                    9f:f8:01:81:44:c4:bf:78:10:12:85:28:ec:43:3f:
                    ad:d4:79:3f:e1:36:56:b7:52:a2:78:32:22:b7:c0:
                    4f:85:1b:70:24:a8:0c:d3:e3:cf:c8:75:9c:3b:c6:
                    ea:c5:19:ac:50:b1:10:98:c1:60:24:63:cb:fe:57:
                    60:fb:29:e5:66:7b:dc:0d:b7:e4:f0:05:b2:58:25:
                    74:15:a7:5c:13:01:7f:fd:c4:94:3e:64:64:d9:47:
                    81:59:f0:52:7d:64:7b:ea:e4:4c:f0:20:9c:61:24:
                    d8:ef:03:ba:4c:8f:08:2d:41:77:db:35:ef:2b:2e:
                    9e:31:e2:c2:b9:ae:4d:6a:0d:bf:16:64:3c:95:ca:
                    31:6c:8d:d5:fe:54:43:5b:82:cd:b6:b9:50:b2:1b:
                    ff:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:23:04:89:1B:B9:06:7E:D2:5B:58:FA:AA:23:F0:DD:90:C0:AC:50
            X509v3 Authority Key Identifier:
                keyid:2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/E77534C88A3711F1B2B2FBC1CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  197.95.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         9b:1d:5a:ef:82:9e:c7:25:52:da:ad:12:5b:69:8c:e0:67:2e:
         07:b7:1d:bd:c0:fc:bc:ff:d7:69:e1:0e:ff:90:2a:da:0d:68:
         58:11:08:ba:6f:64:b5:98:5c:fd:ce:7f:6e:63:0f:2b:da:3c:
         46:18:a5:3e:3f:d9:e3:11:bc:f1:a7:54:95:29:e0:ad:00:54:
         66:76:63:4e:17:ba:a1:85:45:c1:aa:f5:68:81:e7:b6:46:72:
         8b:0c:ff:20:25:7a:2b:c5:d4:97:3a:50:99:07:16:7c:58:a7:
         ba:41:9c:d2:32:f7:b2:84:f5:79:f5:5c:b7:7d:0b:4f:ee:2b:
         63:0e:45:10:8c:4e:af:ab:e6:9a:3c:9c:c3:aa:6a:a3:65:9a:
         03:a9:df:2d:ab:50:d9:08:12:f8:7f:80:85:bd:10:9b:f8:8f:
         ba:dd:53:39:4a:8d:a1:ec:19:54:fb:b6:4c:ed:79:cb:9a:72:
         1a:88:2b:3c:cc:8b:91:b2:91:dc:35:1a:bf:b8:bd:d5:8e:12:
         5d:7b:8b:f6:36:08:8e:ff:61:cd:06:f2:a7:70:97:23:56:5f:
         18:08:c5:89:dc:f7:f0:30:2d:0f:36:c1:73:0a:e1:47:8a:2b:
         86:c4:31:09:d0:97:bc:49:29:91:3b:01:d0:c1:01:f7:80:c1:
         73:d8:b8:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----