Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F369C94E/E9D7D8AEE80D11EC977C9690F1222468/392B415C962411F1ACFA44BBCE1D38B0.roa
File:                     392B415C962411F1ACFA44BBCE1D38B0.roa (raw, json)
Hash identifier:          LxzFCi7JU4fjc8I/HMELOkIJrVr9JdHXpdpNxI6Cj2A=
Subject key identifier:   72:B7:88:5C:3C:2D:00:E7:AF:BD:68:45:57:13:8C:42:E7:88:22:10
Certificate issuer:       /CN=F369C94EAF/serialNumber=8272C2B8B3B389EE2B7BBD4FBD5509676F3279BB
Certificate serial:       0634
Authority key identifier: 82:72:C2:B8:B3:B3:89:EE:2B:7B:BD:4F:BD:55:09:67:6F:32:79:BB
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/gnLCuLOzie4re71PvVUJZ28yebs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369C94E/E9D7D8AEE80D11EC977C9690F1222468/392B415C962411F1ACFA44BBCE1D38B0.roa
Signing time:             Wed 12 Aug 2026 08:02:55 +0000
ROA not before:           Wed 12 Aug 2026 08:02:51 +0000
ROA not after:            Wed 09 Jun 2032 08:02:51 +0000
asID:                     37280
IP address blocks:        41.76.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369C94E/E9D7D8AEE80D11EC977C9690F1222468/gnLCuLOzie4re71PvVUJZ28yebs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369C94E/E9D7D8AEE80D11EC977C9690F1222468/gnLCuLOzie4re71PvVUJZ28yebs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/gnLCuLOzie4re71PvVUJZ28yebs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1588 (0x634)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369C94EAF, serialNumber=8272C2B8B3B389EE2B7BBD4FBD5509676F3279BB
        Validity
            Not Before: Aug 12 08:02:51 2026 GMT
            Not After : Jun  9 08:02:51 2032 GMT
        Subject: CN=6a7c28af-f8fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:e6:df:ae:2d:c9:09:6d:bf:f5:f5:f4:0f:82:
                    eb:60:02:b7:d1:a6:01:89:e7:b5:7c:8a:5b:18:e0:
                    70:77:34:89:74:17:6c:95:a6:88:35:05:42:61:0f:
                    46:8e:35:0b:ac:a9:d4:6c:64:cb:5e:9e:5d:65:6d:
                    46:fd:03:90:d6:0f:cc:a8:22:9f:15:ab:1b:2b:76:
                    16:54:36:08:fe:c7:90:3d:e2:c0:ef:b5:9b:a3:51:
                    26:94:b0:ee:1c:15:b9:5d:b1:a2:65:23:c2:a0:23:
                    82:b6:0e:1c:05:d3:79:7b:94:ad:1b:6c:6a:2f:37:
                    a2:60:e9:c0:46:d0:e0:b3:db:20:12:39:bd:57:25:
                    dc:03:28:e2:63:a2:91:e5:c4:35:85:3f:73:36:b4:
                    c5:00:f2:6a:6f:0f:93:f8:7a:67:d2:d9:e0:dd:d6:
                    f5:99:75:8c:26:6a:bb:10:e9:c7:6c:2f:d8:5c:d4:
                    e1:40:ad:61:9e:c8:e7:b3:31:ae:9b:50:53:16:1e:
                    df:3c:2b:96:d9:44:e2:5f:7e:3f:c5:12:fd:4f:7e:
                    a1:61:f9:51:66:66:df:ed:b3:73:fc:e6:d9:93:a2:
                    f4:2d:c6:0d:08:cb:99:e4:34:24:e1:0f:3a:29:b1:
                    bc:96:de:fd:ce:f8:58:12:48:6a:d9:ce:42:25:50:
                    06:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:B7:88:5C:3C:2D:00:E7:AF:BD:68:45:57:13:8C:42:E7:88:22:10
            X509v3 Authority Key Identifier:
                keyid:82:72:C2:B8:B3:B3:89:EE:2B:7B:BD:4F:BD:55:09:67:6F:32:79:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369C94E/E9D7D8AEE80D11EC977C9690F1222468/gnLCuLOzie4re71PvVUJZ28yebs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gnLCuLOzie4re71PvVUJZ28yebs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369C94E/E9D7D8AEE80D11EC977C9690F1222468/392B415C962411F1ACFA44BBCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.76.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:96:49:74:70:42:e9:81:fc:d6:a5:70:89:1e:92:c6:26:c8:
         ec:a1:b7:e2:03:e6:9e:fc:d5:dc:ba:67:ad:64:43:f0:9d:52:
         70:37:8a:58:06:b8:3b:5d:ce:a7:1a:ac:37:68:45:4c:17:a7:
         9f:98:b6:c8:29:c2:80:a2:74:21:00:0e:24:62:20:ab:ed:93:
         e3:ba:e1:ad:78:f1:d0:89:4b:e0:1b:80:83:79:01:8b:d7:5a:
         9a:b3:19:8c:15:e0:b7:c5:76:46:8c:9e:98:71:f8:ba:f1:02:
         b9:7c:3b:02:c8:52:a7:b3:f1:f5:93:be:3d:ce:93:59:22:51:
         bd:1f:0b:97:c7:df:84:17:7b:c0:14:a7:8e:ee:9d:51:41:7f:
         4b:cd:68:7c:b9:43:30:a6:a8:87:f7:8e:d6:3b:38:9f:b2:00:
         20:0d:4b:76:e2:98:0a:fb:89:5a:1e:74:de:fe:7f:32:c3:87:
         3b:55:c5:a4:40:c1:bc:8b:93:63:64:76:af:bd:50:84:53:b6:
         11:c4:bd:be:46:3f:18:c6:de:14:f2:01:d2:b6:e1:5c:41:31:
         94:e2:e6:f5:68:d5:ea:ff:28:f2:ce:a6:6e:9f:c6:78:30:9a:
         8c:4b:67:f7:54:2f:75:fb:5c:11:89:12:e7:6d:9f:4a:88:69:
         20:64:66:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----