Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F369C94E/E9D7D8AEE80D11EC977C9690F1222468/985212B2962611F1BB996FCBCE1D38B0.roa
File:                     985212B2962611F1BB996FCBCE1D38B0.roa (raw, json)
Hash identifier:          azA9FLKur7HtQYuVsDfj8+2Et39GkA9EuUV1YVQs4x4=
Subject key identifier:   96:6E:4E:AF:B3:F6:75:71:01:13:B6:4E:BA:2D:A1:3E:4C:C2:2B:8B
Certificate issuer:       /CN=F369C94EAF/serialNumber=8272C2B8B3B389EE2B7BBD4FBD5509676F3279BB
Certificate serial:       0649
Authority key identifier: 82:72:C2:B8:B3:B3:89:EE:2B:7B:BD:4F:BD:55:09:67:6F:32:79:BB
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/gnLCuLOzie4re71PvVUJZ28yebs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369C94E/E9D7D8AEE80D11EC977C9690F1222468/985212B2962611F1BB996FCBCE1D38B0.roa
Signing time:             Wed 12 Aug 2026 08:19:54 +0000
ROA not before:           Wed 12 Aug 2026 08:19:50 +0000
ROA not after:            Thu 10 Jun 2032 08:19:50 +0000
asID:                     37280
IP address blocks:        41.76.192.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369C94E/E9D7D8AEE80D11EC977C9690F1222468/gnLCuLOzie4re71PvVUJZ28yebs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369C94E/E9D7D8AEE80D11EC977C9690F1222468/gnLCuLOzie4re71PvVUJZ28yebs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/gnLCuLOzie4re71PvVUJZ28yebs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 05 Oct 2026 00:08:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1609 (0x649)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369C94EAF, serialNumber=8272C2B8B3B389EE2B7BBD4FBD5509676F3279BB
        Validity
            Not Before: Aug 12 08:19:50 2026 GMT
            Not After : Jun 10 08:19:50 2032 GMT
        Subject: CN=6a7c2caa-6a53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:b8:e0:33:0b:14:60:37:f8:f4:9b:ba:5d:85:
                    10:75:45:a6:6b:01:72:68:6d:73:f2:19:85:91:ba:
                    46:ee:38:94:ad:5b:ce:1a:6d:e0:fa:e7:ff:20:f6:
                    cf:f3:4f:70:14:aa:87:3b:2c:08:ce:11:7b:e0:5e:
                    b6:b6:3f:eb:a8:cd:fb:b4:9c:0b:c8:53:f7:8a:80:
                    83:3a:9b:e6:ae:d6:c2:3b:a1:cc:71:9a:93:e0:ec:
                    9c:1e:b5:89:e1:e2:e7:98:15:dd:63:de:57:2d:32:
                    1a:1d:5b:98:1d:ba:cb:16:b8:41:20:4c:03:5e:62:
                    98:62:70:4f:65:9c:b9:44:48:c8:c2:8e:46:ed:a4:
                    51:14:51:1f:04:28:2f:15:24:0c:e6:4d:2e:d8:f0:
                    7e:33:45:ae:db:f7:3d:2a:7c:c1:be:d7:9e:ee:7f:
                    49:20:2f:c5:2b:27:c8:aa:a5:be:95:15:ed:46:f4:
                    f3:69:a7:e6:ed:d9:a7:9b:46:bd:74:c2:13:2e:ce:
                    6c:9d:56:6d:ae:7c:06:41:e4:21:51:6d:20:45:6f:
                    c5:90:1e:3e:7c:57:b6:47:76:4c:6d:49:24:f0:44:
                    da:9e:ce:fa:ad:ea:eb:3b:b9:32:ac:b2:70:d3:7d:
                    dd:00:da:5b:45:82:64:7c:92:b0:89:e4:d8:67:c6:
                    75:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:6E:4E:AF:B3:F6:75:71:01:13:B6:4E:BA:2D:A1:3E:4C:C2:2B:8B
            X509v3 Authority Key Identifier:
                keyid:82:72:C2:B8:B3:B3:89:EE:2B:7B:BD:4F:BD:55:09:67:6F:32:79:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369C94E/E9D7D8AEE80D11EC977C9690F1222468/gnLCuLOzie4re71PvVUJZ28yebs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gnLCuLOzie4re71PvVUJZ28yebs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369C94E/E9D7D8AEE80D11EC977C9690F1222468/985212B2962611F1BB996FCBCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.76.192.0/21

    Signature Algorithm: sha256WithRSAEncryption
         56:50:58:af:88:af:b3:ab:e5:19:c4:0f:18:9c:77:70:10:00:
         c4:dc:e4:bd:ea:f6:e5:eb:c6:83:f2:ea:8b:8c:f5:73:d3:19:
         b6:01:4a:e2:00:05:56:9a:1f:69:7f:c9:1a:88:54:31:9a:10:
         55:c7:9f:dd:56:5f:0f:49:ea:63:e7:bc:30:bd:72:da:7a:33:
         72:85:73:1e:1e:6e:b9:19:69:5a:12:63:2e:f2:d3:e9:08:c6:
         2c:50:4c:99:fe:e3:77:d0:f5:82:1d:af:0a:35:f6:ac:8e:4e:
         8a:4f:2a:b1:b7:e2:77:79:1f:ce:06:13:e8:d2:02:e3:16:89:
         53:12:f6:8c:5a:70:cd:16:ff:8e:cf:1f:79:8a:77:71:71:25:
         a0:bf:23:55:ba:83:3a:89:9c:38:a0:c0:d7:bc:4b:fd:58:76:
         d0:4e:73:47:6e:73:9f:33:50:8a:06:f3:06:d7:01:2e:89:e0:
         d0:7a:3e:9f:2a:19:85:c4:6b:8a:6f:f6:2e:6e:30:de:7e:0d:
         96:ba:46:7d:33:fd:9b:01:ce:76:75:eb:5d:b4:f5:98:cb:44:
         a2:a8:b3:25:a1:3a:75:04:47:09:29:e8:8d:2e:e4:fa:8a:b3:
         b9:3e:cb:1e:c5:05:77:d4:8e:57:8d:21:a0:e7:d4:8a:c1:23:
         8b:08:84:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----