Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F369C94E/E9D7D8AEE80D11EC977C9690F1222468/CE1E54E8962411F1A72068BFCE1D38B0.roa
File:                     CE1E54E8962411F1A72068BFCE1D38B0.roa (raw, json)
Hash identifier:          R2CZNdQnuiZF5AcIv4DAPM1jIgHiwP8PJumaHo5AGno=
Subject key identifier:   F6:9B:F5:12:CC:93:CA:2E:71:3B:D3:E8:B0:EB:0D:2A:11:CB:BF:5A
Certificate issuer:       /CN=F369C94EAF/serialNumber=8272C2B8B3B389EE2B7BBD4FBD5509676F3279BB
Certificate serial:       063A
Authority key identifier: 82:72:C2:B8:B3:B3:89:EE:2B:7B:BD:4F:BD:55:09:67:6F:32:79:BB
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/gnLCuLOzie4re71PvVUJZ28yebs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369C94E/E9D7D8AEE80D11EC977C9690F1222468/CE1E54E8962411F1A72068BFCE1D38B0.roa
Signing time:             Wed 12 Aug 2026 08:07:05 +0000
ROA not before:           Wed 12 Aug 2026 08:07:01 +0000
ROA not after:            Wed 09 Jun 2032 08:07:01 +0000
asID:                     37280
IP address blocks:        41.76.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369C94E/E9D7D8AEE80D11EC977C9690F1222468/gnLCuLOzie4re71PvVUJZ28yebs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369C94E/E9D7D8AEE80D11EC977C9690F1222468/gnLCuLOzie4re71PvVUJZ28yebs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/gnLCuLOzie4re71PvVUJZ28yebs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1594 (0x63a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369C94EAF, serialNumber=8272C2B8B3B389EE2B7BBD4FBD5509676F3279BB
        Validity
            Not Before: Aug 12 08:07:01 2026 GMT
            Not After : Jun  9 08:07:01 2032 GMT
        Subject: CN=6a7c29a9-bf6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:49:07:d2:82:cc:33:aa:5d:10:80:e6:c1:dd:
                    9b:62:c0:55:89:ad:ca:a9:93:9e:04:2b:e1:3f:48:
                    6f:f2:8b:2f:ac:57:d1:32:9c:2b:03:2c:e3:ed:6c:
                    9e:64:7d:ca:fa:d3:6c:a5:07:8a:be:ee:cf:e1:99:
                    9e:f6:94:e8:55:f5:3e:6c:af:b7:2c:2f:f6:8f:de:
                    ec:db:4f:a9:9c:57:77:0f:d7:30:72:53:b1:a9:8f:
                    24:41:a0:ab:23:19:d8:ca:ea:b0:bf:79:72:36:4b:
                    01:99:af:55:3b:9c:6f:bb:85:c9:66:a4:b8:62:4f:
                    38:84:17:cf:5d:2e:1f:88:f7:c6:d7:39:de:b6:49:
                    c8:ec:11:74:7c:d0:4b:2a:87:1e:8d:fc:5f:2c:f3:
                    cc:b6:61:46:5b:24:3e:75:44:65:46:54:a3:d6:99:
                    f2:ad:57:3a:61:47:32:c9:11:99:50:93:29:53:10:
                    91:d3:5c:29:e1:09:0b:cd:67:ea:c6:24:73:18:dd:
                    eb:dd:08:be:87:b0:4c:55:28:6b:41:1a:99:77:f3:
                    89:c8:97:db:49:d0:f7:88:5d:9d:98:67:52:cf:f2:
                    93:ce:47:61:87:33:2b:6a:72:1e:7a:fa:d9:d2:4d:
                    8c:17:7c:13:df:31:98:f0:0c:98:7c:b8:ef:0e:59:
                    44:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:9B:F5:12:CC:93:CA:2E:71:3B:D3:E8:B0:EB:0D:2A:11:CB:BF:5A
            X509v3 Authority Key Identifier:
                keyid:82:72:C2:B8:B3:B3:89:EE:2B:7B:BD:4F:BD:55:09:67:6F:32:79:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369C94E/E9D7D8AEE80D11EC977C9690F1222468/gnLCuLOzie4re71PvVUJZ28yebs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gnLCuLOzie4re71PvVUJZ28yebs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369C94E/E9D7D8AEE80D11EC977C9690F1222468/CE1E54E8962411F1A72068BFCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.76.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:74:c9:02:cc:c7:58:af:a8:87:2d:e9:68:c0:0f:d3:1d:39:
         25:f5:83:4b:d7:22:1d:67:f6:29:0d:f6:87:6c:b6:8b:13:8a:
         19:5a:b3:5e:73:78:4d:3d:d3:f8:5b:ea:a0:04:c6:b9:ee:56:
         86:0e:ba:15:aa:25:86:c8:0f:b0:4f:47:b3:8d:6f:c4:09:93:
         0c:48:b1:f1:0d:99:a7:c1:62:f3:61:f2:fb:84:e0:c8:30:56:
         87:4c:5f:a4:27:ed:d7:46:7b:f6:7a:42:1c:8d:e5:c3:24:c2:
         31:ea:07:f8:a3:af:92:b6:b3:07:5a:05:e5:50:d3:17:3f:7b:
         f7:ef:9f:50:82:9e:01:52:64:62:14:8d:f0:79:ea:4f:ac:7f:
         4a:21:b0:fe:f7:ee:3d:3a:67:94:4d:b2:f9:a5:11:3d:c5:63:
         09:e6:cd:1e:fb:e1:f2:0e:8a:bd:df:df:e5:c0:1d:fc:2e:d4:
         f1:bd:c9:80:bd:d9:53:62:dc:d3:9f:6c:22:5f:fb:1a:78:d7:
         f1:80:88:6d:97:e6:bd:2b:74:ee:51:5e:e3:c6:fb:2c:3e:ba:
         4e:96:92:b0:62:59:9e:5d:6b:60:0b:06:0f:ad:76:40:ae:04:
         34:c0:d4:09:d8:41:38:da:52:27:df:a4:32:31:98:f0:06:6c:
         02:90:b2:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----