Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F369C94E/E9D7D8AEE80D11EC977C9690F1222468/D10078C0962511F182917BC5CE1D38B0.roa
File:                     D10078C0962511F182917BC5CE1D38B0.roa (raw, json)
Hash identifier:          qZiwreEQ5AVLAxnIrMCbPDBr4h7nRd6VecR32M2XQCY=
Subject key identifier:   E0:4B:14:E1:AF:E5:29:0D:3F:DB:B5:D9:2A:6C:F4:37:71:43:5C:39
Certificate issuer:       /CN=F369C94EAF/serialNumber=8272C2B8B3B389EE2B7BBD4FBD5509676F3279BB
Certificate serial:       0643
Authority key identifier: 82:72:C2:B8:B3:B3:89:EE:2B:7B:BD:4F:BD:55:09:67:6F:32:79:BB
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/gnLCuLOzie4re71PvVUJZ28yebs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369C94E/E9D7D8AEE80D11EC977C9690F1222468/D10078C0962511F182917BC5CE1D38B0.roa
Signing time:             Wed 12 Aug 2026 08:14:19 +0000
ROA not before:           Wed 12 Aug 2026 08:14:15 +0000
ROA not after:            Wed 09 Jun 2032 08:14:15 +0000
asID:                     37280
IP address blocks:        41.76.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369C94E/E9D7D8AEE80D11EC977C9690F1222468/gnLCuLOzie4re71PvVUJZ28yebs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369C94E/E9D7D8AEE80D11EC977C9690F1222468/gnLCuLOzie4re71PvVUJZ28yebs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/gnLCuLOzie4re71PvVUJZ28yebs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1603 (0x643)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369C94EAF, serialNumber=8272C2B8B3B389EE2B7BBD4FBD5509676F3279BB
        Validity
            Not Before: Aug 12 08:14:15 2026 GMT
            Not After : Jun  9 08:14:15 2032 GMT
        Subject: CN=6a7c2b5b-c65e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:6a:bf:1c:be:8a:6f:e2:5c:23:b6:d4:89:a3:
                    18:36:33:70:be:f5:59:99:27:08:79:54:05:ec:a0:
                    2f:77:7a:9b:ef:61:2b:7c:31:36:3e:ee:8e:a4:1c:
                    7d:41:02:bd:5f:26:1d:3e:75:de:22:30:f4:70:30:
                    3d:2b:64:80:58:bd:4b:44:73:57:20:c1:64:01:d1:
                    1e:c7:0d:01:fe:21:76:46:c6:46:3d:5b:a5:8e:4d:
                    0d:f8:d5:10:50:f4:14:97:98:56:91:f3:7c:4f:f5:
                    3a:e4:72:e8:5e:ef:52:19:84:3a:37:ea:bb:83:2d:
                    c0:c3:7e:fd:6e:c6:35:ad:ae:ea:f5:77:39:ef:b7:
                    f1:d0:7d:64:04:0a:fe:81:20:0a:fc:f2:e4:60:79:
                    11:c3:1a:7a:2c:e4:55:1a:5d:56:83:a0:cb:1c:bc:
                    57:7b:50:df:c5:f5:fd:35:28:44:fe:ea:55:66:21:
                    5d:39:51:a0:0b:84:0b:b4:93:25:09:fa:57:c8:f7:
                    78:a6:a2:a7:61:62:a5:c9:dc:fb:58:ec:79:3f:96:
                    b7:71:ba:90:83:58:ac:f2:6e:3b:2b:3a:e8:75:c4:
                    27:e4:6f:10:8d:0c:ce:9b:79:c5:ab:61:88:56:ba:
                    a8:c7:95:13:40:ad:83:1a:63:60:da:d4:72:a6:8a:
                    85:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:4B:14:E1:AF:E5:29:0D:3F:DB:B5:D9:2A:6C:F4:37:71:43:5C:39
            X509v3 Authority Key Identifier:
                keyid:82:72:C2:B8:B3:B3:89:EE:2B:7B:BD:4F:BD:55:09:67:6F:32:79:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369C94E/E9D7D8AEE80D11EC977C9690F1222468/gnLCuLOzie4re71PvVUJZ28yebs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gnLCuLOzie4re71PvVUJZ28yebs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369C94E/E9D7D8AEE80D11EC977C9690F1222468/D10078C0962511F182917BC5CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.76.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cf:3e:4f:48:9e:73:1a:03:b1:d6:88:1c:d1:52:b7:9a:32:23:
         68:9a:4c:8d:df:40:c4:37:a2:1c:63:36:db:9c:b0:3f:18:e9:
         bd:59:93:35:21:af:ba:89:34:6c:78:47:fb:e1:01:b4:11:f6:
         99:fd:f9:d6:84:a6:7a:2f:b1:ce:75:d3:eb:fd:3e:54:9b:9f:
         7a:2c:e7:b6:a7:a5:8b:58:93:3a:72:6a:db:ce:d4:bf:9e:db:
         5c:00:dd:19:b7:5c:0f:ec:81:1a:a1:fa:f4:f4:dd:16:48:c1:
         e4:d6:b3:9e:f7:5c:6e:3e:82:19:a5:9a:4a:fc:8d:a5:0f:4a:
         1b:d1:8c:57:54:dc:a4:78:d7:8a:11:46:8f:89:a5:db:e1:9c:
         53:31:b3:8b:c3:6d:28:92:12:bf:54:c7:c4:30:ea:8c:fb:c7:
         bd:7e:f2:aa:90:f2:97:77:b2:c1:18:22:35:e8:01:b0:16:77:
         1a:f4:ab:4d:30:7e:32:b8:e6:6a:69:a3:1a:b0:d6:fb:c1:61:
         e5:30:3e:63:99:e1:46:46:8e:35:f6:41:6a:32:7a:75:93:f6:
         50:2b:30:53:a4:48:8a:c1:2c:ad:17:f8:85:df:80:06:20:5b:
         ba:1f:d7:9c:5a:fe:60:f8:46:91:51:42:a4:b5:51:ad:3c:09:
         dc:5e:08:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----