Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3629FF7/EE6FA52ECD3511F1BD542AEBCE1D38B0/2AF76868CD5111F1AC41F718CF1D38B0.roa
File:                     2AF76868CD5111F1AC41F718CF1D38B0.roa (raw, json)
Hash identifier:          BKcesv22fXr5hHfsb/9hhQmBbOcc1B3MHmXpwRxfpFI=
Subject key identifier:   31:1A:05:13:D4:A5:83:7B:14:E7:43:C6:9A:3A:98:F1:64:14:84:0D
Certificate issuer:       /CN=F3629FF7AF/serialNumber=4F6FA28C68ED3B94F7F1F4BFF5351DADDE2FA629
Certificate serial:       05
Authority key identifier: 4F:6F:A2:8C:68:ED:3B:94:F7:F1:F4:BF:F5:35:1D:AD:DE:2F:A6:29
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/T2-ijGjtO5T38fS_9TUdrd4vpik.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3629FF7/EE6FA52ECD3511F1BD542AEBCE1D38B0/2AF76868CD5111F1AC41F718CF1D38B0.roa
Signing time:             Wed 21 Oct 2026 13:13:12 +0000
ROA not before:           Wed 21 Oct 2026 13:13:09 +0000
ROA not after:            Sun 21 Oct 2029 13:13:09 +0000
asID:                     37055
IP address blocks:        41.222.228.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3629FF7/EE6FA52ECD3511F1BD542AEBCE1D38B0/T2-ijGjtO5T38fS_9TUdrd4vpik.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3629FF7/EE6FA52ECD3511F1BD542AEBCE1D38B0/T2-ijGjtO5T38fS_9TUdrd4vpik.mft
                          rsync://rpki.afrinic.net/repository/afrinic/T2-ijGjtO5T38fS_9TUdrd4vpik.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Nov 2026 06:03:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3629FF7AF, serialNumber=4F6FA28C68ED3B94F7F1F4BFF5351DADDE2FA629
        Validity
            Not Before: Oct 21 13:13:09 2026 GMT
            Not After : Oct 21 13:13:09 2029 GMT
        Subject: CN=6ad8ba68-180a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ca:52:6d:a9:c6:eb:53:23:ee:40:e5:85:22:
                    18:6c:ad:39:53:29:de:6c:b1:24:ee:61:dc:c7:31:
                    bd:57:9e:94:ce:56:83:ed:7d:5d:75:92:84:60:14:
                    59:36:bc:c8:70:0d:54:27:78:b2:b5:9b:e8:fd:a7:
                    85:33:59:45:24:a9:2c:78:9a:f0:7a:2b:e6:8d:bc:
                    e5:e0:0d:0c:23:7e:22:ef:8c:c5:45:4f:c2:ef:cb:
                    83:e2:b2:98:aa:5e:52:ff:be:76:96:78:a9:b6:28:
                    6d:86:18:d9:bc:a3:b2:55:0a:c3:8b:11:ce:72:f2:
                    6c:41:59:84:c4:98:ec:7b:5f:22:4e:f5:be:87:c6:
                    62:ed:3a:50:ef:e6:f6:68:7c:70:b7:c3:72:2c:55:
                    3d:b7:8b:09:8c:10:62:8b:1c:1f:0b:8a:3e:0e:8a:
                    e6:0a:ed:c2:84:c4:c5:71:c9:0f:3c:fc:0e:ed:d2:
                    b0:b2:7a:20:1e:e6:a7:4d:b3:f6:2c:41:6f:24:a7:
                    30:7c:95:0d:1d:1c:de:6e:76:dd:1a:67:62:fc:6a:
                    b6:e0:78:b5:9a:29:0c:93:07:78:f1:dc:b6:ba:24:
                    2c:ac:59:29:af:a0:17:25:93:3c:bf:70:6c:cf:20:
                    6e:62:f3:97:9b:72:a0:bc:af:f6:ee:b1:2b:48:ba:
                    29:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:1A:05:13:D4:A5:83:7B:14:E7:43:C6:9A:3A:98:F1:64:14:84:0D
            X509v3 Authority Key Identifier:
                keyid:4F:6F:A2:8C:68:ED:3B:94:F7:F1:F4:BF:F5:35:1D:AD:DE:2F:A6:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3629FF7/EE6FA52ECD3511F1BD542AEBCE1D38B0/T2-ijGjtO5T38fS_9TUdrd4vpik.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/T2-ijGjtO5T38fS_9TUdrd4vpik.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3629FF7/EE6FA52ECD3511F1BD542AEBCE1D38B0/2AF76868CD5111F1AC41F718CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.222.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         19:e6:a4:be:e1:14:9c:0e:3a:d3:4f:9c:f5:37:c4:09:ee:ef:
         d6:dc:5e:03:b0:b8:bb:5b:3e:b4:27:a8:45:20:03:39:52:59:
         04:90:85:11:82:90:0e:ad:d5:dd:df:f7:ff:b6:76:c5:14:25:
         48:9b:67:42:7f:46:0b:27:0b:f9:da:d0:80:fe:ea:cd:a8:9c:
         6c:e6:62:16:70:1f:c0:3b:92:89:e1:7f:e0:cd:28:5a:f7:e8:
         11:1a:4d:1d:b5:34:a5:5a:18:28:ed:2b:32:73:35:14:01:53:
         86:a6:70:99:7f:c8:07:40:b5:b7:ed:cc:1c:34:25:bd:a6:56:
         b9:f5:98:36:4c:2d:45:3e:54:c0:8c:17:48:47:18:51:0c:79:
         0a:e4:f7:fa:23:ed:b6:7b:65:bb:4a:13:81:55:4e:b0:03:c8:
         ef:37:f5:6a:f6:4c:24:22:19:01:67:a4:15:b7:f5:60:33:17:
         a0:1f:f3:73:49:ba:b9:cf:18:1e:16:78:0b:01:af:07:37:32:
         e5:4d:2f:2e:35:18:3d:aa:ba:fb:fc:7e:bc:f0:38:e7:5f:fd:
         ed:59:55:4d:5e:71:59:58:0f:f7:d6:24:44:f6:88:06:cc:e8:
         29:21:5e:4d:b8:d9:85:55:85:cb:34:f2:30:bf:5c:49:f2:14:
         35:11:a4:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----