Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3629FF7/EE6FA52ECD3511F1BD542AEBCE1D38B0/B37E972ECD8811F1B7CBC9F7CE1D38B0.roa
File:                     B37E972ECD8811F1B7CBC9F7CE1D38B0.roa (raw, json)
Hash identifier:          augC+sXpRzmsOp+dT2SuylWRuz4Dj+xmQYCJP0YAcAg=
Subject key identifier:   14:6B:10:40:97:E8:E1:78:6A:BD:27:EB:11:4E:6C:56:BC:42:41:54
Certificate issuer:       /CN=F3629FF7AF/serialNumber=4F6FA28C68ED3B94F7F1F4BFF5351DADDE2FA629
Certificate serial:       11
Authority key identifier: 4F:6F:A2:8C:68:ED:3B:94:F7:F1:F4:BF:F5:35:1D:AD:DE:2F:A6:29
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/T2-ijGjtO5T38fS_9TUdrd4vpik.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3629FF7/EE6FA52ECD3511F1BD542AEBCE1D38B0/B37E972ECD8811F1B7CBC9F7CE1D38B0.roa
Signing time:             Wed 21 Oct 2026 19:51:14 +0000
ROA not before:           Wed 21 Oct 2026 19:49:39 +0000
ROA not after:            Sun 21 Oct 2029 19:49:39 +0000
asID:                     37055
IP address blocks:        41.223.252.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3629FF7/EE6FA52ECD3511F1BD542AEBCE1D38B0/T2-ijGjtO5T38fS_9TUdrd4vpik.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3629FF7/EE6FA52ECD3511F1BD542AEBCE1D38B0/T2-ijGjtO5T38fS_9TUdrd4vpik.mft
                          rsync://rpki.afrinic.net/repository/afrinic/T2-ijGjtO5T38fS_9TUdrd4vpik.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 05 Nov 2026 00:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17 (0x11)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3629FF7AF, serialNumber=4F6FA28C68ED3B94F7F1F4BFF5351DADDE2FA629
        Validity
            Not Before: Oct 21 19:49:39 2026 GMT
            Not After : Oct 21 19:49:39 2029 GMT
        Subject: CN=6ad917b2-33d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:f6:a6:2c:39:84:17:b3:58:58:dc:55:3d:60:
                    8a:1e:bf:71:ac:42:c2:bc:82:dc:23:36:f8:5c:3f:
                    0c:ae:b8:a2:7c:a3:17:3d:41:78:5a:69:a1:47:44:
                    3f:9e:dc:82:ac:e9:0c:bf:d8:e1:38:26:4f:7b:a3:
                    9c:88:92:e4:d7:15:0d:4b:2c:a7:3e:13:11:95:e1:
                    32:c5:f6:da:3a:a6:95:5f:9d:f0:bb:98:e3:19:f9:
                    96:65:af:da:f3:20:aa:ab:d9:34:10:35:be:80:4e:
                    27:47:2f:3c:b6:db:ef:46:8f:91:8e:32:fd:0a:8a:
                    e6:e6:98:34:0f:53:b5:9b:f0:bf:26:54:43:02:5f:
                    f5:ea:f9:4b:2c:1e:de:d2:ee:17:e9:c4:3b:42:e7:
                    9a:43:20:43:e6:17:06:85:17:d7:7e:20:d6:67:b5:
                    44:6c:ed:b7:d7:cf:39:d2:74:3a:58:3b:d5:42:d6:
                    67:88:3e:a2:8a:07:86:09:e4:f3:a7:1e:83:66:01:
                    66:47:fc:34:49:a8:08:a5:a5:9c:02:8f:ca:49:96:
                    90:8c:fd:6f:ed:03:ff:c0:ef:25:9b:5c:78:0a:d6:
                    38:96:d9:95:9c:9a:e8:a4:bc:88:17:a2:86:d5:f3:
                    bb:11:9d:33:c8:b9:12:bf:67:fe:50:da:be:0a:ba:
                    00:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:6B:10:40:97:E8:E1:78:6A:BD:27:EB:11:4E:6C:56:BC:42:41:54
            X509v3 Authority Key Identifier:
                keyid:4F:6F:A2:8C:68:ED:3B:94:F7:F1:F4:BF:F5:35:1D:AD:DE:2F:A6:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3629FF7/EE6FA52ECD3511F1BD542AEBCE1D38B0/T2-ijGjtO5T38fS_9TUdrd4vpik.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/T2-ijGjtO5T38fS_9TUdrd4vpik.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3629FF7/EE6FA52ECD3511F1BD542AEBCE1D38B0/B37E972ECD8811F1B7CBC9F7CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.223.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3c:85:e4:df:af:7b:3b:ac:8f:dd:01:de:df:ff:3e:79:2d:9d:
         26:77:07:c2:4c:1c:a4:8c:9d:00:ad:00:7c:7b:b5:69:70:60:
         42:44:80:d9:87:ac:35:f3:45:0a:df:19:1b:f5:c5:d7:3f:98:
         25:dd:d2:fc:2e:29:06:aa:85:3c:38:71:21:4a:ad:19:1f:c6:
         5e:83:c0:ec:66:6b:b2:a2:33:e5:68:72:71:2e:ff:eb:75:1b:
         f9:ce:79:10:c7:3d:ff:22:91:99:3a:5b:b3:66:06:3f:12:8d:
         48:94:d7:0b:40:cc:53:7a:6e:c9:56:f4:7e:b1:3a:6d:1c:0e:
         a8:86:aa:ee:f1:03:72:cd:a4:42:aa:d2:59:7d:0f:5f:8d:79:
         b4:ca:6b:bb:e8:1a:45:98:91:01:43:4b:a2:80:ec:8c:3f:83:
         32:51:8c:35:8e:97:a2:81:16:cf:bd:88:ae:c9:ba:6a:d7:8d:
         d1:15:3c:c7:c8:53:be:dd:64:6e:28:c9:2c:4f:49:a4:fc:9a:
         28:5a:a0:6b:2c:24:e0:83:3a:bd:6f:47:61:86:9d:94:74:cb:
         dc:8f:92:54:82:e5:27:8d:e0:dd:7b:81:a9:ae:c0:75:4e:42:
         4a:12:71:ac:6a:ef:49:a3:20:ee:8d:28:d4:c9:41:c2:8d:78:
         ea:4b:17:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----