Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36303B6/AECF18CAC3BA11F198314B10CF1D38B0/538AEEEACC7411F1928864F9CE1D38B0.roa
File:                     538AEEEACC7411F1928864F9CE1D38B0.roa (raw, json)
Hash identifier:          Ek4o8gDndgzgoGp8D74Lcua6Yw8tCl1Qn/XiI78/aCI=
Subject key identifier:   9B:0A:7F:5F:3D:D4:A7:5A:3B:56:76:D3:1A:8D:24:67:59:61:36:31
Certificate issuer:       /CN=F36303B6AF/serialNumber=42BDA6FF50731DA757876349BD0DDF8A6A380D51
Certificate serial:       0F
Authority key identifier: 42:BD:A6:FF:50:73:1D:A7:57:87:63:49:BD:0D:DF:8A:6A:38:0D:51
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Qr2m_1BzHadXh2NJvQ3fimo4DVE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36303B6/AECF18CAC3BA11F198314B10CF1D38B0/538AEEEACC7411F1928864F9CE1D38B0.roa
Signing time:             Tue 20 Oct 2026 10:52:22 +0000
ROA not before:           Tue 20 Oct 2026 10:52:17 +0000
ROA not after:            Wed 31 Dec 2036 10:52:17 +0000
asID:                     37037
IP address blocks:        41.190.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36303B6/AECF18CAC3BA11F198314B10CF1D38B0/Qr2m_1BzHadXh2NJvQ3fimo4DVE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36303B6/AECF18CAC3BA11F198314B10CF1D38B0/Qr2m_1BzHadXh2NJvQ3fimo4DVE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Qr2m_1BzHadXh2NJvQ3fimo4DVE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 06 Nov 2026 06:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15 (0xf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36303B6AF, serialNumber=42BDA6FF50731DA757876349BD0DDF8A6A380D51
        Validity
            Not Before: Oct 20 10:52:17 2026 GMT
            Not After : Dec 31 10:52:17 2036 GMT
        Subject: CN=6ad747e6-8d75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:21:a3:7f:61:ce:02:ac:51:05:bc:ed:ac:ff:
                    00:db:69:37:97:fe:2e:a1:52:4c:d9:38:b3:2e:08:
                    67:49:d0:97:6f:89:24:ac:77:67:5f:13:54:47:07:
                    9d:55:10:68:f1:71:12:b5:18:3f:fe:83:c4:92:7d:
                    34:cf:06:98:f8:67:d2:90:da:32:2c:90:98:e1:9a:
                    24:88:b1:d1:6c:a0:48:40:57:db:7f:07:9c:ff:72:
                    8b:9d:8a:bc:e4:ea:d4:92:a7:ec:2b:27:6d:a3:bb:
                    5a:e4:ad:e9:26:e5:0a:db:2a:1e:34:6e:0e:b6:6f:
                    c5:40:38:b3:81:a2:95:04:68:e8:3a:e1:70:cb:48:
                    44:a9:c4:53:f4:55:50:92:38:db:b0:ad:45:52:36:
                    3b:38:67:02:c4:8b:d3:0c:26:3f:f9:87:29:a4:f0:
                    ac:4d:0b:25:90:ef:94:0f:0a:41:71:ca:14:bb:3d:
                    18:a1:c9:70:3e:f8:3a:ae:6d:78:20:fc:0f:77:76:
                    15:e7:79:20:98:0c:b8:5c:94:b5:cb:4d:c7:af:9e:
                    38:71:26:47:99:4f:fe:3c:a1:51:7a:a9:5e:82:43:
                    c5:4e:99:bf:ba:d5:b7:05:45:f7:2a:7f:7c:59:37:
                    85:23:1d:b7:10:06:a1:9d:b2:4a:27:fb:5a:f0:7e:
                    a8:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:0A:7F:5F:3D:D4:A7:5A:3B:56:76:D3:1A:8D:24:67:59:61:36:31
            X509v3 Authority Key Identifier:
                keyid:42:BD:A6:FF:50:73:1D:A7:57:87:63:49:BD:0D:DF:8A:6A:38:0D:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36303B6/AECF18CAC3BA11F198314B10CF1D38B0/Qr2m_1BzHadXh2NJvQ3fimo4DVE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Qr2m_1BzHadXh2NJvQ3fimo4DVE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36303B6/AECF18CAC3BA11F198314B10CF1D38B0/538AEEEACC7411F1928864F9CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.190.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:c8:61:de:7b:00:e1:ca:1a:30:1d:03:17:28:f9:33:83:62:
         cc:6a:9c:95:2c:69:40:4c:bf:95:df:67:50:fb:be:32:0d:ef:
         c8:50:13:a5:46:d5:a0:9b:ea:b8:f5:4d:d0:67:38:11:d1:bc:
         03:2d:d4:e7:bf:32:b4:0b:3a:89:8b:fa:c9:9e:3b:1d:aa:f0:
         e1:24:e6:6d:9e:bc:f9:1b:cf:6d:3f:ee:50:50:e7:97:18:d1:
         3b:3f:18:e8:ba:7c:39:c8:3d:3f:34:74:04:89:27:7e:2e:e0:
         bd:94:fd:18:55:54:c8:e1:4e:46:75:f0:cd:62:92:fe:ca:0f:
         ea:11:e7:be:56:a3:e0:8c:7d:14:7c:c0:57:51:c8:ea:07:28:
         08:6b:96:eb:f0:9a:99:44:31:51:c9:c7:9c:37:cd:0d:f9:4b:
         66:46:9e:14:9a:19:61:e7:ea:44:83:05:be:08:26:2e:55:9a:
         e0:b0:9d:00:21:69:44:a8:e8:47:07:c7:0d:c2:07:c5:a5:a8:
         e6:80:34:13:38:17:1e:a9:47:1c:8a:93:d7:52:ec:ad:f5:35:
         be:da:e0:bf:49:9e:0e:a8:98:54:b6:e1:0a:79:22:3a:4c:37:
         b0:56:8b:a5:cf:db:2b:e6:d1:ab:50:35:7d:9e:a1:be:19:57:
         3d:d5:4e:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----