Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36303B6/AECF18CAC3BA11F198314B10CF1D38B0/7C30AAB0CC7411F1A79AB2F9CE1D38B0.roa
File:                     7C30AAB0CC7411F1A79AB2F9CE1D38B0.roa (raw, json)
Hash identifier:          3UNcBBTGXDGkBC19KfMrYNG02yB+9xZG2PC6lb7/20s=
Subject key identifier:   FE:EB:BD:BC:17:6C:F2:EB:0F:35:8F:BB:50:1A:FD:44:2F:88:7F:9C
Certificate issuer:       /CN=F36303B6AF/serialNumber=42BDA6FF50731DA757876349BD0DDF8A6A380D51
Certificate serial:       11
Authority key identifier: 42:BD:A6:FF:50:73:1D:A7:57:87:63:49:BD:0D:DF:8A:6A:38:0D:51
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Qr2m_1BzHadXh2NJvQ3fimo4DVE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36303B6/AECF18CAC3BA11F198314B10CF1D38B0/7C30AAB0CC7411F1A79AB2F9CE1D38B0.roa
Signing time:             Tue 20 Oct 2026 10:53:30 +0000
ROA not before:           Tue 20 Oct 2026 10:53:26 +0000
ROA not after:            Wed 31 Dec 2036 10:53:26 +0000
asID:                     37037
IP address blocks:        41.190.238.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36303B6/AECF18CAC3BA11F198314B10CF1D38B0/Qr2m_1BzHadXh2NJvQ3fimo4DVE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36303B6/AECF18CAC3BA11F198314B10CF1D38B0/Qr2m_1BzHadXh2NJvQ3fimo4DVE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Qr2m_1BzHadXh2NJvQ3fimo4DVE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 05 Nov 2026 06:03:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17 (0x11)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36303B6AF, serialNumber=42BDA6FF50731DA757876349BD0DDF8A6A380D51
        Validity
            Not Before: Oct 20 10:53:26 2026 GMT
            Not After : Dec 31 10:53:26 2036 GMT
        Subject: CN=6ad7482a-a1c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:99:61:da:10:10:6e:8e:40:30:42:09:43:76:
                    20:dc:a1:06:05:f0:ca:4e:eb:6e:28:14:c5:08:38:
                    b0:59:dd:f0:64:39:86:fe:a9:f4:a3:2f:e3:ea:12:
                    08:07:f5:3e:be:ec:b9:c0:75:e1:95:fc:f7:71:72:
                    7f:0d:d2:70:f0:3d:3a:da:19:38:78:f9:29:87:8e:
                    04:d7:65:fb:1a:55:4f:43:4f:e1:74:72:05:48:f2:
                    4c:e4:d5:97:da:35:d3:7f:ce:da:cc:1a:80:45:5b:
                    14:eb:53:61:00:26:7d:5c:8d:cd:56:c8:f8:34:f0:
                    34:51:e5:0a:77:80:c1:60:b9:37:b6:ee:61:e8:a7:
                    33:52:d4:ae:45:2b:f3:ab:58:c9:b0:40:c6:3a:af:
                    ba:2e:d8:58:ab:4d:38:f3:bd:42:13:af:b6:a3:bb:
                    5e:18:36:97:75:21:66:54:23:1a:70:a2:3f:93:f6:
                    14:c4:d6:5f:f4:a0:8f:e0:ff:18:c2:21:63:ca:2f:
                    b4:0b:b7:18:83:b5:b4:b5:a8:3b:9a:d3:a4:47:61:
                    fc:56:f4:0b:ef:81:ac:67:d0:e5:d4:3e:d5:73:a6:
                    0b:17:33:e8:a3:67:7d:54:f8:f5:bc:37:e6:73:12:
                    bb:92:7a:cf:c5:61:4e:e4:b2:34:da:a4:3e:29:f8:
                    56:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:EB:BD:BC:17:6C:F2:EB:0F:35:8F:BB:50:1A:FD:44:2F:88:7F:9C
            X509v3 Authority Key Identifier:
                keyid:42:BD:A6:FF:50:73:1D:A7:57:87:63:49:BD:0D:DF:8A:6A:38:0D:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36303B6/AECF18CAC3BA11F198314B10CF1D38B0/Qr2m_1BzHadXh2NJvQ3fimo4DVE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Qr2m_1BzHadXh2NJvQ3fimo4DVE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36303B6/AECF18CAC3BA11F198314B10CF1D38B0/7C30AAB0CC7411F1A79AB2F9CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.190.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:d5:88:c0:15:4c:3d:70:af:a3:4e:b1:da:b7:ef:d8:67:82:
         72:f6:41:75:77:39:4a:56:08:dd:98:e7:30:eb:ea:f0:d8:8e:
         22:02:1d:5f:4a:36:d8:7c:32:fe:f7:80:62:a3:a2:ec:64:de:
         d4:97:49:df:aa:03:72:7f:94:b4:79:58:84:2c:0a:28:aa:4f:
         6e:da:d3:34:20:9a:2e:14:b0:52:e0:81:44:ed:5d:cd:26:cc:
         04:51:ad:a4:2d:ef:50:6a:e0:d1:be:6c:a8:5c:f2:2f:d9:90:
         95:99:f1:30:53:e7:bd:c1:71:a6:c3:bf:ce:28:20:74:df:cb:
         cd:78:6a:1f:a5:e2:3d:aa:12:a4:0c:ff:2f:d2:4f:3c:3b:3c:
         9c:50:3c:e2:7b:b3:10:57:50:95:43:d4:f4:b9:ac:49:0c:f2:
         2a:3f:4a:25:ab:59:d3:eb:7f:24:bc:c2:f0:70:78:d1:e5:1e:
         b9:b5:01:9b:42:35:de:62:9f:a6:fd:5b:87:b9:34:3c:09:8c:
         52:78:b4:8d:be:da:4c:0c:8b:c3:ea:b4:70:e4:96:58:c1:29:
         2b:97:6d:70:1c:1c:ae:57:f3:7e:fd:09:38:bf:5d:ec:31:5a:
         a5:9b:8e:3d:fe:8d:97:16:70:13:d1:ee:b3:b2:20:45:d9:9e:
         92:f4:07:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----