Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F367D0C5/29E381AEA48911ED81691E87F1222468/593D37C4CC4911F1B83A6CE3CE1D38B0.roa
File:                     593D37C4CC4911F1B83A6CE3CE1D38B0.roa (raw, json)
Hash identifier:          a9Pkhm+C2fyuHhtcOGhWgWXSlnw5q0kgMAyvd8YOCnM=
Subject key identifier:   A4:AA:EC:9C:D6:4E:02:56:2F:FD:CC:4B:8B:E2:12:6F:D6:BE:A6:C4
Certificate issuer:       /CN=F367D0C5AF/serialNumber=569245EDF8EF53DD25E0095A12485B170F10EC3E
Certificate serial:       058C
Authority key identifier: 56:92:45:ED:F8:EF:53:DD:25:E0:09:5A:12:48:5B:17:0F:10:EC:3E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/VpJF7fjvU90l4AlaEkhbFw8Q7D4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367D0C5/29E381AEA48911ED81691E87F1222468/593D37C4CC4911F1B83A6CE3CE1D38B0.roa
Signing time:             Tue 20 Oct 2026 05:44:43 +0000
ROA not before:           Tue 20 Oct 2026 05:44:27 +0000
ROA not after:            Sun 20 Oct 2030 05:44:27 +0000
asID:                     37284
IP address blocks:        41.74.64.0/20 maxlen: 24
                          154.127.64.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367D0C5/29E381AEA48911ED81691E87F1222468/VpJF7fjvU90l4AlaEkhbFw8Q7D4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367D0C5/29E381AEA48911ED81691E87F1222468/VpJF7fjvU90l4AlaEkhbFw8Q7D4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/VpJF7fjvU90l4AlaEkhbFw8Q7D4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 05 Nov 2026 00:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1420 (0x58c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367D0C5AF, serialNumber=569245EDF8EF53DD25E0095A12485B170F10EC3E
        Validity
            Not Before: Oct 20 05:44:27 2026 GMT
            Not After : Oct 20 05:44:27 2030 GMT
        Subject: CN=6ad6ffcb-5095
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:bf:8f:9d:1e:e0:20:6f:67:92:d4:85:98:64:
                    40:fa:d5:a4:b1:2f:ef:70:0b:91:c6:a6:f0:fb:3a:
                    2a:1a:a7:c5:b4:7a:fd:99:7f:1c:25:53:4a:9e:b7:
                    9e:c3:c0:41:71:f0:5b:66:ce:ce:e7:c6:cb:19:36:
                    b3:f7:19:3a:30:73:4d:25:a6:53:a0:dc:c6:75:60:
                    00:31:84:aa:fb:cc:f6:d6:95:e8:40:ce:c1:db:2a:
                    6c:1e:e6:94:73:bf:91:ba:e9:7c:e1:a6:64:af:63:
                    eb:87:ed:20:02:d1:7c:4c:7e:f6:7c:62:aa:76:2a:
                    05:85:a8:67:de:51:60:7d:79:d1:cb:85:45:94:af:
                    2f:40:fc:10:c7:5e:e2:0f:83:80:b1:8d:37:cb:65:
                    0a:36:2f:51:cd:64:14:e4:5f:08:46:b8:f1:24:89:
                    b6:e5:bc:01:f5:2b:4d:19:28:91:db:1d:b0:af:cd:
                    74:bc:95:ac:ce:bb:de:a6:78:15:ec:eb:d8:ca:e3:
                    e3:14:ee:eb:c2:de:21:50:22:33:c0:7b:07:aa:66:
                    91:75:96:e7:ba:55:7d:d1:c6:30:b5:1b:80:b4:36:
                    33:c7:f9:43:fc:d8:5b:3a:82:b3:fe:ae:f7:12:dc:
                    49:4e:08:4b:43:2c:86:30:bc:9e:d7:f7:94:3d:b2:
                    d9:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:AA:EC:9C:D6:4E:02:56:2F:FD:CC:4B:8B:E2:12:6F:D6:BE:A6:C4
            X509v3 Authority Key Identifier:
                keyid:56:92:45:ED:F8:EF:53:DD:25:E0:09:5A:12:48:5B:17:0F:10:EC:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367D0C5/29E381AEA48911ED81691E87F1222468/VpJF7fjvU90l4AlaEkhbFw8Q7D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/VpJF7fjvU90l4AlaEkhbFw8Q7D4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367D0C5/29E381AEA48911ED81691E87F1222468/593D37C4CC4911F1B83A6CE3CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.74.64.0/20
                  154.127.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         29:4e:91:86:22:db:e9:d3:bb:12:0c:77:8e:e2:42:a9:d0:bf:
         48:cd:2b:78:cd:2f:bc:e2:bf:78:75:b1:15:4d:61:bb:da:f2:
         6f:ce:c9:f2:19:19:d0:97:59:94:15:38:5c:dc:a5:a7:05:79:
         32:e3:5a:41:5b:7f:8b:5d:02:96:49:53:db:d6:20:0e:4b:de:
         f4:0c:1e:3c:7b:d8:c8:ee:06:14:81:22:29:5a:57:42:02:6f:
         f1:e3:7d:20:9a:70:1f:a7:35:00:8e:6d:18:a0:77:24:b7:2f:
         cc:68:c2:2f:94:de:03:06:cd:b1:f8:af:c2:e3:58:ff:60:9b:
         fc:2f:33:ab:bf:5f:47:b3:a3:95:c8:03:4f:26:c8:ba:98:12:
         2f:8b:37:ef:d4:5d:32:11:07:d3:8d:89:64:63:c9:3a:5b:3a:
         de:3e:a1:77:54:26:84:c3:98:47:62:46:67:47:bb:60:7c:11:
         da:54:08:a2:80:ef:6e:b9:6a:2a:f4:80:6a:ec:84:59:ed:f9:
         37:2a:47:20:f5:70:28:73:13:63:af:8e:2e:8f:ac:e7:49:41:
         67:21:10:8b:27:be:f0:de:ff:0f:51:dd:28:59:67:57:8a:cc:
         7c:ee:17:3f:f7:11:9f:11:6d:80:41:c6:7f:73:63:a4:ed:e4:
         e6:a8:71:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----