Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F361A88E/86D64BD2B91911F181EB6110CF1D38B0/24B89BE4BDB011F18F9D4704CF1D38B0.roa
File:                     24B89BE4BDB011F18F9D4704CF1D38B0.roa (raw, json)
Hash identifier:          pcaoC9JMipCpL0o+fPYmLKm+bNa7SS6GMm/D55dDlTY=
Subject key identifier:   DD:EB:A6:10:B4:29:DD:60:55:2D:06:A3:79:7C:B1:12:66:D3:FC:84
Certificate issuer:       /CN=F361A88EAF/serialNumber=ABC747703B3C3A6125056D1399878FAF84B990B9
Certificate serial:       0D
Authority key identifier: AB:C7:47:70:3B:3C:3A:61:25:05:6D:13:99:87:8F:AF:84:B9:90:B9
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/q8dHcDs8OmElBW0TmYePr4S5kLk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361A88E/86D64BD2B91911F181EB6110CF1D38B0/24B89BE4BDB011F18F9D4704CF1D38B0.roa
Signing time:             Thu 01 Oct 2026 15:52:46 +0000
ROA not before:           Thu 01 Oct 2026 15:52:41 +0000
ROA not after:            Fri 01 Oct 2027 15:52:41 +0000
asID:                     29032
IP address blocks:        41.220.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361A88E/86D64BD2B91911F181EB6110CF1D38B0/q8dHcDs8OmElBW0TmYePr4S5kLk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361A88E/86D64BD2B91911F181EB6110CF1D38B0/q8dHcDs8OmElBW0TmYePr4S5kLk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/q8dHcDs8OmElBW0TmYePr4S5kLk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 05:58:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13 (0xd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361A88EAF, serialNumber=ABC747703B3C3A6125056D1399878FAF84B990B9
        Validity
            Not Before: Oct  1 15:52:41 2026 GMT
            Not After : Oct  1 15:52:41 2027 GMT
        Subject: CN=6abe81cd-f62d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:48:db:b4:fe:17:c1:dd:b4:fb:b3:75:55:d7:
                    bc:13:15:ae:f5:7b:35:ae:99:ab:3b:21:75:71:b6:
                    e5:6a:3b:1c:cd:b9:41:3b:2d:1c:39:76:05:b4:f4:
                    05:12:62:8d:b3:ed:63:8c:4d:61:96:dc:f6:6b:e9:
                    77:8d:e7:0a:fd:fc:c5:81:6b:e0:0b:54:e5:95:91:
                    dc:10:e2:10:d6:9b:da:e4:6a:bc:91:fd:0e:48:6e:
                    ef:e6:5a:10:4f:ab:e7:50:7b:11:b0:c2:e0:ba:5a:
                    f3:e2:77:6d:ea:9c:13:f4:cc:a9:97:4a:5f:92:84:
                    2d:b6:77:6d:d3:99:43:53:63:03:86:f8:c5:a5:12:
                    26:ad:b2:e9:e3:b8:12:00:b4:c4:55:23:3c:3c:31:
                    fc:5d:e1:ca:e1:9b:2e:59:91:d0:f2:f7:5b:f9:66:
                    52:18:f6:9a:7e:42:9d:ec:95:f5:7d:5f:ad:cc:55:
                    b0:c0:e8:ea:09:c6:5c:f3:be:a9:ff:fa:5e:30:df:
                    19:04:1c:73:99:1a:df:bc:65:48:8c:f9:d4:f9:1e:
                    73:b0:96:48:24:ab:ea:0e:4e:5b:8b:f9:64:56:14:
                    3a:49:75:5b:7b:48:bf:e1:00:fb:5b:30:84:59:f1:
                    41:84:a2:c0:0e:f0:23:4a:84:a2:ca:3a:b4:b1:26:
                    4e:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:EB:A6:10:B4:29:DD:60:55:2D:06:A3:79:7C:B1:12:66:D3:FC:84
            X509v3 Authority Key Identifier:
                keyid:AB:C7:47:70:3B:3C:3A:61:25:05:6D:13:99:87:8F:AF:84:B9:90:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361A88E/86D64BD2B91911F181EB6110CF1D38B0/q8dHcDs8OmElBW0TmYePr4S5kLk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/q8dHcDs8OmElBW0TmYePr4S5kLk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361A88E/86D64BD2B91911F181EB6110CF1D38B0/24B89BE4BDB011F18F9D4704CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.220.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:6e:2c:5c:7c:e5:00:a9:df:10:c1:f8:7b:fd:09:6b:ef:89:
         41:cb:16:18:f6:eb:4b:29:07:91:db:4d:a5:bd:d3:50:c6:8c:
         1a:43:89:b7:80:2b:19:1f:82:3c:23:b5:c2:ef:18:0b:a2:eb:
         87:2c:81:cf:58:73:b8:fb:c0:4d:b2:ad:1c:17:4e:16:3d:8e:
         90:c4:2e:01:31:a6:35:49:e7:ee:f1:20:44:2b:a5:ef:62:f8:
         e8:82:17:91:cf:55:d6:38:95:34:a5:26:17:35:21:11:7b:34:
         b2:83:c3:d8:ce:b7:ef:d3:46:45:fc:6d:7e:eb:da:b3:5a:ea:
         e9:9e:e2:83:53:0f:03:1a:fb:39:ad:6a:82:60:c9:cf:9a:91:
         df:74:70:bd:46:18:ab:51:50:f7:79:92:33:01:5c:cf:6d:38:
         80:60:fc:77:4d:12:7f:fc:cd:ce:7d:f1:d2:f2:c1:7b:1d:87:
         bd:e7:d2:7d:d4:cb:d9:1b:53:90:20:13:ca:98:d4:e2:b8:76:
         85:41:57:0b:e1:c1:c1:ba:ba:eb:14:3f:fc:88:4c:6c:dd:ca:
         a8:70:75:47:a9:98:07:1d:12:98:b0:90:56:4e:ca:bb:ae:10:
         34:23:b3:9e:3f:68:c7:29:cc:38:5f:53:6c:40:69:dc:21:48:
         44:ce:c9:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----