Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F364386B/58D5B756EE0511EC98EDA389F1222468/2D026B62CDF111F18D36C1B5CE1D38B0.roa
File:                     2D026B62CDF111F18D36C1B5CE1D38B0.roa (raw, json)
Hash identifier:          eO5/PM2Arxyx1LSd9fhqBlKbSSjJVMQ1Z7zrM3cw4Mw=
Subject key identifier:   CC:11:DB:8F:70:80:FE:17:C3:F1:38:5B:E9:BE:05:93:E2:64:8C:2A
Certificate issuer:       /CN=F364386BAF/serialNumber=211E5B988632F53D4CC1220CE2930FED82D04C9C
Certificate serial:       0681
Authority key identifier: 21:1E:5B:98:86:32:F5:3D:4C:C1:22:0C:E2:93:0F:ED:82:D0:4C:9C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/IR5bmIYy9T1MwSIM4pMP7YLQTJw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364386B/58D5B756EE0511EC98EDA389F1222468/2D026B62CDF111F18D36C1B5CE1D38B0.roa
Signing time:             Thu 22 Oct 2026 08:18:35 +0000
ROA not before:           Thu 22 Oct 2026 08:18:31 +0000
ROA not after:            Wed 31 Oct 2046 08:18:31 +0000
asID:                     36930
IP address blocks:        41.204.133.0/24 maxlen: 24
                          2c0f:f0c0::/32 maxlen: 32
                          2c0f:f0c1::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364386B/58D5B756EE0511EC98EDA389F1222468/IR5bmIYy9T1MwSIM4pMP7YLQTJw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364386B/58D5B756EE0511EC98EDA389F1222468/IR5bmIYy9T1MwSIM4pMP7YLQTJw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/IR5bmIYy9T1MwSIM4pMP7YLQTJw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 30 Oct 2026 02:46:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1665 (0x681)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364386BAF, serialNumber=211E5B988632F53D4CC1220CE2930FED82D04C9C
        Validity
            Not Before: Oct 22 08:18:31 2026 GMT
            Not After : Oct 31 08:18:31 2046 GMT
        Subject: CN=6ad9c6db-4b00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:2a:21:b9:f1:5f:e3:7c:df:da:fa:95:af:83:
                    66:f7:bf:d4:38:14:25:3b:7d:8a:55:66:48:f9:9b:
                    da:76:d6:50:96:01:03:36:9a:8f:57:97:f0:3b:ac:
                    95:ee:1f:40:f4:8a:7d:f5:db:6c:13:22:ce:18:e5:
                    dd:cf:f1:59:72:a7:56:6a:1c:bc:d0:97:b3:37:3e:
                    15:f1:f4:84:18:20:8a:14:1e:0e:c6:d6:48:d7:d9:
                    c6:fa:7d:c3:b3:9c:f1:fd:8f:88:19:b3:df:0b:3e:
                    ee:39:db:dc:fc:fc:62:de:74:af:14:c0:fc:2e:92:
                    ab:e4:7b:e3:98:30:12:25:bc:48:6a:9a:af:d3:bd:
                    3e:cf:bd:99:84:3d:82:3e:57:b9:da:68:b3:f3:73:
                    7c:e6:7f:0c:d5:84:ff:07:97:d0:88:64:6f:f9:71:
                    25:fa:fc:b6:49:2b:76:5a:e3:e8:0d:4a:bf:9a:b1:
                    0b:d8:71:28:61:d4:db:52:88:02:58:b1:b2:83:bf:
                    b7:7f:2f:ea:8e:a0:ba:be:3b:1e:94:ec:35:76:7d:
                    6e:09:43:3b:93:7a:0c:d9:92:25:e6:0b:63:48:c1:
                    06:54:6f:73:ab:3c:7d:60:b0:7e:35:81:53:53:4c:
                    7a:09:14:9e:ce:91:d9:14:f7:68:c3:91:11:de:f9:
                    95:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:11:DB:8F:70:80:FE:17:C3:F1:38:5B:E9:BE:05:93:E2:64:8C:2A
            X509v3 Authority Key Identifier:
                keyid:21:1E:5B:98:86:32:F5:3D:4C:C1:22:0C:E2:93:0F:ED:82:D0:4C:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364386B/58D5B756EE0511EC98EDA389F1222468/IR5bmIYy9T1MwSIM4pMP7YLQTJw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/IR5bmIYy9T1MwSIM4pMP7YLQTJw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364386B/58D5B756EE0511EC98EDA389F1222468/2D026B62CDF111F18D36C1B5CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.204.133.0/24
                IPv6:
                  2c0f:f0c0::/31

    Signature Algorithm: sha256WithRSAEncryption
         5f:ee:6a:4e:4c:8e:29:91:ed:91:08:b0:16:80:4e:dd:5a:51:
         21:cc:61:6c:9a:a2:8f:0d:8c:8f:5a:15:c8:3d:ab:b4:e1:02:
         a2:43:6e:90:38:b1:31:65:07:88:45:5d:83:8e:93:2a:83:04:
         6b:9f:4b:5a:23:40:da:70:09:91:bb:65:2c:01:7c:c4:e7:6f:
         98:d3:10:66:8e:2d:19:e7:19:01:91:6b:52:88:8c:fe:3a:d8:
         7b:e1:c3:dc:f6:c6:67:5e:06:a5:50:71:b9:2f:37:f4:6d:12:
         76:73:aa:4c:6d:95:78:67:e8:12:ae:cd:92:cb:16:e5:30:5b:
         a2:5a:b8:bf:ac:14:40:72:bc:64:d2:b0:44:6a:a1:eb:98:bf:
         96:37:93:16:3b:00:17:6d:de:6f:51:82:3f:34:20:ed:2f:da:
         1c:a5:b1:b4:10:13:6f:c9:78:01:8c:0c:fe:0b:65:96:a9:e7:
         7d:6b:43:8e:90:c9:b6:01:66:a4:a7:fd:29:e9:44:0c:63:a6:
         a3:ec:2b:91:bf:42:00:15:b5:cb:ce:61:d2:bd:cb:10:f7:84:
         54:5d:e0:d7:a5:ea:88:40:b4:9c:ef:6e:36:12:06:44:7e:5f:
         25:cc:dc:cb:42:cc:1d:66:63:dd:a3:8a:13:64:10:7f:c1:09:
         86:72:4f:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----