Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F364386B/58D5B756EE0511EC98EDA389F1222468/F132E838CDF411F19D9CC5CDCE1D38B0.roa
File:                     F132E838CDF411F19D9CC5CDCE1D38B0.roa (raw, json)
Hash identifier:          c8GrqWn1qpZmWwSUaQr4JBEdH1cx/JZOGcp0AELBsM4=
Subject key identifier:   8A:D1:ED:F3:57:16:3C:93:A0:6D:7B:0F:BB:58:FF:D6:B8:88:F7:FB
Certificate issuer:       /CN=F364386BAF/serialNumber=211E5B988632F53D4CC1220CE2930FED82D04C9C
Certificate serial:       0684
Authority key identifier: 21:1E:5B:98:86:32:F5:3D:4C:C1:22:0C:E2:93:0F:ED:82:D0:4C:9C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/IR5bmIYy9T1MwSIM4pMP7YLQTJw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364386B/58D5B756EE0511EC98EDA389F1222468/F132E838CDF411F19D9CC5CDCE1D38B0.roa
Signing time:             Thu 22 Oct 2026 08:45:33 +0000
ROA not before:           Thu 22 Oct 2026 08:45:29 +0000
ROA not after:            Wed 31 Oct 2046 08:45:29 +0000
asID:                     37035
IP address blocks:        41.204.133.0/24 maxlen: 24
                          2c0f:f0c0::/32 maxlen: 32
                          2c0f:f0c1::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364386B/58D5B756EE0511EC98EDA389F1222468/IR5bmIYy9T1MwSIM4pMP7YLQTJw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364386B/58D5B756EE0511EC98EDA389F1222468/IR5bmIYy9T1MwSIM4pMP7YLQTJw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/IR5bmIYy9T1MwSIM4pMP7YLQTJw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 31 Oct 2026 00:08:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1668 (0x684)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364386BAF, serialNumber=211E5B988632F53D4CC1220CE2930FED82D04C9C
        Validity
            Not Before: Oct 22 08:45:29 2026 GMT
            Not After : Oct 31 08:45:29 2046 GMT
        Subject: CN=6ad9cd2d-cd7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:2a:66:f1:fb:cf:68:38:d8:82:a0:a7:c5:a2:
                    db:2f:6e:eb:3b:44:63:76:57:bd:70:36:be:fd:69:
                    32:30:15:ab:b1:c4:77:87:a6:f7:7a:e9:19:cd:01:
                    35:76:e7:39:92:a8:17:e6:ad:1f:e7:24:b0:b0:71:
                    e4:b1:cf:45:cc:30:60:89:71:64:4a:92:22:64:1a:
                    0e:74:00:5b:63:49:de:d6:9f:c0:e9:72:3b:ba:cb:
                    aa:6e:50:a8:b8:8a:27:a3:9f:a7:0e:e0:25:b0:ed:
                    50:ce:69:78:f7:c5:05:88:55:43:38:10:09:80:80:
                    7f:9b:fd:3f:e0:31:86:dc:43:ec:8d:6e:8b:82:69:
                    90:29:80:3d:1c:12:48:74:b6:19:7a:a6:1b:dd:e0:
                    ce:ef:4e:e1:42:94:ff:2e:58:d7:d6:63:2d:90:bf:
                    21:ca:1b:80:45:e9:70:8d:db:a4:7f:17:33:07:c0:
                    92:66:5a:0d:36:0a:b8:b2:06:51:61:6d:77:da:a3:
                    24:d8:a1:ee:40:45:0f:97:45:93:af:65:d9:56:85:
                    7f:a3:d6:9e:29:7e:2e:52:c6:a9:9a:f6:71:d3:ce:
                    c4:af:a6:05:19:24:c1:da:99:7c:46:96:6c:6f:bf:
                    56:d8:d2:30:66:90:b6:7b:bc:05:81:79:e9:81:73:
                    e7:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:D1:ED:F3:57:16:3C:93:A0:6D:7B:0F:BB:58:FF:D6:B8:88:F7:FB
            X509v3 Authority Key Identifier:
                keyid:21:1E:5B:98:86:32:F5:3D:4C:C1:22:0C:E2:93:0F:ED:82:D0:4C:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364386B/58D5B756EE0511EC98EDA389F1222468/IR5bmIYy9T1MwSIM4pMP7YLQTJw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/IR5bmIYy9T1MwSIM4pMP7YLQTJw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364386B/58D5B756EE0511EC98EDA389F1222468/F132E838CDF411F19D9CC5CDCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.204.133.0/24
                IPv6:
                  2c0f:f0c0::/31

    Signature Algorithm: sha256WithRSAEncryption
         8f:f5:ca:c3:2b:2f:9b:19:ec:1d:9a:5a:93:e0:ae:2c:f2:f0:
         bc:f2:e7:0f:87:89:4b:fb:7e:c1:ff:36:8e:e3:37:aa:44:25:
         e0:c6:0c:b2:7d:03:d2:87:25:b2:4d:6d:e8:10:d9:26:32:93:
         71:4b:f5:80:1a:13:16:7f:d7:1b:10:a6:9b:59:fe:5c:f3:91:
         16:ab:00:4b:bb:6b:32:7e:39:02:4d:98:ca:1c:2d:40:1f:f6:
         0e:1f:bc:40:85:98:72:5f:83:aa:fc:8f:60:3e:95:36:5d:1f:
         de:4c:2a:d2:21:e8:03:3b:22:61:d7:ec:31:8d:85:67:b1:6a:
         e0:f0:8d:d8:55:75:a9:f7:97:ec:df:6e:2a:7b:12:24:2f:89:
         fc:7e:c3:fe:5f:d5:b5:50:3a:9d:13:94:7d:b7:2d:d4:38:2c:
         cd:11:d0:df:a5:99:12:fa:55:e2:2d:9c:a6:3d:bb:1d:ba:9b:
         d5:ba:62:ea:cb:af:90:fc:3a:70:cd:4c:68:48:29:10:a5:a1:
         be:06:18:05:96:d9:b8:39:f5:4c:5d:72:f9:c0:99:99:b6:87:
         d5:b2:51:9c:4e:11:76:b8:6a:6c:5f:e4:3b:2f:9b:ec:b5:61:
         c5:a8:c5:13:01:a7:c0:6c:1a:4c:39:94:f5:4e:0a:10:b7:41:
         0f:25:51:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----