Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36505B2/541804E4347111EF9A875180762E951A/BDEC29CA919B11F1AD7E43C3CE1D38B0.roa
File:                     BDEC29CA919B11F1AD7E43C3CE1D38B0.roa (raw, json)
Hash identifier:          orjJ8rJ6sip9ETuYXH/EqMDUWi0EVMZEH1jhy65ixEA=
Subject key identifier:   23:33:24:15:3F:5E:12:23:B7:41:14:FD:05:94:2B:B9:89:C2:9E:4A
Certificate issuer:       /CN=F36505B2AF/serialNumber=16296889BFF031BF7FDE7367E2DEE93CB0080283
Certificate serial:       0334
Authority key identifier: 16:29:68:89:BF:F0:31:BF:7F:DE:73:67:E2:DE:E9:3C:B0:08:02:83
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Filoib_wMb9_3nNn4t7pPLAIAoM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36505B2/541804E4347111EF9A875180762E951A/BDEC29CA919B11F1AD7E43C3CE1D38B0.roa
Signing time:             Thu 06 Aug 2026 13:35:52 +0000
ROA not before:           Thu 06 Aug 2026 13:35:48 +0000
ROA not after:            Wed 06 Aug 2036 13:35:48 +0000
asID:                     31856
IP address blocks:        41.85.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36505B2/541804E4347111EF9A875180762E951A/Filoib_wMb9_3nNn4t7pPLAIAoM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36505B2/541804E4347111EF9A875180762E951A/Filoib_wMb9_3nNn4t7pPLAIAoM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Filoib_wMb9_3nNn4t7pPLAIAoM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 14 Sep 2026 00:08:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 820 (0x334)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36505B2AF, serialNumber=16296889BFF031BF7FDE7367E2DEE93CB0080283
        Validity
            Not Before: Aug  6 13:35:48 2026 GMT
            Not After : Aug  6 13:35:48 2036 GMT
        Subject: CN=6a748db8-3f10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:ab:70:05:4c:dc:3e:a9:16:8f:11:4f:ac:2a:
                    95:19:fd:0a:7b:84:05:17:17:35:4c:cd:6a:80:4e:
                    41:53:50:f0:7d:c0:53:58:00:02:5d:a6:83:85:a0:
                    68:4e:54:b3:81:ce:f7:cc:87:a1:8e:dd:8e:b5:c9:
                    d3:1d:14:82:f6:a8:5a:f4:a5:14:34:43:f5:9a:5a:
                    b5:db:c6:e6:05:5f:87:a3:25:cf:85:cd:96:0f:bb:
                    0a:33:dc:30:57:2f:c8:9f:49:aa:f6:d2:6f:a5:f0:
                    4b:78:02:7f:55:bc:a3:d1:c9:e8:fc:4c:0c:0e:3d:
                    cb:d3:a2:eb:4e:0f:87:be:c3:cd:ed:7f:1a:3b:16:
                    9a:19:d8:1e:19:35:55:05:a8:ec:8e:7c:f6:c8:15:
                    2b:1d:86:2b:e5:b6:31:3f:7e:8c:39:74:57:b3:15:
                    ad:5d:66:f8:fa:68:92:c1:57:5c:d2:a8:34:83:8a:
                    53:18:b3:77:db:1c:d7:6b:a1:46:c8:47:5e:ce:14:
                    66:9c:3a:c3:d2:a8:73:d8:47:97:99:69:53:be:cb:
                    e2:b0:86:47:79:4a:83:ad:af:a3:3a:98:9c:27:07:
                    1b:55:e4:f3:40:c4:f3:97:6e:d2:8b:2e:90:01:e4:
                    fa:ed:c5:1b:93:49:05:13:a8:ec:69:90:58:25:b5:
                    5d:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:33:24:15:3F:5E:12:23:B7:41:14:FD:05:94:2B:B9:89:C2:9E:4A
            X509v3 Authority Key Identifier:
                keyid:16:29:68:89:BF:F0:31:BF:7F:DE:73:67:E2:DE:E9:3C:B0:08:02:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36505B2/541804E4347111EF9A875180762E951A/Filoib_wMb9_3nNn4t7pPLAIAoM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Filoib_wMb9_3nNn4t7pPLAIAoM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36505B2/541804E4347111EF9A875180762E951A/BDEC29CA919B11F1AD7E43C3CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.85.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:d1:19:6b:34:99:99:f2:f5:47:2b:7a:1e:32:d4:bc:03:8e:
         a0:82:f6:64:27:3e:de:07:1e:26:55:0d:21:f1:a6:da:aa:c4:
         35:9a:19:92:0c:c8:09:26:72:b0:3e:c1:e3:ab:1c:d4:e0:74:
         5d:40:bc:c0:76:cd:64:1e:45:fb:27:a7:5b:95:04:50:29:b4:
         93:aa:3d:5b:e9:39:7e:d5:f4:98:34:b8:13:f4:2d:58:26:1c:
         4d:5e:ec:3b:7d:88:11:91:7a:b3:12:6b:44:79:6e:c6:e7:2b:
         c7:43:cb:f9:6f:bf:99:66:7d:b5:ce:87:be:7e:06:c7:d4:58:
         90:f7:2c:db:35:90:6c:de:c0:c6:c1:31:f2:54:6f:ee:59:b6:
         c0:1f:b3:c0:d8:4d:c2:af:0e:d9:59:0b:62:27:6e:b4:ff:56:
         93:23:8b:27:7c:16:33:e2:88:14:b7:31:a7:f0:96:ac:3d:12:
         5f:94:f2:cc:e9:0d:51:84:26:03:7b:89:5d:03:8c:0b:60:c5:
         3b:7d:7a:2a:04:4e:dd:46:b0:6f:c3:48:64:3c:7e:a8:80:55:
         3c:8c:74:c1:c4:64:4d:83:68:00:45:a8:e6:b4:62:9c:4f:7a:
         2e:bc:e2:7e:9b:54:3f:d2:b8:a0:00:06:4a:bc:5c:fb:dd:7d:
         bc:02:93:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----