Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/0BC8B692BE4511F1B22654DACE1D38B0.roa
File:                     0BC8B692BE4511F1B22654DACE1D38B0.roa (raw, json)
Hash identifier:          sh/gsNNuiqbZ/YpdKZhjy6RKfe6EmzEc6Xo2e13aGI0=
Subject key identifier:   82:6B:85:20:99:AA:12:9F:F7:D6:85:62:6B:A0:56:4C:F0:BD:04:B1
Certificate issuer:       /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial:       0CE5
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/0BC8B692BE4511F1B22654DACE1D38B0.roa
Signing time:             Fri 02 Oct 2026 09:38:39 +0000
ROA not before:           Fri 02 Oct 2026 09:38:35 +0000
ROA not after:            Thu 02 Oct 2036 09:38:35 +0000
asID:                     36916
IP address blocks:        41.180.128.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.mft
                          rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3301 (0xce5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3669D6BAF, serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
        Validity
            Not Before: Oct  2 09:38:35 2026 GMT
            Not After : Oct  2 09:38:35 2036 GMT
        Subject: CN=6abf7b9f-87f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:02:b3:fb:4e:37:8c:d5:60:12:36:81:6f:5a:
                    b5:60:65:e5:51:5e:c9:50:2b:80:3c:a2:0b:02:02:
                    e0:74:87:b5:87:85:6a:07:30:a4:f5:cc:3a:b2:8c:
                    52:e4:0e:5b:34:e4:e8:70:06:42:98:f6:b5:a2:12:
                    78:72:97:ba:15:98:c8:2e:63:d0:68:92:c2:03:4a:
                    cd:25:d2:af:5c:d7:aa:d4:05:af:d2:cd:9d:45:0f:
                    79:11:91:55:6b:31:14:7b:38:69:91:ab:0a:88:3c:
                    31:bd:3b:65:02:f9:6e:98:db:37:97:8d:f8:b7:4c:
                    25:70:1a:ae:3b:3f:8f:3a:a3:72:ec:93:60:74:ca:
                    4d:b8:8d:25:a6:e7:32:30:5e:0f:7e:d9:fc:47:23:
                    c0:00:e3:0f:64:9b:da:e6:a1:d1:6d:2a:e3:67:22:
                    ab:3d:b1:92:46:d8:ec:b9:d4:ad:85:fb:16:50:eb:
                    3e:90:39:c0:18:76:dd:93:2a:8f:46:20:11:aa:77:
                    ce:17:a5:6e:de:54:5f:4a:46:80:f3:bc:c8:0f:13:
                    64:b9:69:8e:d9:a7:2d:f7:bf:ca:39:6d:b6:5b:21:
                    75:81:14:6d:84:2f:ce:90:c2:47:ea:c3:08:c6:0e:
                    08:a3:97:14:96:c8:e1:21:da:c8:63:4e:7a:19:bf:
                    55:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:6B:85:20:99:AA:12:9F:F7:D6:85:62:6B:A0:56:4C:F0:BD:04:B1
            X509v3 Authority Key Identifier:
                keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/0BC8B692BE4511F1B22654DACE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.180.128.0/21

    Signature Algorithm: sha256WithRSAEncryption
         40:d2:5f:c0:14:c7:7a:fd:42:f5:6d:90:f9:40:ad:a1:3d:cc:
         66:a1:7a:51:9b:ca:13:b2:fa:ff:1f:8e:99:b7:99:16:c9:3c:
         9d:e8:e6:83:04:d9:6b:87:f6:c4:24:0f:a5:a3:5a:a8:84:f7:
         b6:2d:7d:e1:76:24:ab:2a:c6:2b:dc:2d:c8:71:01:c5:59:37:
         bc:11:17:fe:74:0d:3c:f3:df:48:a9:bc:3c:a3:d7:89:91:66:
         96:4a:37:53:dd:5f:16:3d:d7:5f:b6:ee:0d:13:38:02:5f:47:
         fc:6a:86:fc:04:34:37:4d:a9:af:9f:af:35:b5:ed:3f:8d:92:
         95:f5:0c:50:d0:66:54:94:a0:4d:1c:7d:13:bb:2e:61:fd:f2:
         41:32:02:a9:c7:8b:92:55:d6:a0:f7:6a:5a:9f:b9:ba:f8:ab:
         79:0b:e3:6d:ff:b5:e5:7f:63:cc:63:6d:fa:85:26:c8:7c:ea:
         a2:51:d8:74:02:12:87:c6:bd:0f:40:0a:18:c2:2b:95:a4:a4:
         84:2e:7c:f4:f2:d9:39:96:fe:a0:9b:d5:84:29:97:37:d5:03:
         da:4d:4f:9d:ce:1e:11:fd:9e:44:cc:a7:4b:d7:c0:33:59:7c:
         6e:b7:37:88:5d:e1:d9:f5:cb:df:06:cd:71:f0:7a:0c:b4:52:
         37:90:f0:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----