Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/78D1B45EBE4611F1B61240E3CE1D38B0.roa
File:                     78D1B45EBE4611F1B61240E3CE1D38B0.roa (raw, json)
Hash identifier:          VuWumHBjcgDNKIzIYaXY9NvuDCHz1rjg1RUli+XIoFc=
Subject key identifier:   27:FE:EA:77:97:2E:2F:81:F2:34:C9:FD:CA:1D:C1:5D:19:AC:C3:68
Certificate issuer:       /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial:       0CF7
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/78D1B45EBE4611F1B61240E3CE1D38B0.roa
Signing time:             Fri 02 Oct 2026 09:48:51 +0000
ROA not before:           Fri 02 Oct 2026 09:48:47 +0000
ROA not after:            Thu 02 Oct 2036 09:48:47 +0000
asID:                     36916
IP address blocks:        41.180.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.mft
                          rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3319 (0xcf7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3669D6BAF, serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
        Validity
            Not Before: Oct  2 09:48:47 2026 GMT
            Not After : Oct  2 09:48:47 2036 GMT
        Subject: CN=6abf7e03-77d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:a3:fb:7a:9c:0c:f2:e5:e7:b6:05:74:23:72:
                    ed:38:02:38:b1:4c:ff:6e:db:73:7e:4a:9c:8a:d6:
                    16:9f:66:0d:e0:5c:67:b7:75:bb:ed:5f:f7:af:e7:
                    58:13:40:95:c8:b5:f9:06:88:fe:4d:b4:1c:95:a3:
                    e8:a5:a3:13:40:e3:e8:37:72:b0:16:17:a9:b4:5d:
                    a2:58:32:3e:d6:08:d9:e0:93:2b:ac:83:a7:3e:64:
                    15:1b:17:86:ec:57:8d:55:e7:a9:4d:fe:f3:72:62:
                    57:04:0d:48:7c:8c:c6:52:97:8b:2e:90:a7:bb:40:
                    b8:5f:ab:47:9f:e0:08:1c:11:8c:39:b0:e5:f5:cc:
                    a0:9e:ea:17:ff:30:5b:40:0a:7c:79:52:54:e8:6d:
                    0a:9c:e5:8e:bf:d3:07:fe:3a:f7:26:17:16:2c:b8:
                    e6:e6:94:3f:38:4a:35:57:13:a9:d0:03:62:2a:bf:
                    ad:ce:18:6d:81:b4:c9:62:f5:fc:b2:26:c1:8e:41:
                    54:1e:bb:87:40:2e:6b:17:4c:e2:0b:1b:95:d7:30:
                    9b:a1:94:cc:6c:16:eb:ee:34:9f:71:f6:33:a6:60:
                    e4:42:f1:90:23:2d:56:10:f6:31:08:2d:74:cb:81:
                    60:b8:c3:c5:c2:39:5d:97:c2:3f:f2:5a:0f:4a:a4:
                    0a:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:FE:EA:77:97:2E:2F:81:F2:34:C9:FD:CA:1D:C1:5D:19:AC:C3:68
            X509v3 Authority Key Identifier:
                keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/78D1B45EBE4611F1B61240E3CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.180.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         83:a2:20:73:c9:f5:aa:a8:28:ec:0c:90:1b:8d:3e:b6:fe:f5:
         a3:e4:ae:df:49:20:41:00:a4:8a:16:c9:7f:e6:63:54:7f:a3:
         80:07:f7:6d:bb:8e:48:26:d6:47:18:75:21:41:68:0b:45:4c:
         80:4d:45:73:03:c7:b1:e1:42:9e:9e:39:e7:8b:bf:88:a2:6b:
         72:c3:28:fa:ca:61:e8:53:1c:5a:b1:c7:35:bc:76:7c:5e:64:
         cc:27:86:9d:d1:f4:65:b7:69:65:0c:59:92:8e:da:74:1e:35:
         d5:5f:c9:67:74:05:ac:64:2f:f5:9d:c6:e5:17:b5:e5:72:d9:
         7d:47:60:92:8e:11:1a:c6:09:e8:bf:bd:52:8c:8f:00:c3:23:
         54:75:48:0f:80:d9:d8:7a:f4:83:58:63:18:37:7a:27:f2:a6:
         fd:a2:24:b6:6f:10:70:bb:a1:c4:93:09:12:10:2f:90:ac:52:
         1b:27:ea:89:29:8c:3e:af:50:6e:cb:70:47:44:b2:11:5a:11:
         e6:66:48:1e:a3:ce:d1:7a:7f:d1:61:11:68:91:9b:85:c5:f1:
         88:9f:96:9c:ec:11:02:53:57:8d:2a:7a:88:80:c6:56:04:9b:
         01:51:a1:81:48:cd:7b:d9:6d:e4:eb:c6:62:5d:1d:7d:f2:22:
         e2:ed:fa:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----