Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36724C2/BFDAB754AB8811F183655414CF1D38B0/862EF5E4AC3511F19B4EADB1CE1D38B0.roa
File:                     862EF5E4AC3511F19B4EADB1CE1D38B0.roa (raw, json)
Hash identifier:          SLwUfV27DOpRvDI8RDcb61xEG0xmsMdYPIuES/cOYaQ=
Subject key identifier:   1E:79:5D:6F:14:E7:7F:60:D4:B7:E1:6A:60:FB:F0:25:BD:20:64:0A
Certificate issuer:       /CN=F36724C2AF/serialNumber=AC5DF5304809BB783EB962126958A00786E8F67C
Certificate serial:       17
Authority key identifier: AC:5D:F5:30:48:09:BB:78:3E:B9:62:12:69:58:A0:07:86:E8:F6:7C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/rF31MEgJu3g-uWISaVigB4bo9nw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36724C2/BFDAB754AB8811F183655414CF1D38B0/862EF5E4AC3511F19B4EADB1CE1D38B0.roa
Signing time:             Wed 09 Sep 2026 10:02:11 +0000
ROA not before:           Wed 09 Sep 2026 10:02:07 +0000
ROA not after:            Wed 08 Sep 2027 10:02:07 +0000
asID:                     15399
IP address blocks:        41.212.0.0/17 maxlen: 17
                          41.212.0.0/17 maxlen: 18
                          41.212.0.0/17 maxlen: 19
                          41.212.0.0/17 maxlen: 20
                          41.212.0.0/17 maxlen: 21
                          41.212.0.0/17 maxlen: 22
                          41.212.0.0/17 maxlen: 23
                          41.212.0.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36724C2/BFDAB754AB8811F183655414CF1D38B0/rF31MEgJu3g-uWISaVigB4bo9nw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36724C2/BFDAB754AB8811F183655414CF1D38B0/rF31MEgJu3g-uWISaVigB4bo9nw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/rF31MEgJu3g-uWISaVigB4bo9nw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 20 Sep 2026 00:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 23 (0x17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36724C2AF, serialNumber=AC5DF5304809BB783EB962126958A00786E8F67C
        Validity
            Not Before: Sep  9 10:02:07 2026 GMT
            Not After : Sep  8 10:02:07 2027 GMT
        Subject: CN=6aa12ea3-5d45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:08:fc:2e:45:34:df:b5:69:cb:83:4b:58:ef:
                    55:0d:8f:22:23:cd:a7:cc:40:e3:a0:6e:09:14:3c:
                    c1:02:54:75:ee:db:8d:83:d9:14:39:63:eb:f3:b7:
                    7c:c7:43:d6:92:6e:cd:6a:e4:ba:aa:03:9b:8d:00:
                    c3:15:8b:db:52:ba:06:08:3f:2e:8a:c8:ec:70:f6:
                    51:62:51:46:a1:17:1b:97:df:e8:84:1f:8f:02:c1:
                    76:7e:7f:1e:e9:90:d6:ab:b8:0f:76:14:fc:7c:28:
                    0c:ac:79:34:e0:24:db:c1:21:dd:f0:5e:3d:c6:e4:
                    6f:d1:f8:1b:44:6b:e7:f9:45:7b:14:14:63:b1:09:
                    62:1c:c1:b5:ad:ff:34:8f:12:70:78:8c:12:59:fc:
                    ed:6d:c6:e1:c4:e5:1e:dc:56:0d:fd:32:67:89:a8:
                    c0:3b:03:e8:5e:0b:3f:f8:e6:39:4c:45:a6:9f:9d:
                    23:90:4f:91:16:5e:b3:65:34:5d:58:fa:ea:c7:c2:
                    44:a0:d9:ce:98:64:58:db:e3:05:00:69:b9:c7:37:
                    2b:35:14:86:bd:08:95:12:38:ce:c0:76:1a:ab:13:
                    39:d9:a1:75:47:f0:62:8c:5c:5a:c1:e2:0c:3c:de:
                    c1:f8:93:16:50:8c:08:53:d0:7c:f5:17:f0:1b:12:
                    77:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:79:5D:6F:14:E7:7F:60:D4:B7:E1:6A:60:FB:F0:25:BD:20:64:0A
            X509v3 Authority Key Identifier:
                keyid:AC:5D:F5:30:48:09:BB:78:3E:B9:62:12:69:58:A0:07:86:E8:F6:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36724C2/BFDAB754AB8811F183655414CF1D38B0/rF31MEgJu3g-uWISaVigB4bo9nw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rF31MEgJu3g-uWISaVigB4bo9nw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36724C2/BFDAB754AB8811F183655414CF1D38B0/862EF5E4AC3511F19B4EADB1CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.212.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         58:e2:39:f6:2a:42:85:9c:42:7f:78:75:95:44:f8:55:73:97:
         ad:ba:49:0e:aa:a2:13:f1:ec:21:f5:b4:8e:0f:f6:7f:b5:53:
         49:8a:67:51:81:05:49:5c:74:41:46:2a:04:8f:20:7e:2f:96:
         d0:6f:4d:8d:8e:5f:b5:50:68:b9:da:c3:4d:2c:cb:78:56:23:
         3b:c8:7d:0c:e0:60:20:95:59:ca:ec:58:81:24:1b:23:93:de:
         81:ae:89:45:70:b7:c7:be:e5:58:12:a3:29:22:2b:91:c2:e0:
         0c:dd:0a:3d:5f:c3:d0:45:a0:7f:27:ae:b0:e2:5e:ea:dc:c5:
         19:de:43:52:5a:3a:db:cf:ef:54:45:2a:d9:35:4e:cb:69:91:
         75:5e:c8:1a:a8:47:ec:92:b3:99:a4:d5:ce:34:66:82:4c:f0:
         4d:ab:d5:7f:3e:ef:d1:8e:1b:25:12:1e:43:e0:19:c4:d0:fc:
         57:43:a8:af:c7:4a:49:f9:2e:05:bd:59:1a:cb:77:74:17:d3:
         6c:28:32:13:57:b0:8d:ed:2e:45:e7:09:0f:79:1d:87:8b:1d:
         a0:b7:9b:fb:bc:93:cb:01:6a:53:b8:7a:56:47:26:39:0f:23:
         d1:b4:bc:af:93:72:e5:19:b1:56:ca:09:b4:3a:ff:f3:a4:a5:
         64:fa:db:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----