Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F367C385/A3D2CE00C5E511EAAB62B122F8AEA228/0AAEE3AABF8811F1AB7F94FFCE1D38B0.roa
File:                     0AAEE3AABF8811F1AB7F94FFCE1D38B0.roa (raw, json)
Hash identifier:          gQqa9AlV9Z2Byv7CjmG9fG0CuzPYtjUUiLHcDFXkR7o=
Subject key identifier:   65:61:42:E3:BE:AF:82:3F:7D:AD:0E:3B:EA:50:79:53:0B:53:31:05
Certificate issuer:       /CN=F367C385AF/serialNumber=CF6F4D60D0D5C2E6D379A711D1B6AF01130C2A6C
Certificate serial:       0923
Authority key identifier: CF:6F:4D:60:D0:D5:C2:E6:D3:79:A7:11:D1:B6:AF:01:13:0C:2A:6C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/z29NYNDVwubTeacR0bavARMMKmw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367C385/A3D2CE00C5E511EAAB62B122F8AEA228/0AAEE3AABF8811F1AB7F94FFCE1D38B0.roa
Signing time:             Sun 04 Oct 2026 00:10:44 +0000
ROA not before:           Sun 04 Oct 2026 00:00:40 +0000
ROA not after:            Sat 04 Oct 2036 00:00:40 +0000
asID:                     328320
IP address blocks:        2c0f:55c0::/32 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367C385/A3D2CE00C5E511EAAB62B122F8AEA228/z29NYNDVwubTeacR0bavARMMKmw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367C385/A3D2CE00C5E511EAAB62B122F8AEA228/z29NYNDVwubTeacR0bavARMMKmw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/z29NYNDVwubTeacR0bavARMMKmw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 29 Oct 2026 01:51:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2339 (0x923)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367C385AF, serialNumber=CF6F4D60D0D5C2E6D379A711D1B6AF01130C2A6C
        Validity
            Not Before: Oct  4 00:00:40 2026 GMT
            Not After : Oct  4 00:00:40 2036 GMT
        Subject: CN=6ac19984-4b49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:03:25:95:b6:e6:d6:07:7a:08:a3:0a:ed:3f:
                    14:46:60:f2:cb:f4:97:4e:40:cd:3e:12:cf:79:6e:
                    e4:a8:1b:12:2b:e1:8b:53:9a:c5:12:89:c5:1c:ff:
                    da:81:2c:b9:a1:d0:e2:44:58:2e:1a:19:97:d9:e7:
                    e7:b8:2c:c1:d7:2a:09:c8:d4:c1:ca:eb:85:27:a4:
                    91:65:0d:04:5d:39:b8:ef:f1:5e:6e:a4:0c:b7:a8:
                    1d:78:4e:07:c2:5b:52:61:f2:9b:73:b6:e9:4a:02:
                    18:5f:81:32:ea:0d:c2:98:67:52:32:c5:2a:19:6b:
                    4f:f0:6c:b8:3a:e2:f2:ea:cc:dc:8e:55:b5:d1:a9:
                    4b:02:86:52:ad:63:d0:15:b4:6d:8c:ec:e3:e1:b4:
                    54:0c:bb:9a:f8:c9:36:b0:33:68:b0:b4:1b:40:45:
                    a1:a3:77:54:6b:f2:51:bc:92:71:65:38:8c:5a:77:
                    74:d7:20:3d:28:70:91:cc:99:02:5b:6d:54:23:5d:
                    89:c8:ff:cf:a1:69:fc:47:e0:0d:c1:6d:0b:12:26:
                    9b:a0:50:cd:19:f9:f8:e5:a3:ed:f6:6d:dc:6b:fd:
                    77:da:d9:d7:6a:ab:d3:c3:ab:99:ed:86:15:e2:12:
                    50:60:3b:a6:e2:6b:0a:2e:6b:53:82:fa:d2:c8:9d:
                    4e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:61:42:E3:BE:AF:82:3F:7D:AD:0E:3B:EA:50:79:53:0B:53:31:05
            X509v3 Authority Key Identifier:
                keyid:CF:6F:4D:60:D0:D5:C2:E6:D3:79:A7:11:D1:B6:AF:01:13:0C:2A:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367C385/A3D2CE00C5E511EAAB62B122F8AEA228/z29NYNDVwubTeacR0bavARMMKmw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/z29NYNDVwubTeacR0bavARMMKmw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367C385/A3D2CE00C5E511EAAB62B122F8AEA228/0AAEE3AABF8811F1AB7F94FFCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:55c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         af:d9:b4:01:55:01:96:59:63:c5:f1:3e:47:bf:c9:58:4c:6e:
         a2:99:84:0f:b6:ba:94:f4:df:d6:ee:ae:6f:4c:38:d5:7f:2d:
         8e:42:ab:31:68:8e:0c:60:c9:de:09:28:a6:ec:0c:3d:8c:dd:
         a8:47:d1:7a:6f:96:86:b7:84:4c:ba:66:a9:94:43:a6:c5:29:
         e1:fa:c5:e1:4d:ce:3f:a5:8e:9f:b2:2e:de:78:6d:af:eb:ba:
         cb:da:4b:db:07:c1:d1:0b:8e:6b:bf:85:1c:77:a0:a6:8a:4a:
         b8:b0:74:91:97:30:a9:8b:64:22:98:4e:84:c1:2a:f3:19:ce:
         0b:b6:40:ea:68:e7:23:2a:47:f0:38:9a:51:93:f7:49:ed:a1:
         57:cc:c6:fc:df:af:87:79:5b:a3:bc:44:fe:99:43:d9:21:40:
         65:d1:0b:0d:ad:83:94:2e:51:e5:9a:98:a0:4a:48:0b:44:1e:
         c8:4b:fd:9b:ec:16:f7:aa:2b:c8:30:72:cc:2f:e1:9a:38:6b:
         db:76:19:21:c6:3d:32:5f:1a:b8:74:5e:18:4b:8a:04:d6:a3:
         6f:ae:76:0a:58:26:78:6b:ed:f0:b1:8c:5c:ce:e3:f8:ca:66:
         09:ee:61:6e:91:f3:d5:2e:3f:89:8d:7d:1f:2a:fc:a1:4c:4b:
         d7:55:97:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----