Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/5C4B7E90A20911F181D8BD1CCF1D38B0.roa
File:                     5C4B7E90A20911F181D8BD1CCF1D38B0.roa (raw, json)
Hash identifier:          QrdT+xqtFl3yZHpW8BeEj5Duv/p3Lz6vxX+Y5zIxp8w=
Subject key identifier:   CA:DD:CA:4F:FB:F8:BC:1C:64:8E:19:E5:37:65:FD:E2:4C:F4:94:E0
Certificate issuer:       /CN=F369591CAF/serialNumber=C1090D37DA9FFEEE1A9C229BAFF1190BD22E8934
Certificate serial:       0580
Authority key identifier: C1:09:0D:37:DA:9F:FE:EE:1A:9C:22:9B:AF:F1:19:0B:D2:2E:89:34
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/wQkNN9qf_u4anCKbr_EZC9IuiTQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/5C4B7E90A20911F181D8BD1CCF1D38B0.roa
Signing time:             Thu 27 Aug 2026 11:20:51 +0000
ROA not before:           Thu 27 Aug 2026 11:20:47 +0000
ROA not after:            Tue 31 Dec 2030 11:20:47 +0000
asID:                     15964
IP address blocks:        2001:4268:8000:6::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/wQkNN9qf_u4anCKbr_EZC9IuiTQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/wQkNN9qf_u4anCKbr_EZC9IuiTQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/wQkNN9qf_u4anCKbr_EZC9IuiTQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 12 Sep 2026 03:18:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1408 (0x580)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369591CAF, serialNumber=C1090D37DA9FFEEE1A9C229BAFF1190BD22E8934
        Validity
            Not Before: Aug 27 11:20:47 2026 GMT
            Not After : Dec 31 11:20:47 2030 GMT
        Subject: CN=6a901d93-613d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:88:14:27:ee:dc:40:af:35:67:ed:81:c3:30:
                    c7:8b:36:08:26:cb:e8:0f:7b:52:7b:ba:17:ae:27:
                    fb:ed:20:79:0a:09:13:c5:bf:1e:7e:8d:1b:64:c5:
                    cb:37:09:f6:21:53:69:9d:27:4b:4d:fc:6d:10:e7:
                    03:87:71:bd:ae:81:f2:9e:37:69:5f:26:d6:7d:8c:
                    a2:9c:9a:39:2d:b1:b3:87:f0:80:25:f0:71:18:22:
                    8d:60:78:0d:91:fd:84:57:47:b7:02:30:90:3d:c9:
                    f8:81:05:69:cf:e8:79:8a:e6:61:60:45:88:6e:39:
                    74:3a:64:80:0c:33:74:b9:c0:33:0d:be:31:91:f7:
                    5f:fc:97:f6:34:45:8b:18:05:2c:63:e8:02:a6:2f:
                    96:dd:de:be:26:05:4a:5a:77:95:6a:51:b8:39:0e:
                    3e:c4:e5:f5:d0:42:b4:54:3a:56:c3:d4:70:65:30:
                    ec:2a:4b:5d:75:69:d6:f5:46:e7:c8:83:d2:5e:9f:
                    16:80:53:df:49:26:cc:42:c1:f7:20:3f:cd:46:b8:
                    f9:71:43:bb:db:ae:e0:13:ee:bc:da:aa:88:fa:1d:
                    b1:5c:4c:f8:58:de:af:7e:35:a5:44:8a:86:92:7b:
                    7c:01:9a:ef:56:02:95:4f:60:a1:4e:c8:7a:24:94:
                    03:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:DD:CA:4F:FB:F8:BC:1C:64:8E:19:E5:37:65:FD:E2:4C:F4:94:E0
            X509v3 Authority Key Identifier:
                keyid:C1:09:0D:37:DA:9F:FE:EE:1A:9C:22:9B:AF:F1:19:0B:D2:2E:89:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/wQkNN9qf_u4anCKbr_EZC9IuiTQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/wQkNN9qf_u4anCKbr_EZC9IuiTQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/5C4B7E90A20911F181D8BD1CCF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4268:8000:6::/64

    Signature Algorithm: sha256WithRSAEncryption
         86:eb:2c:d7:cd:81:00:cc:72:97:c5:55:f7:5e:ad:98:f3:da:
         64:c6:2d:aa:0b:72:42:71:e8:7c:88:7a:b3:f6:f7:14:04:68:
         b0:bd:5b:25:93:dc:e7:b6:0f:2b:54:4d:3e:db:f8:24:54:25:
         50:4c:19:9f:72:d9:89:10:74:d0:7f:37:dd:54:19:1d:9e:11:
         de:3b:0c:c8:64:7e:53:87:0f:b8:a0:f2:8d:33:e3:d6:ee:7f:
         96:da:51:0c:86:68:6c:48:69:21:cf:61:c5:b5:4b:cf:30:fa:
         39:42:b6:1a:56:2f:49:0d:b1:20:3d:c1:fe:c7:4b:76:64:d4:
         b1:a5:cc:02:5f:22:1b:f1:bf:20:20:88:80:99:8e:34:d1:27:
         28:e2:7a:4b:47:7c:93:b6:92:34:c8:9d:20:8d:5f:61:9e:93:
         6a:5e:c1:97:d7:a9:49:86:43:fa:af:17:bc:7a:ea:df:3e:dc:
         5d:c0:ba:4e:2f:de:aa:18:75:6b:08:04:bc:60:96:04:4d:5f:
         81:d2:86:8c:56:d6:1e:6c:78:84:d6:84:57:dc:a9:ac:74:3c:
         06:16:ec:b7:1a:fc:36:1b:71:c3:83:c1:83:4f:de:a5:6f:7c:
         5e:6c:4c:c5:b7:bb:99:c0:c1:9d:24:c6:cc:ff:09:15:d1:63:
         8f:d4:b4:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----