Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/74513D12A50C11F1BF7DBDDCCE1D38B0.roa
File:                     74513D12A50C11F1BF7DBDDCCE1D38B0.roa (raw, json)
Hash identifier:          KImqWuGcyK/xSqlvfkitwOsE6fNi/G1Sdbv0r9bpscE=
Subject key identifier:   91:99:D3:DA:38:B9:10:15:F7:4D:BA:1A:03:F3:64:71:69:B2:EF:65
Certificate issuer:       /CN=F369591CAF/serialNumber=C1090D37DA9FFEEE1A9C229BAFF1190BD22E8934
Certificate serial:       0588
Authority key identifier: C1:09:0D:37:DA:9F:FE:EE:1A:9C:22:9B:AF:F1:19:0B:D2:2E:89:34
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/wQkNN9qf_u4anCKbr_EZC9IuiTQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/74513D12A50C11F1BF7DBDDCCE1D38B0.roa
Signing time:             Mon 31 Aug 2026 07:20:34 +0000
ROA not before:           Mon 31 Aug 2026 07:20:30 +0000
ROA not after:            Tue 31 Dec 2030 07:20:30 +0000
asID:                     15964
IP address blocks:        2001:4268:8000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/wQkNN9qf_u4anCKbr_EZC9IuiTQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/wQkNN9qf_u4anCKbr_EZC9IuiTQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/wQkNN9qf_u4anCKbr_EZC9IuiTQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 12 Sep 2026 03:18:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1416 (0x588)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369591CAF, serialNumber=C1090D37DA9FFEEE1A9C229BAFF1190BD22E8934
        Validity
            Not Before: Aug 31 07:20:30 2026 GMT
            Not After : Dec 31 07:20:30 2030 GMT
        Subject: CN=6a952b42-bed1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:41:28:9c:8c:ff:dc:e7:fe:a5:c7:c6:70:c7:
                    ac:c7:17:23:a8:22:59:ca:28:00:a9:6b:8d:ee:1f:
                    1f:cb:4d:81:f0:7a:c2:a6:b0:ff:72:bf:e4:ee:85:
                    39:55:12:83:a8:e5:3f:d7:a8:76:f1:24:6c:fb:26:
                    11:98:ee:97:5c:a4:f2:fd:8f:67:21:95:e8:d7:41:
                    89:e5:4e:78:cb:97:96:ce:60:81:33:79:91:7f:1b:
                    7a:42:9b:1a:aa:90:f5:32:56:12:67:c1:ab:df:d7:
                    9b:2d:cf:41:8d:f5:b0:e5:a5:27:8d:fd:99:82:e2:
                    53:89:8e:2f:19:4f:cc:9a:7c:fc:9d:d5:63:8f:69:
                    c3:a0:fa:c1:48:af:54:95:bd:06:94:0f:1d:e9:4a:
                    b4:ca:f9:ad:9d:76:89:d7:9c:4e:d7:8b:91:44:39:
                    24:11:b8:d8:9d:f8:29:33:fe:a0:16:9f:14:49:c7:
                    a2:81:fb:8c:8b:1d:aa:71:20:c9:c9:43:d7:7c:cc:
                    5b:2f:f9:27:2e:6c:c9:92:8a:95:90:00:f0:44:b9:
                    0b:b5:9f:72:16:58:70:c2:cf:79:76:17:b7:8c:68:
                    83:15:6d:41:13:9a:f4:f4:e0:f6:ad:0a:b1:c7:dd:
                    9e:7b:e2:e5:09:cd:fe:2f:24:af:91:49:60:77:f1:
                    c6:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:99:D3:DA:38:B9:10:15:F7:4D:BA:1A:03:F3:64:71:69:B2:EF:65
            X509v3 Authority Key Identifier:
                keyid:C1:09:0D:37:DA:9F:FE:EE:1A:9C:22:9B:AF:F1:19:0B:D2:2E:89:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/wQkNN9qf_u4anCKbr_EZC9IuiTQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/wQkNN9qf_u4anCKbr_EZC9IuiTQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/74513D12A50C11F1BF7DBDDCCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4268:8000::/48

    Signature Algorithm: sha256WithRSAEncryption
         42:ad:bf:30:28:3d:fc:f4:b3:09:0d:cb:d5:2b:30:4d:10:33:
         a6:49:49:7a:9e:af:4c:e6:af:c5:8f:cd:be:47:81:32:ad:b0:
         c7:21:8f:e4:f6:35:19:ae:6a:05:7e:e9:8c:c2:2a:73:6f:14:
         a1:c0:53:e8:93:68:61:48:2b:4b:01:c0:49:fc:83:02:75:57:
         65:8d:82:ac:30:41:57:54:3d:10:07:82:41:a8:c3:eb:66:85:
         de:2a:d6:84:be:16:b1:95:45:83:91:0f:cd:39:60:6d:99:b8:
         0f:db:5a:ca:90:2d:5e:d6:6b:f9:f3:76:f9:39:d3:27:d5:97:
         ae:c2:c2:41:b9:df:5f:e4:6e:d3:9d:b1:12:57:79:49:8b:74:
         1d:b1:e3:f0:40:36:42:f5:06:14:ca:58:25:c3:e1:59:2a:76:
         f6:bf:a2:95:6e:e0:c7:e5:b5:e1:fb:00:e4:81:37:95:42:f2:
         2b:68:56:4c:59:d5:a7:7c:0d:34:62:d8:d1:ad:2a:8a:75:cd:
         c1:50:ff:f1:ef:b5:b3:8f:b7:0b:4e:86:ce:58:aa:f8:9e:4d:
         16:02:b3:af:70:d5:c9:1c:e9:36:8e:3a:5b:63:3d:aa:af:27:
         27:c4:52:13:49:cd:37:47:79:9f:60:8d:af:c9:bc:15:c2:89:
         c7:60:49:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----