Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/C8304A84A21111F1A664A5D1CE1D38B0.roa
File:                     C8304A84A21111F1A664A5D1CE1D38B0.roa (raw, json)
Hash identifier:          ivUSpFyOs/r2dCFruezEKqFqXQ5W2nFd0bc9uCW2iwE=
Subject key identifier:   A9:6B:5E:C3:D0:B7:56:5D:65:9C:C2:A5:D6:31:95:57:2C:5E:25:7E
Certificate issuer:       /CN=F369591CAF/serialNumber=C1090D37DA9FFEEE1A9C229BAFF1190BD22E8934
Certificate serial:       0582
Authority key identifier: C1:09:0D:37:DA:9F:FE:EE:1A:9C:22:9B:AF:F1:19:0B:D2:2E:89:34
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/wQkNN9qf_u4anCKbr_EZC9IuiTQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/C8304A84A21111F1A664A5D1CE1D38B0.roa
Signing time:             Thu 27 Aug 2026 12:21:08 +0000
ROA not before:           Thu 27 Aug 2026 12:21:04 +0000
ROA not after:            Tue 31 Dec 2030 12:21:04 +0000
asID:                     15964
IP address blocks:        2001:4268:8000::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/wQkNN9qf_u4anCKbr_EZC9IuiTQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/wQkNN9qf_u4anCKbr_EZC9IuiTQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/wQkNN9qf_u4anCKbr_EZC9IuiTQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 12 Sep 2026 03:18:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1410 (0x582)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369591CAF, serialNumber=C1090D37DA9FFEEE1A9C229BAFF1190BD22E8934
        Validity
            Not Before: Aug 27 12:21:04 2026 GMT
            Not After : Dec 31 12:21:04 2030 GMT
        Subject: CN=6a902bb4-f98e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a3:ae:ac:c6:4c:c2:25:c7:4e:7e:5c:b6:5b:
                    2d:42:1c:2e:ed:ab:12:ce:21:18:86:d9:df:b3:7e:
                    dc:b8:77:ee:e6:2a:4f:e0:99:af:7d:0c:f3:21:17:
                    6d:05:f2:41:8d:b3:a9:92:5c:92:ae:5b:79:a5:4b:
                    99:5c:b8:61:df:92:a1:5a:7b:58:14:b2:27:ea:03:
                    a6:e1:b9:45:c1:4b:63:27:73:32:f3:bf:8b:0e:64:
                    ea:18:54:d8:63:6c:80:df:99:d2:00:d0:6c:e7:d1:
                    fa:20:3f:23:09:c6:3b:00:d7:7b:1d:37:cb:76:80:
                    e3:0d:c5:37:15:9c:1e:29:27:e1:cf:39:94:02:b4:
                    c0:09:fb:2d:38:95:8d:eb:7d:b4:ce:87:ce:ac:fe:
                    de:66:d3:60:b8:a8:94:ff:7e:42:2a:5f:84:eb:40:
                    9b:ff:d7:f4:8f:75:c3:c4:89:99:5a:85:f4:54:f5:
                    1e:97:21:96:63:51:a9:14:e4:78:10:9d:98:d9:9f:
                    ff:62:5f:ac:cc:df:b2:10:53:f7:be:c8:4f:7f:ff:
                    17:97:b9:2e:6e:8d:f5:b8:65:9a:52:96:5b:16:65:
                    21:d4:89:aa:5d:0d:1e:5b:b4:64:d0:44:b0:80:6c:
                    d1:06:dd:2f:22:aa:e1:f2:89:57:ae:f9:55:6e:dc:
                    a1:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:6B:5E:C3:D0:B7:56:5D:65:9C:C2:A5:D6:31:95:57:2C:5E:25:7E
            X509v3 Authority Key Identifier:
                keyid:C1:09:0D:37:DA:9F:FE:EE:1A:9C:22:9B:AF:F1:19:0B:D2:2E:89:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/wQkNN9qf_u4anCKbr_EZC9IuiTQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/wQkNN9qf_u4anCKbr_EZC9IuiTQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/C8304A84A21111F1A664A5D1CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4268:8000::/64

    Signature Algorithm: sha256WithRSAEncryption
         05:96:5d:b0:61:5e:a2:23:2f:19:44:72:7e:9b:83:cd:08:3a:
         b7:26:a2:4d:7a:ba:d8:2f:27:a9:f6:fa:b3:7e:47:39:e9:f5:
         bc:5e:61:d5:0c:03:17:66:fd:64:76:ed:1a:04:b4:87:d3:33:
         4e:1f:61:d5:6e:c1:d3:d3:01:0d:3e:d7:0c:e8:be:13:b4:6f:
         89:df:c7:8d:6e:56:0b:f1:6e:5c:96:8f:9a:0c:bb:bd:92:6c:
         b5:b9:58:06:1f:ae:ae:cc:b2:a9:a2:3c:c5:3b:34:7d:86:ef:
         ca:de:c8:ca:a1:a3:e2:a2:d4:5d:e5:e3:ca:fe:66:83:ef:72:
         d1:9d:2c:41:b3:2b:fe:29:0e:b8:ee:58:43:b1:26:09:fd:bc:
         a5:84:7c:ba:33:9b:9d:24:cc:49:c3:ce:03:3a:1e:55:95:2c:
         91:93:25:78:52:37:82:c5:b2:7e:bf:cf:88:6d:3a:9a:c2:cb:
         3c:cd:d8:7b:5b:3f:9d:6e:62:bb:b6:79:2b:b3:96:a7:84:2c:
         c9:8d:06:a7:71:35:af:3a:fc:37:1d:08:ec:29:a3:dd:33:ae:
         78:22:cb:65:08:5d:ef:b4:bf:94:d8:18:7c:14:55:5a:65:3e:
         c3:af:6a:61:1e:b1:0a:18:1d:83:7b:9c:0d:fb:fa:a5:54:c9:
         17:5e:af:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----