Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F369C738/7A0ABF00EEA911EAA287D91BF8AEA228/519333148F1011F1B1E433DBCE1D38B0.roa
File:                     519333148F1011F1B1E433DBCE1D38B0.roa (raw, json)
Hash identifier:          gFXsI352fWNCjc+UhMWjU0A4AjvsERl87+FqENAq/Io=
Subject key identifier:   52:AB:32:EE:AD:73:EA:4E:30:5E:E4:4F:10:31:A1:6E:A1:55:78:23
Certificate issuer:       /CN=F369C738AF/serialNumber=01E61C3F96466A5909985476E88479BB7D4112F6
Certificate serial:       08B3
Authority key identifier: 01:E6:1C:3F:96:46:6A:59:09:98:54:76:E8:84:79:BB:7D:41:12:F6
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/AeYcP5ZGalkJmFR26IR5u31BEvY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369C738/7A0ABF00EEA911EAA287D91BF8AEA228/519333148F1011F1B1E433DBCE1D38B0.roa
Signing time:             Mon 03 Aug 2026 07:52:48 +0000
ROA not before:           Mon 03 Aug 2026 07:52:44 +0000
ROA not after:            Sat 08 May 2032 07:52:44 +0000
asID:                     15706
IP address blocks:        41.218.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369C738/7A0ABF00EEA911EAA287D91BF8AEA228/AeYcP5ZGalkJmFR26IR5u31BEvY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369C738/7A0ABF00EEA911EAA287D91BF8AEA228/AeYcP5ZGalkJmFR26IR5u31BEvY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/AeYcP5ZGalkJmFR26IR5u31BEvY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 12 Sep 2026 01:53:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2227 (0x8b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369C738AF, serialNumber=01E61C3F96466A5909985476E88479BB7D4112F6
        Validity
            Not Before: Aug  3 07:52:44 2026 GMT
            Not After : May  8 07:52:44 2032 GMT
        Subject: CN=6a7048d0-8cc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:9d:22:86:71:91:9c:a9:c8:3f:50:e8:60:28:
                    32:71:05:4a:e4:cc:e6:09:8a:07:29:8b:8e:55:c2:
                    5c:0a:63:10:20:71:35:50:04:a3:84:de:6a:5e:13:
                    bd:f7:c2:28:08:bd:b2:32:0a:d7:5d:1e:63:99:d4:
                    b6:28:a5:81:fd:17:09:a1:76:53:c9:20:d6:b2:4b:
                    26:7b:52:0e:34:4e:83:19:af:ed:a6:be:47:32:57:
                    23:26:46:7d:e0:ed:66:8c:a1:29:b3:b8:86:ef:f6:
                    6b:76:89:4e:1f:0a:c0:a3:42:0a:0b:d3:c0:17:bb:
                    0d:6f:53:7c:0d:05:c0:ca:6c:18:65:34:51:34:ac:
                    a6:16:22:a8:21:6c:a5:4c:33:2d:d8:8b:61:00:e2:
                    50:74:5a:34:8e:71:2a:87:ef:91:0c:60:5b:8b:49:
                    5e:8a:76:91:0f:b4:54:34:7c:a4:e6:1d:e1:ba:62:
                    87:07:dd:3b:c3:c9:0e:1c:6c:b3:d5:e2:0a:fb:73:
                    3a:ea:04:e7:79:8b:f0:7b:aa:2c:d1:3d:3d:79:58:
                    c0:cf:58:d6:de:e6:4e:ed:fd:65:b9:33:52:e4:2f:
                    3c:ec:f8:57:6f:b9:a1:f2:19:2d:61:d2:9d:d2:49:
                    af:a8:87:35:62:7f:d7:51:87:84:a1:44:17:45:c5:
                    e2:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:AB:32:EE:AD:73:EA:4E:30:5E:E4:4F:10:31:A1:6E:A1:55:78:23
            X509v3 Authority Key Identifier:
                keyid:01:E6:1C:3F:96:46:6A:59:09:98:54:76:E8:84:79:BB:7D:41:12:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369C738/7A0ABF00EEA911EAA287D91BF8AEA228/AeYcP5ZGalkJmFR26IR5u31BEvY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/AeYcP5ZGalkJmFR26IR5u31BEvY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369C738/7A0ABF00EEA911EAA287D91BF8AEA228/519333148F1011F1B1E433DBCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.218.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         57:7f:92:f8:84:d8:90:71:03:d9:9e:f5:fc:d6:70:02:fd:83:
         4a:5b:48:ae:fd:78:d7:0d:6d:87:8c:a6:3a:12:36:23:ef:98:
         5e:3f:47:6e:26:9a:f5:d1:1a:1d:26:66:cd:16:b4:e9:12:fd:
         c8:2f:43:ce:7a:a8:9a:68:35:b2:33:f3:6b:c1:ef:b2:4e:70:
         17:61:4d:28:c5:cd:c5:4a:be:fe:cf:26:ca:f5:83:42:e5:99:
         04:40:3a:e9:81:43:8f:8f:6a:b1:7c:71:0d:ad:41:69:e5:e4:
         f4:fe:d6:84:5e:e8:34:64:aa:6b:44:bd:35:8c:d3:1c:d3:ee:
         c9:fd:8b:07:02:fc:fe:a4:ee:bb:f0:f6:a4:8e:f9:fa:65:63:
         02:05:a3:72:5b:9a:85:26:62:62:5c:9f:a5:50:2c:3e:2e:9d:
         e5:9e:4e:66:14:95:b5:4a:88:1e:28:e9:fe:cc:14:b9:46:cc:
         96:78:9b:6c:b9:84:77:67:12:09:05:a8:82:29:d0:6d:a6:af:
         24:ac:20:4f:c9:85:2c:1f:c4:b6:e5:cc:0a:5a:b6:16:20:bc:
         2b:65:74:4b:a7:87:74:47:a0:15:b1:56:d8:40:9e:76:50:85:
         b3:d7:48:fb:21:6e:74:3f:eb:ac:a0:dd:1d:d5:dd:d3:fa:ae:
         70:a2:6f:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----