Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36BEA8C/A04721CE94C811F1BAD326FDCE1D38B0/076CE528A58B11F1A412DEC9CE1D38B0.roa
File:                     076CE528A58B11F1A412DEC9CE1D38B0.roa (raw, json)
Hash identifier:          4ZDCWZoC5+g5JzZG8yrAugdglWtKJIxR01SXcL5jcgo=
Subject key identifier:   68:D4:91:D3:6B:9B:98:E4:3E:E8:41:9C:D2:1F:AE:2E:1E:06:6C:EF
Certificate issuer:       /CN=F36BEA8CAF/serialNumber=F757E38D5437DF7FFD9D9FF627CACBBB190456E0
Certificate serial:       1B
Authority key identifier: F7:57:E3:8D:54:37:DF:7F:FD:9D:9F:F6:27:CA:CB:BB:19:04:56:E0
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/91fjjVQ333_9nZ_2J8rLuxkEVuA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BEA8C/A04721CE94C811F1BAD326FDCE1D38B0/076CE528A58B11F1A412DEC9CE1D38B0.roa
Signing time:             Mon 31 Aug 2026 22:26:37 +0000
ROA not before:           Mon 31 Aug 2026 22:26:31 +0000
ROA not after:            Thu 31 Aug 2028 22:26:31 +0000
asID:                     37020
IP address blocks:        41.243.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36BEA8C/A04721CE94C811F1BAD326FDCE1D38B0/91fjjVQ333_9nZ_2J8rLuxkEVuA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36BEA8C/A04721CE94C811F1BAD326FDCE1D38B0/91fjjVQ333_9nZ_2J8rLuxkEVuA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/91fjjVQ333_9nZ_2J8rLuxkEVuA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 20 Sep 2026 00:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27 (0x1b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BEA8CAF, serialNumber=F757E38D5437DF7FFD9D9FF627CACBBB190456E0
        Validity
            Not Before: Aug 31 22:26:31 2026 GMT
            Not After : Aug 31 22:26:31 2028 GMT
        Subject: CN=6a95ff9d-1e8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:e8:2f:73:63:4f:4f:80:25:b6:a7:63:df:4e:
                    8f:2e:a1:54:5b:49:58:83:cf:86:53:c0:3a:9f:0f:
                    51:14:83:ab:fb:62:2b:7d:83:de:1f:19:32:63:9e:
                    03:72:d2:46:b3:41:bd:4f:8b:a2:d2:f4:82:b9:e6:
                    46:5d:28:ad:9c:37:af:36:98:21:7f:8c:2e:28:96:
                    bf:63:40:ba:8f:3a:86:93:05:c9:2f:30:51:bd:1d:
                    9d:ea:42:d3:04:0f:ec:24:0e:d0:37:c8:d6:d7:b0:
                    6e:b0:f2:e1:f0:c6:05:b2:54:48:95:69:ac:81:30:
                    4f:f8:c8:43:03:70:08:f8:0f:94:e2:f5:6a:df:2e:
                    60:d4:fa:ca:3f:60:7d:30:c6:94:f5:cd:9e:5a:23:
                    ce:11:ab:04:a9:f5:61:23:d4:76:49:70:aa:c6:d1:
                    03:9a:2d:61:1a:57:d4:bc:34:12:cf:2c:a4:51:1e:
                    42:69:cd:88:4b:d5:a3:1d:92:2f:61:56:28:1e:f8:
                    ec:ff:9f:f7:69:c9:42:9d:a3:49:e3:97:49:15:f1:
                    7a:f5:8e:df:2c:71:b4:2a:4f:4d:03:a2:1d:e5:57:
                    66:5c:62:ac:f6:98:4f:3d:bf:7c:14:ef:fa:d6:51:
                    39:a5:8f:33:96:30:7d:dc:6b:ec:7c:81:11:95:7c:
                    e9:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:D4:91:D3:6B:9B:98:E4:3E:E8:41:9C:D2:1F:AE:2E:1E:06:6C:EF
            X509v3 Authority Key Identifier:
                keyid:F7:57:E3:8D:54:37:DF:7F:FD:9D:9F:F6:27:CA:CB:BB:19:04:56:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BEA8C/A04721CE94C811F1BAD326FDCE1D38B0/91fjjVQ333_9nZ_2J8rLuxkEVuA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/91fjjVQ333_9nZ_2J8rLuxkEVuA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BEA8C/A04721CE94C811F1BAD326FDCE1D38B0/076CE528A58B11F1A412DEC9CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.243.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         43:12:2d:16:18:b4:5a:c6:26:88:2c:22:4b:be:fa:54:5a:9c:
         f9:34:32:a5:db:85:75:f1:f3:fa:e4:62:a3:39:bd:e5:f7:3b:
         3a:c2:21:ba:03:93:2e:c4:18:ea:c5:34:20:f3:7a:3b:69:87:
         99:23:6f:e4:fb:bc:63:05:27:8c:a0:7c:5a:c8:40:b9:ee:21:
         28:d3:7e:28:59:1e:37:e6:5b:a8:cd:89:05:9c:1a:3b:f6:7e:
         52:0f:52:f3:95:d8:68:68:44:98:ea:28:3d:d1:ed:b6:7b:aa:
         35:7e:a1:20:9a:bf:59:ee:90:1c:10:04:66:0a:40:f8:37:b1:
         d7:9a:c4:c5:d9:bb:3c:54:8c:2b:09:62:f9:a3:0d:b6:88:46:
         d4:44:da:ad:4e:68:ea:f4:9e:10:29:a5:47:c9:19:3e:78:d1:
         fd:5b:c5:11:34:22:b4:1b:fe:13:f6:a2:f2:06:a3:cb:49:0a:
         e2:8e:b2:09:da:0f:f8:77:a7:4b:96:dd:96:fd:e5:94:8c:c6:
         b7:58:79:9e:34:2a:d2:1a:35:4f:61:dc:f5:89:b1:a1:68:c2:
         b0:4f:9c:9d:b6:ee:4e:f2:75:16:a0:b4:b2:ec:2b:50:12:23:
         0f:bb:29:9a:42:a6:43:0d:fb:28:73:f1:d9:75:33:4b:30:47:
         a2:39:58:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----