Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36EBDD7/59907460BE1D11EB9A348B42F8AEA228/A908BF3E8C1C11F18D5C00DACE1D38B0.roa
File:                     A908BF3E8C1C11F18D5C00DACE1D38B0.roa (raw, json)
Hash identifier:          ay2Oo58ii92wCWlCO+qZraMpyz3d1mefW2U8vFEbUe0=
Subject key identifier:   5C:41:FD:29:56:F5:DA:80:67:02:C9:8C:A1:75:ED:9C:DF:80:8F:B9
Certificate issuer:       /CN=F36EBDD7AF/serialNumber=671762DF2F4B65E8350EF43DFE6E347765751B67
Certificate serial:       07A5
Authority key identifier: 67:17:62:DF:2F:4B:65:E8:35:0E:F4:3D:FE:6E:34:77:65:75:1B:67
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Zxdi3y9LZeg1DvQ9_m40d2V1G2c.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36EBDD7/59907460BE1D11EB9A348B42F8AEA228/A908BF3E8C1C11F18D5C00DACE1D38B0.roa
Signing time:             Thu 30 Jul 2026 13:43:35 +0000
ROA not before:           Thu 30 Jul 2026 13:43:31 +0000
ROA not after:            Wed 30 Jul 2036 13:43:31 +0000
asID:                     37349
IP address blocks:        41.79.68.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36EBDD7/59907460BE1D11EB9A348B42F8AEA228/Zxdi3y9LZeg1DvQ9_m40d2V1G2c.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36EBDD7/59907460BE1D11EB9A348B42F8AEA228/Zxdi3y9LZeg1DvQ9_m40d2V1G2c.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Zxdi3y9LZeg1DvQ9_m40d2V1G2c.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 12 Sep 2026 02:08:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1957 (0x7a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36EBDD7AF, serialNumber=671762DF2F4B65E8350EF43DFE6E347765751B67
        Validity
            Not Before: Jul 30 13:43:31 2026 GMT
            Not After : Jul 30 13:43:31 2036 GMT
        Subject: CN=6a6b5507-f413
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:69:8b:fe:b9:de:82:7b:bb:b5:5c:b5:23:86:
                    46:47:05:01:f4:e9:14:63:6d:aa:f4:14:38:31:30:
                    b4:fe:51:50:6f:14:c2:04:ca:ce:fd:90:28:ef:9d:
                    6e:62:1b:4d:16:ec:78:af:10:88:00:e4:c0:2f:9e:
                    48:43:a3:7a:a0:c9:c8:bc:56:2f:53:a3:a4:ce:ff:
                    84:37:51:17:8b:8b:20:1c:ab:e2:54:fb:41:a0:67:
                    f6:f0:e7:d8:f4:ef:20:d0:e1:48:76:33:20:32:a4:
                    b1:27:9d:d9:1b:c5:cd:60:1d:3d:3c:08:0c:c2:c7:
                    d7:93:43:c8:18:db:d4:d9:e0:ec:7d:7d:eb:ad:3c:
                    af:d1:33:dd:34:b6:b4:92:87:57:15:2b:03:9a:55:
                    89:0e:d2:96:d2:e6:29:52:46:ca:f9:50:af:26:ca:
                    51:55:2f:96:b3:02:72:82:5b:41:67:da:63:cc:45:
                    b9:c6:d5:4e:fa:c6:63:10:c0:b1:92:63:79:58:cd:
                    62:63:63:59:ae:e0:28:c5:e7:f8:51:86:ea:f0:7b:
                    19:f8:cc:a5:bf:e2:8b:21:a4:cf:17:83:fd:8d:7f:
                    f3:bc:cd:99:ba:b7:cd:ac:52:25:83:eb:02:cc:91:
                    76:f8:f5:00:ed:12:76:0d:19:4d:8b:08:1f:2b:13:
                    55:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:41:FD:29:56:F5:DA:80:67:02:C9:8C:A1:75:ED:9C:DF:80:8F:B9
            X509v3 Authority Key Identifier:
                keyid:67:17:62:DF:2F:4B:65:E8:35:0E:F4:3D:FE:6E:34:77:65:75:1B:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36EBDD7/59907460BE1D11EB9A348B42F8AEA228/Zxdi3y9LZeg1DvQ9_m40d2V1G2c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Zxdi3y9LZeg1DvQ9_m40d2V1G2c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EBDD7/59907460BE1D11EB9A348B42F8AEA228/A908BF3E8C1C11F18D5C00DACE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.79.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b5:88:ed:ca:2f:96:98:42:d2:4c:d0:5c:13:a0:32:57:19:b3:
         d4:03:9e:99:ee:f8:8e:6c:e8:4a:2a:cc:2a:f4:1f:6e:a4:c7:
         4f:22:d5:ee:e4:c3:f7:33:5a:3c:49:ee:5e:c2:28:cc:e3:7f:
         13:01:37:43:c7:3d:52:24:88:7b:52:8f:da:be:0d:59:6b:4e:
         17:ec:78:58:27:dc:07:b9:4a:e7:17:26:26:8b:7a:4e:c8:3a:
         8f:4c:8b:b9:54:6a:27:36:41:36:dc:0b:85:56:c2:6d:f5:b8:
         3a:4f:8e:b0:b7:7a:de:a7:25:51:78:e1:37:87:b5:f6:f4:6b:
         54:a6:30:31:03:a9:71:c7:6b:4c:25:72:62:5f:94:f3:ef:0c:
         30:63:fc:2e:0d:3d:fb:64:3e:46:06:99:8a:3b:a2:3a:12:92:
         05:3e:a2:33:9e:95:52:5b:a9:1b:07:90:69:06:e8:c8:38:0e:
         fd:ab:a6:84:2a:79:30:f4:5e:cb:b6:0e:9e:10:31:4d:f5:9c:
         f0:66:c4:e4:47:cc:7c:7a:4e:ed:cc:13:16:3c:ef:d1:52:98:
         81:ef:2b:ac:c0:ed:2d:b5:bb:ed:0c:a8:0f:a9:34:90:68:4c:
         f8:e9:83:a3:5c:db:48:8f:55:4a:6c:82:63:62:8a:68:11:02:
         61:dd:c7:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----