Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36F7C77/E5A10452345E11ED9CF653E9F1222468/10698C1C8EFC11F19DE296E0CE1D38B0.roa
File:                     10698C1C8EFC11F19DE296E0CE1D38B0.roa (raw, json)
Hash identifier:          Dc0PGnBnrB+lOSQlcQLyWm6rJqmi8Xovkxvbmwz4h4w=
Subject key identifier:   78:3D:D6:7B:0D:AF:8D:9A:11:93:F6:FE:3C:18:EE:CB:C3:A6:4B:2E
Certificate issuer:       /CN=F36F7C77AF/serialNumber=F3826F3B5D24F64CB60F8C60C75DB519A0C7A6B7
Certificate serial:       05C3
Authority key identifier: F3:82:6F:3B:5D:24:F6:4C:B6:0F:8C:60:C7:5D:B5:19:A0:C7:A6:B7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/84JvO10k9ky2D4xgx121GaDHprc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F7C77/E5A10452345E11ED9CF653E9F1222468/10698C1C8EFC11F19DE296E0CE1D38B0.roa
Signing time:             Mon 03 Aug 2026 05:27:49 +0000
ROA not before:           Mon 03 Aug 2026 05:27:43 +0000
ROA not after:            Mon 07 Sep 2026 05:27:43 +0000
asID:                     37387
IP address blocks:        41.79.160.0/24 maxlen: 24
                          41.79.161.0/24 maxlen: 24
                          41.79.162.0/24 maxlen: 24
                          41.79.163.0/24 maxlen: 24
                          41.223.8.0/24 maxlen: 24
                          41.223.9.0/24 maxlen: 24
                          41.223.10.0/24 maxlen: 24
                          41.223.11.0/24 maxlen: 24
                          2c0f:fa78::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F7C77/E5A10452345E11ED9CF653E9F1222468/84JvO10k9ky2D4xgx121GaDHprc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F7C77/E5A10452345E11ED9CF653E9F1222468/84JvO10k9ky2D4xgx121GaDHprc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/84JvO10k9ky2D4xgx121GaDHprc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 06 Sep 2026 03:03:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1475 (0x5c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F7C77AF, serialNumber=F3826F3B5D24F64CB60F8C60C75DB519A0C7A6B7
        Validity
            Not Before: Aug  3 05:27:43 2026 GMT
            Not After : Sep  7 05:27:43 2026 GMT
        Subject: CN=6a7026d4-d0f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:74:12:98:d2:59:f3:dc:e1:be:6b:bf:d5:f5:
                    7e:a5:f5:d0:ad:fa:15:db:69:c0:3c:25:87:a0:0c:
                    2a:4a:3e:14:1f:85:14:eb:6d:dc:1f:eb:95:a1:6f:
                    4f:e0:f0:f7:79:25:08:d6:c0:df:ad:f2:0a:43:4d:
                    14:d9:dc:fc:d6:c7:b3:c0:c4:07:fd:8d:d7:89:59:
                    e1:4a:8c:9d:de:6e:a9:b6:a1:ff:67:ab:16:eb:07:
                    e2:5a:5f:79:93:c2:49:fb:51:87:5e:fe:2e:a2:52:
                    72:3d:46:91:0d:a4:0b:4e:41:0e:6d:62:34:c9:11:
                    f2:a3:14:cc:47:a1:e9:0f:e9:af:b6:42:68:a1:8f:
                    3c:25:cf:e0:ea:23:3e:a1:75:88:f4:2b:5b:46:21:
                    17:34:07:42:5c:0f:17:10:79:b6:39:ce:8a:75:cd:
                    20:bc:cd:26:86:64:c0:c8:10:9a:41:4d:91:5c:d3:
                    c4:0c:ab:91:65:39:5a:90:f2:78:53:4c:e1:4e:59:
                    a0:09:8e:d6:83:07:d0:05:8d:e7:21:4f:e9:d0:24:
                    cb:bd:35:64:60:42:78:48:71:ff:9c:f7:ed:4d:c1:
                    d0:64:f7:81:9c:cf:7d:6f:cd:16:d9:8f:18:a1:b2:
                    5d:14:6e:6d:70:bd:b6:eb:a6:ae:d9:b6:cd:fc:7f:
                    ed:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:3D:D6:7B:0D:AF:8D:9A:11:93:F6:FE:3C:18:EE:CB:C3:A6:4B:2E
            X509v3 Authority Key Identifier:
                keyid:F3:82:6F:3B:5D:24:F6:4C:B6:0F:8C:60:C7:5D:B5:19:A0:C7:A6:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F7C77/E5A10452345E11ED9CF653E9F1222468/84JvO10k9ky2D4xgx121GaDHprc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/84JvO10k9ky2D4xgx121GaDHprc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F7C77/E5A10452345E11ED9CF653E9F1222468/10698C1C8EFC11F19DE296E0CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.79.160.0/22
                  41.223.8.0/22
                IPv6:
                  2c0f:fa78::/32

    Signature Algorithm: sha256WithRSAEncryption
         0b:92:cf:da:5c:30:fb:56:0c:13:c8:4f:43:39:39:88:25:7c:
         d7:02:cb:87:e4:ef:9a:a4:51:5b:4e:e4:3e:6f:31:34:32:5c:
         7a:d9:24:b1:b4:7e:25:0a:d3:24:0d:d1:49:42:43:b8:b6:e9:
         43:a8:70:31:64:8f:9d:e4:4b:d6:9a:50:6d:aa:97:62:96:0b:
         69:48:b0:b9:e8:8d:d2:91:f3:78:33:15:f9:0c:eb:5f:30:66:
         5c:51:29:ef:8f:18:cb:97:5b:bd:37:43:d8:93:7d:e9:39:bf:
         a8:7e:c7:dd:0c:c6:b2:7f:31:83:66:5d:30:aa:21:b5:c2:a7:
         20:07:8c:91:d3:31:1a:68:74:71:a2:66:7e:2d:7b:06:61:f1:
         d5:f0:2f:00:74:2a:ff:40:cd:93:10:e6:5c:3a:19:38:fe:ff:
         b9:d0:93:7b:fa:16:b5:9b:c5:51:a0:56:83:ef:08:82:47:ad:
         c3:dc:dc:88:3c:2b:0f:78:12:25:a4:5a:ec:f5:4a:35:93:e5:
         53:55:28:55:cd:a6:0b:67:94:5c:a5:45:6d:25:f4:9e:c4:e8:
         79:86:73:50:15:99:f9:b4:25:56:70:33:c3:9e:f6:d6:74:19:
         6c:b0:48:50:ed:5d:c9:e4:22:93:cc:9e:85:72:ba:e1:97:a1:
         01:b5:2f:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----