Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3614C03/0053EC7406B311EA9DC20648F8AEA228/0636F15A898711F1BE979A10CF1D38B0.roa
File:                     0636F15A898711F1BE979A10CF1D38B0.roa (raw, json)
Hash identifier:          uXRE4MYJypYecPWIt2nhK7I0w3ERb1vCTX5Ha7buUdA=
Subject key identifier:   8C:71:31:91:0C:E4:DD:B5:74:8D:6F:C9:74:3E:15:AE:05:07:E7:CB
Certificate issuer:       /CN=F3614C03AF/serialNumber=ECB3CFFB40A29AFA17F07E5D4B3C42634136BA40
Certificate serial:       09CF
Authority key identifier: EC:B3:CF:FB:40:A2:9A:FA:17:F0:7E:5D:4B:3C:42:63:41:36:BA:40
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/7LPP-0CimvoX8H5dSzxCY0E2ukA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3614C03/0053EC7406B311EA9DC20648F8AEA228/0636F15A898711F1BE979A10CF1D38B0.roa
Signing time:             Mon 27 Jul 2026 06:47:25 +0000
ROA not before:           Mon 27 Jul 2026 06:47:21 +0000
ROA not after:            Mon 20 Jun 2033 06:47:21 +0000
asID:                     21739
IP address blocks:        2c0f:980::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3614C03/0053EC7406B311EA9DC20648F8AEA228/7LPP-0CimvoX8H5dSzxCY0E2ukA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3614C03/0053EC7406B311EA9DC20648F8AEA228/7LPP-0CimvoX8H5dSzxCY0E2ukA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/7LPP-0CimvoX8H5dSzxCY0E2ukA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 31 Jul 2026 00:07:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2511 (0x9cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3614C03AF, serialNumber=ECB3CFFB40A29AFA17F07E5D4B3C42634136BA40
        Validity
            Not Before: Jul 27 06:47:21 2026 GMT
            Not After : Jun 20 06:47:21 2033 GMT
        Subject: CN=6a66fefc-9176
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:69:1d:1c:ad:4f:ec:7e:91:12:5e:be:2f:eb:
                    33:ea:2c:c8:33:63:ae:d1:0f:fb:bb:5f:39:eb:af:
                    ba:c4:9e:ff:bf:29:a9:c8:ea:a9:04:c9:09:49:46:
                    b4:0b:45:6c:5b:39:72:67:61:db:07:68:2e:54:5b:
                    6b:7c:0b:57:90:db:b4:6a:a1:70:5f:fa:4c:45:35:
                    0b:46:05:18:ec:f5:66:ed:0e:42:20:e2:8b:d1:c7:
                    5d:91:95:ac:f4:34:ad:d3:86:e0:ec:68:cd:ef:ed:
                    75:01:f8:e5:e3:28:fc:69:37:52:bf:48:91:93:d1:
                    9b:76:30:e3:7e:4d:c5:af:13:b8:41:f8:66:98:84:
                    63:38:46:d1:0e:72:d2:8a:4d:d9:34:21:d5:a5:80:
                    60:e7:d4:28:04:d9:9d:81:22:75:1f:2d:33:e7:01:
                    3f:2d:b9:12:b9:8a:9d:3e:16:62:5d:62:8e:c4:86:
                    d1:85:5b:b9:70:80:a4:eb:07:46:1c:a2:ac:d9:22:
                    a6:7f:e5:98:12:0b:f6:ae:59:0e:3c:c1:c8:ee:34:
                    c5:30:11:57:e1:31:4d:20:8b:49:e7:c9:62:29:7d:
                    09:43:5a:2a:4d:dd:b3:32:20:56:8f:84:82:7c:38:
                    56:43:3b:2e:80:77:0b:e1:78:0c:e8:b0:48:05:62:
                    37:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:71:31:91:0C:E4:DD:B5:74:8D:6F:C9:74:3E:15:AE:05:07:E7:CB
            X509v3 Authority Key Identifier:
                keyid:EC:B3:CF:FB:40:A2:9A:FA:17:F0:7E:5D:4B:3C:42:63:41:36:BA:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3614C03/0053EC7406B311EA9DC20648F8AEA228/7LPP-0CimvoX8H5dSzxCY0E2ukA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/7LPP-0CimvoX8H5dSzxCY0E2ukA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614C03/0053EC7406B311EA9DC20648F8AEA228/0636F15A898711F1BE979A10CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:980::/32

    Signature Algorithm: sha256WithRSAEncryption
         25:c9:e6:91:99:ff:ab:64:f0:9d:af:98:97:c0:a8:25:8f:b6:
         9d:53:34:c8:4d:19:51:c8:51:54:47:c1:0e:ff:be:1d:af:5c:
         07:f5:9f:e4:23:81:91:86:9f:23:0a:c0:fa:e5:13:07:f6:13:
         ed:ff:01:cb:8f:3c:1a:3a:65:90:8d:1a:bb:11:ab:d9:df:be:
         30:6e:74:f9:48:20:ec:3b:db:ca:e1:b0:ce:8c:41:4c:d8:51:
         29:19:da:2c:0e:62:6e:e6:0d:b6:4e:51:de:4c:b1:db:29:83:
         27:76:46:86:8e:6d:64:81:ef:1f:24:f2:d6:98:5d:d0:91:2b:
         31:65:be:5b:0f:2d:e2:fa:38:d3:c8:62:47:fc:36:eb:5c:7e:
         86:8a:8e:6c:9b:c6:0f:5a:80:ec:bf:62:d2:19:5e:51:e7:9c:
         9f:c0:6b:77:35:ff:b8:48:36:8f:81:46:e0:47:fc:08:9f:ff:
         0b:9a:d4:73:56:52:82:85:c9:06:84:6f:72:36:18:c1:4e:ba:
         95:5f:d1:a4:79:34:61:9e:d3:77:68:fb:64:18:33:a9:b8:97:
         11:c9:b4:52:aa:a9:f3:dd:bc:9b:57:f0:b1:2b:7d:ce:2b:5e:
         a5:ec:ee:3a:8a:68:63:7e:74:9c:70:46:8b:a4:65:38:b8:dd:
         fe:11:4e:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----