Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36252A7/89497A60E38311E99E55F585F8AEA228/59BD768489A311F1BC93DDBDCE1D38B0.roa
File:                     59BD768489A311F1BC93DDBDCE1D38B0.roa (raw, json)
Hash identifier:          PnOZM4fziwXgFuIEH1/8SuyMNltqLTKgfJ/kcx4KdpE=
Subject key identifier:   BB:77:C3:A6:F2:45:ED:B7:09:FE:B4:CA:BF:E9:7A:8D:90:D1:78:47
Certificate issuer:       /CN=F36252A7AF/serialNumber=027E1A4463C685FBD63863F9D3B23BAC2D93B168
Certificate serial:       0A01
Authority key identifier: 02:7E:1A:44:63:C6:85:FB:D6:38:63:F9:D3:B2:3B:AC:2D:93:B1:68
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/An4aRGPGhfvWOGP507I7rC2TsWg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36252A7/89497A60E38311E99E55F585F8AEA228/59BD768489A311F1BC93DDBDCE1D38B0.roa
Signing time:             Mon 27 Jul 2026 10:10:11 +0000
ROA not before:           Mon 27 Jul 2026 10:10:07 +0000
ROA not after:            Sun 27 Jul 2036 10:10:07 +0000
asID:                     36985
IP address blocks:        2c0f:f150::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36252A7/89497A60E38311E99E55F585F8AEA228/An4aRGPGhfvWOGP507I7rC2TsWg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36252A7/89497A60E38311E99E55F585F8AEA228/An4aRGPGhfvWOGP507I7rC2TsWg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/An4aRGPGhfvWOGP507I7rC2TsWg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 30 Jul 2026 01:36:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2561 (0xa01)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36252A7AF, serialNumber=027E1A4463C685FBD63863F9D3B23BAC2D93B168
        Validity
            Not Before: Jul 27 10:10:07 2026 GMT
            Not After : Jul 27 10:10:07 2036 GMT
        Subject: CN=6a672e83-d7c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:28:04:12:26:46:83:9d:b5:c3:b6:6c:28:7d:
                    16:ae:31:99:13:6a:c4:b2:1c:ca:ba:45:48:38:26:
                    44:0f:fa:3b:45:56:a0:b2:cb:ad:f8:d2:2e:69:e8:
                    33:e7:bd:25:34:16:85:5a:0d:69:9a:b6:4c:30:18:
                    8e:d4:8a:70:28:79:87:3e:e6:48:37:97:59:9f:60:
                    78:ec:81:14:43:81:41:7a:ab:03:28:c8:23:8a:6c:
                    94:a4:b3:c3:52:8d:17:d2:be:59:99:16:f3:18:1a:
                    d7:ab:7e:65:2f:93:c6:d9:93:64:57:f3:b8:b1:33:
                    4a:88:e4:b3:67:87:c5:b1:aa:85:5c:d7:de:50:a1:
                    8e:50:91:77:9b:f9:01:7c:a8:ed:0d:2d:ca:03:22:
                    9c:cd:c3:2d:98:f0:f9:af:8f:24:46:2f:c8:50:09:
                    13:90:4a:2c:6e:4c:fd:26:a0:e4:98:41:77:14:5d:
                    01:b3:6c:ff:f6:1b:c5:0f:2e:67:15:20:13:2a:0c:
                    93:1e:6f:fb:97:9a:c5:72:60:24:c7:3b:d3:95:e2:
                    aa:f4:a5:34:d2:d9:16:42:ff:bd:61:fa:9d:3f:ef:
                    bd:56:c3:cb:a1:96:51:8d:e9:51:62:d6:4e:4c:92:
                    0b:20:b4:b7:af:9d:81:2f:1e:08:39:ac:28:80:89:
                    6e:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:77:C3:A6:F2:45:ED:B7:09:FE:B4:CA:BF:E9:7A:8D:90:D1:78:47
            X509v3 Authority Key Identifier:
                keyid:02:7E:1A:44:63:C6:85:FB:D6:38:63:F9:D3:B2:3B:AC:2D:93:B1:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36252A7/89497A60E38311E99E55F585F8AEA228/An4aRGPGhfvWOGP507I7rC2TsWg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/An4aRGPGhfvWOGP507I7rC2TsWg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36252A7/89497A60E38311E99E55F585F8AEA228/59BD768489A311F1BC93DDBDCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:f150::/32

    Signature Algorithm: sha256WithRSAEncryption
         86:b7:24:52:18:4f:0f:42:3b:3e:23:62:fc:dc:57:38:d9:8f:
         e5:c9:7f:37:61:67:44:5f:ea:50:c0:4e:67:27:f6:d2:5b:01:
         3d:2c:93:23:00:15:d2:b1:58:f7:9c:e9:9a:26:9a:6b:01:92:
         27:e1:88:b4:d5:be:72:a1:3f:d0:02:17:d1:e0:c6:e5:ad:a6:
         13:be:36:85:8a:22:ea:77:3f:a2:fb:33:84:f2:35:c2:9f:f3:
         8a:34:75:9b:40:7c:b7:db:c8:aa:bc:89:b4:50:66:81:3f:6f:
         ef:8e:fd:ce:da:bd:34:ab:66:32:f6:66:31:14:f0:97:97:9a:
         7e:e1:44:9d:81:eb:42:70:cd:b8:90:12:88:33:04:18:1f:af:
         20:39:53:e4:97:e9:b6:89:44:84:01:3c:5f:01:bf:11:8e:4f:
         59:0d:c5:d1:94:d7:14:90:48:8d:f2:1d:fe:58:a5:03:68:6b:
         eb:56:d5:a3:d6:1c:1e:70:fb:ca:fc:c5:13:59:f9:9f:03:26:
         b6:19:56:39:b5:03:dc:5b:f6:a4:9b:08:68:2b:01:98:2e:70:
         58:12:c8:fe:2c:68:0c:ab:47:9e:b3:06:95:1d:27:9d:36:db:
         ae:d0:2b:32:dc:3e:e9:7c:29:a5:74:a6:33:cd:ad:63:62:d0:
         8b:2c:a5:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----