Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36280C9/892916D0895911F0B0F640C1DAE4EC9C/02C2AD14963611F18EF006A9CE1D38B0.roa
File:                     02C2AD14963611F18EF006A9CE1D38B0.roa (raw, json)
Hash identifier:          7yVk5ub6iRzjmfjduXsEWGHprN8WJb/0ehVAu7gjU0c=
Subject key identifier:   5F:19:67:14:22:F4:B5:87:EE:69:0D:E3:5C:25:54:56:0F:B7:3B:D4
Certificate issuer:       /CN=F36280C9AF/serialNumber=5739E9D2932AD85BCC2240813BF3AB3942843020
Certificate serial:       0164
Authority key identifier: 57:39:E9:D2:93:2A:D8:5B:CC:22:40:81:3B:F3:AB:39:42:84:30:20
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Vznp0pMq2FvMIkCBO_OrOUKEMCA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36280C9/892916D0895911F0B0F640C1DAE4EC9C/02C2AD14963611F18EF006A9CE1D38B0.roa
Signing time:             Wed 12 Aug 2026 10:10:15 +0000
ROA not before:           Wed 12 Aug 2026 10:10:11 +0000
ROA not after:            Thu 12 Aug 2027 10:10:11 +0000
asID:                     329530
IP address blocks:        2c0f:5cc0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36280C9/892916D0895911F0B0F640C1DAE4EC9C/Vznp0pMq2FvMIkCBO_OrOUKEMCA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36280C9/892916D0895911F0B0F640C1DAE4EC9C/Vznp0pMq2FvMIkCBO_OrOUKEMCA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Vznp0pMq2FvMIkCBO_OrOUKEMCA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 05:08:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 356 (0x164)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36280C9AF, serialNumber=5739E9D2932AD85BCC2240813BF3AB3942843020
        Validity
            Not Before: Aug 12 10:10:11 2026 GMT
            Not After : Aug 12 10:10:11 2027 GMT
        Subject: CN=6a7c4687-3e1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:aa:60:fe:5a:95:3c:35:01:b6:78:c5:a8:c2:
                    4c:34:a9:6f:ed:3e:a7:b3:62:b2:58:89:1a:ed:26:
                    9a:6c:a1:b2:5b:8c:ea:01:6b:6b:a3:1d:b8:a9:51:
                    3d:fc:3a:b4:fb:69:f6:d4:c6:04:7c:44:ba:4e:e9:
                    79:9c:52:49:a8:86:61:49:17:22:b4:ce:bb:be:1a:
                    87:96:1b:b6:8d:65:9d:49:e0:06:93:4e:0a:c8:f1:
                    e6:52:ce:9f:b7:19:4a:eb:5f:44:69:93:15:9d:3a:
                    f0:3b:fe:eb:c2:f8:cf:a2:2c:28:c7:f8:da:d8:84:
                    6d:d3:4b:03:fc:ca:07:49:a0:95:08:0b:b8:a1:b6:
                    59:76:0c:dd:3b:68:bb:2d:62:14:0e:43:d3:e2:f3:
                    64:a2:5d:82:0d:fa:27:b3:0c:5d:ca:8a:81:35:fb:
                    4e:28:6d:24:c8:91:07:b1:3b:62:18:9f:ad:f5:ea:
                    0e:f7:58:de:4f:55:d0:4e:85:1f:78:4e:ea:2a:c4:
                    30:03:dc:33:28:47:42:e2:9f:20:00:bc:23:b9:c1:
                    de:95:f0:ed:c0:d7:83:a8:0b:78:d5:fd:bb:63:c8:
                    79:12:35:cf:c2:b0:cb:2a:8a:57:85:15:92:26:7b:
                    ed:4b:01:5b:65:d5:9d:6f:eb:2b:b6:46:85:70:97:
                    3e:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:19:67:14:22:F4:B5:87:EE:69:0D:E3:5C:25:54:56:0F:B7:3B:D4
            X509v3 Authority Key Identifier:
                keyid:57:39:E9:D2:93:2A:D8:5B:CC:22:40:81:3B:F3:AB:39:42:84:30:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36280C9/892916D0895911F0B0F640C1DAE4EC9C/Vznp0pMq2FvMIkCBO_OrOUKEMCA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Vznp0pMq2FvMIkCBO_OrOUKEMCA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36280C9/892916D0895911F0B0F640C1DAE4EC9C/02C2AD14963611F18EF006A9CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:5cc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         6e:a0:34:75:98:7e:3d:61:fd:c6:92:0c:f6:4b:09:92:30:87:
         fe:ea:a5:1d:65:7a:c6:6d:d1:c0:a9:6a:72:57:22:40:d3:55:
         58:f7:c6:25:b6:ea:2b:08:9c:f0:04:65:a9:2f:99:8d:f0:9a:
         0e:33:ca:ae:bc:39:31:17:9c:69:16:7e:78:33:60:29:41:76:
         71:7a:7f:84:c4:21:ed:09:59:cc:92:04:3b:37:ef:76:e0:63:
         82:c1:d8:71:46:4f:91:18:22:b7:08:51:0d:41:4d:0e:f9:bb:
         bc:2b:5b:ee:5d:43:f4:9b:d8:8e:e7:3b:dc:0c:b8:23:c8:38:
         22:05:ed:9b:c2:f1:e0:31:73:63:4d:f3:3f:32:54:73:ab:34:
         65:d5:58:ef:06:67:b3:71:b7:9f:de:80:fb:61:47:92:d6:75:
         dc:ab:bd:43:87:30:ce:6f:4c:e2:42:50:55:c8:d7:30:8a:98:
         bd:7b:1f:9b:4f:71:fb:11:1e:b0:bb:86:29:6d:6a:fc:b1:1e:
         51:33:53:a5:97:9f:ed:5e:90:5a:75:4a:af:a8:cb:0c:d9:8d:
         6e:82:05:0c:5a:69:c3:54:24:8f:0f:6f:0b:8e:f7:dd:c9:c3:
         af:05:a8:67:40:22:0a:a9:75:a1:ba:8f:b6:af:26:c1:db:1b:
         ed:22:1d:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----