Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36280C9/892916D0895911F0B0F640C1DAE4EC9C/611421F4963611F1931026A9CE1D38B0.roa
File:                     611421F4963611F1931026A9CE1D38B0.roa (raw, json)
Hash identifier:          tWLHDOBkRMEzQ3q95dvL/0lstFSuE+RsrJDK/J7YVe8=
Subject key identifier:   F7:9A:35:17:CC:C2:0E:79:E2:EC:84:1A:E1:1D:F6:68:63:21:D2:8A
Certificate issuer:       /CN=F36280C9AF/serialNumber=5739E9D2932AD85BCC2240813BF3AB3942843020
Certificate serial:       0166
Authority key identifier: 57:39:E9:D2:93:2A:D8:5B:CC:22:40:81:3B:F3:AB:39:42:84:30:20
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Vznp0pMq2FvMIkCBO_OrOUKEMCA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36280C9/892916D0895911F0B0F640C1DAE4EC9C/611421F4963611F1931026A9CE1D38B0.roa
Signing time:             Wed 12 Aug 2026 10:12:53 +0000
ROA not before:           Wed 12 Aug 2026 10:12:49 +0000
ROA not after:            Thu 12 Aug 2027 10:12:49 +0000
asID:                     329530
IP address blocks:        102.202.72.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36280C9/892916D0895911F0B0F640C1DAE4EC9C/Vznp0pMq2FvMIkCBO_OrOUKEMCA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36280C9/892916D0895911F0B0F640C1DAE4EC9C/Vznp0pMq2FvMIkCBO_OrOUKEMCA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Vznp0pMq2FvMIkCBO_OrOUKEMCA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 358 (0x166)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36280C9AF, serialNumber=5739E9D2932AD85BCC2240813BF3AB3942843020
        Validity
            Not Before: Aug 12 10:12:49 2026 GMT
            Not After : Aug 12 10:12:49 2027 GMT
        Subject: CN=6a7c4725-1ae7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:42:d4:fb:35:58:69:ea:48:ad:67:88:ba:31:
                    de:f8:7b:96:5b:8f:fc:d1:cb:49:2e:23:e4:e3:db:
                    32:c3:78:9b:f9:e3:3c:c8:1c:0a:ef:11:77:7d:9d:
                    97:79:0e:9a:c8:23:85:de:b4:97:47:2c:ee:d2:2b:
                    4d:47:5d:32:6f:4f:a2:8b:91:5a:75:36:f7:8d:eb:
                    db:af:db:2d:d8:2e:85:de:9a:92:89:8c:26:7d:68:
                    6a:9f:fd:0d:ab:2f:e4:bb:10:a5:7a:03:5f:74:37:
                    78:42:4b:5e:67:df:db:0c:23:b4:82:27:b0:91:e7:
                    74:4d:d9:b5:16:c7:6d:c4:5f:68:08:f2:7b:99:b1:
                    e7:10:2b:ee:d8:c6:51:0c:64:fe:a8:51:68:85:94:
                    f7:43:10:c0:87:07:9a:17:90:6f:f5:e3:1c:22:b7:
                    00:da:0f:b8:35:dd:72:c4:3a:e1:06:73:08:e5:ee:
                    5c:62:2e:75:7c:d6:cb:aa:4b:a0:4c:26:2d:d2:6c:
                    1f:2a:88:b3:37:61:93:d5:7c:38:57:c8:f9:68:8a:
                    87:76:0a:a5:6a:5b:05:cc:c7:30:fe:da:a4:85:34:
                    4f:82:8f:0d:12:1e:1a:4d:a4:37:1a:a1:6d:a2:f0:
                    9d:f9:b9:d8:dd:5d:f4:7a:96:75:14:4a:ba:8d:91:
                    f1:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:9A:35:17:CC:C2:0E:79:E2:EC:84:1A:E1:1D:F6:68:63:21:D2:8A
            X509v3 Authority Key Identifier:
                keyid:57:39:E9:D2:93:2A:D8:5B:CC:22:40:81:3B:F3:AB:39:42:84:30:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36280C9/892916D0895911F0B0F640C1DAE4EC9C/Vznp0pMq2FvMIkCBO_OrOUKEMCA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Vznp0pMq2FvMIkCBO_OrOUKEMCA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36280C9/892916D0895911F0B0F640C1DAE4EC9C/611421F4963611F1931026A9CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.202.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8b:d4:8b:7f:c4:19:25:fe:13:07:75:68:d2:05:32:d2:15:ff:
         99:0c:2e:a5:9d:0d:3f:5e:3a:ef:f8:18:25:88:bb:ea:32:3c:
         30:7c:9f:4a:99:5e:3d:10:68:a3:12:5e:7c:b9:a4:b7:78:3a:
         ef:e0:93:bf:f0:70:25:37:fe:48:8e:d6:9c:bd:65:fe:79:65:
         43:80:bd:9b:41:63:b0:c7:25:c9:af:38:9d:06:d1:ac:a2:5f:
         80:5c:96:dd:18:48:9b:1e:87:a6:3a:29:76:9d:aa:30:d7:46:
         ff:d3:8c:00:1a:7d:c7:8a:39:df:ac:be:cb:eb:a5:7e:11:70:
         5b:51:d6:73:43:0b:e3:3d:1b:f3:e8:44:ab:33:cc:54:dc:eb:
         91:fb:07:62:c8:93:3c:2c:9f:43:91:96:ac:b2:5e:5d:04:cb:
         19:b5:d6:99:49:6f:93:2f:16:ae:db:b8:a4:84:70:fa:38:94:
         3e:fb:36:62:9e:be:a8:eb:87:30:42:b5:09:70:22:23:94:c5:
         12:8b:68:df:b6:e7:c2:5b:a5:45:b7:da:74:fd:09:6a:52:d8:
         06:b1:43:64:02:fb:6e:80:3a:e6:4c:77:5f:22:36:18:a3:e4:
         8c:60:cb:7c:67:6c:5e:88:a1:80:fa:42:12:2c:ef:42:c0:86:
         21:0c:9f:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----