Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3634F1B/A133C32A299511F0B2F717B2DAE4EC9C/75018CA4A87611F1A1C132FDCE1D38B0.roa
File:                     75018CA4A87611F1A1C132FDCE1D38B0.roa (raw, json)
Hash identifier:          kaPlPZrYi9anHzP7oZ2VSGM+oAUmE8JgvU3k9ef0eAA=
Subject key identifier:   44:65:47:4E:BA:17:52:32:13:EE:A6:0E:6C:A9:8E:A3:7E:97:10:0A
Certificate issuer:       /CN=F3634F1BAF/serialNumber=49B4D619095D9432AF6460853E147BEF5D1C48B0
Certificate serial:       0214
Authority key identifier: 49:B4:D6:19:09:5D:94:32:AF:64:60:85:3E:14:7B:EF:5D:1C:48:B0
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SbTWGQldlDKvZGCFPhR7710cSLA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3634F1B/A133C32A299511F0B2F717B2DAE4EC9C/75018CA4A87611F1A1C132FDCE1D38B0.roa
Signing time:             Fri 04 Sep 2026 15:36:55 +0000
ROA not before:           Fri 04 Sep 2026 15:36:51 +0000
ROA not after:            Thu 04 Sep 2036 15:36:51 +0000
asID:                     328939
IP address blocks:        102.218.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3634F1B/A133C32A299511F0B2F717B2DAE4EC9C/SbTWGQldlDKvZGCFPhR7710cSLA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3634F1B/A133C32A299511F0B2F717B2DAE4EC9C/SbTWGQldlDKvZGCFPhR7710cSLA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/SbTWGQldlDKvZGCFPhR7710cSLA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 532 (0x214)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3634F1BAF, serialNumber=49B4D619095D9432AF6460853E147BEF5D1C48B0
        Validity
            Not Before: Sep  4 15:36:51 2026 GMT
            Not After : Sep  4 15:36:51 2036 GMT
        Subject: CN=6a9ae597-47e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:42:05:00:8d:23:3f:6a:ae:47:62:68:e5:43:
                    f8:f7:d6:08:ba:50:a2:60:61:b7:05:31:30:18:89:
                    cd:76:26:3d:84:fc:2d:26:4c:0f:ed:4c:28:21:a7:
                    19:98:e9:ad:fc:a9:95:6b:b9:70:6b:aa:d2:d2:e5:
                    46:91:3e:7a:5a:01:16:05:f1:06:0b:a3:df:6c:a1:
                    db:3e:62:cc:84:6d:04:22:95:e0:b0:70:06:6b:34:
                    e3:89:93:80:8d:7f:e0:7f:21:cb:5b:66:ed:4a:d1:
                    0e:65:75:e6:08:8e:21:20:eb:94:00:0f:ce:c7:46:
                    65:a9:93:72:b6:0f:49:29:1b:86:9f:13:60:e3:de:
                    40:b4:03:7a:3c:76:d8:ae:c3:84:e6:16:13:5d:49:
                    1e:67:f5:a5:aa:5a:6b:bd:cf:06:45:9c:c2:5d:57:
                    08:9b:6c:49:c7:99:c5:8e:41:9b:51:34:84:af:26:
                    c0:8f:0d:a9:38:c3:a8:58:ce:f6:4a:65:d6:69:bb:
                    ba:98:bb:ca:10:8c:27:95:84:d8:e7:06:9d:8d:2b:
                    42:5d:40:34:7a:28:97:bc:45:f7:b8:e0:85:b0:6a:
                    35:a2:4f:11:15:5b:65:f6:b7:e9:0d:8b:e8:ea:3c:
                    77:2c:1c:4f:a6:47:fa:96:cf:23:04:09:ef:ff:53:
                    4b:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:65:47:4E:BA:17:52:32:13:EE:A6:0E:6C:A9:8E:A3:7E:97:10:0A
            X509v3 Authority Key Identifier:
                keyid:49:B4:D6:19:09:5D:94:32:AF:64:60:85:3E:14:7B:EF:5D:1C:48:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3634F1B/A133C32A299511F0B2F717B2DAE4EC9C/SbTWGQldlDKvZGCFPhR7710cSLA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SbTWGQldlDKvZGCFPhR7710cSLA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3634F1B/A133C32A299511F0B2F717B2DAE4EC9C/75018CA4A87611F1A1C132FDCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.218.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:a4:21:f6:68:51:fe:9b:e9:40:9d:c2:d4:86:ed:09:35:1f:
         2c:71:6a:05:ab:f7:c7:89:23:c0:fe:94:71:22:e2:ca:76:99:
         90:a9:bd:df:20:7a:ae:9a:9a:a6:0e:28:00:54:49:de:1f:fc:
         b3:c5:bf:e2:08:25:6b:f8:3f:00:c4:c7:a3:48:3d:19:d3:8a:
         ce:bb:1b:3a:3e:1a:aa:03:d1:24:d9:06:e5:54:0a:32:ee:ac:
         9e:e6:02:7f:b2:aa:a1:30:5e:d7:f0:8f:71:36:55:4a:e5:4e:
         ce:c5:23:82:a6:6d:5e:4d:4b:14:5e:25:8e:d4:6b:18:df:4e:
         7a:c2:32:64:c0:0e:65:e6:b8:9f:ce:56:1e:08:a2:e2:5f:07:
         74:b3:d0:0b:e9:93:92:ff:37:60:be:2f:ec:26:0e:d2:bd:1e:
         e2:a2:a1:0b:4b:67:18:b2:a4:5b:15:cd:2c:ce:1c:8d:e1:4d:
         7d:8b:ec:0f:6b:4a:1d:f8:af:78:9c:5b:6a:c6:81:96:33:a5:
         4a:62:ae:b5:1f:ca:4b:6a:55:82:91:43:e8:77:01:87:32:f9:
         87:9f:93:f5:f8:bf:a6:f9:ad:71:34:5e:11:7b:aa:09:08:9d:
         56:b6:e3:48:78:7e:63:0d:a6:ad:27:7f:60:e7:63:32:96:bb:
         7e:68:81:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----