Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3635607/08C590D2850111F1AB43C5F3CE1D38B0/72B8576AA06B11F198681BD0CE1D38B0.roa
File:                     72B8576AA06B11F198681BD0CE1D38B0.roa (raw, json)
Hash identifier:          Ef2k8dsUP84NWv6mkpngXwzhb1fhUvwe176Ha0us9n4=
Subject key identifier:   70:ED:99:72:3F:27:46:F1:4F:82:A7:06:E7:5A:38:23:8C:5C:1B:08
Certificate issuer:       /CN=F3635607AF/serialNumber=BD5E8BACFC46684D4DEAA68A230DAE4185589DAD
Certificate serial:       2D
Authority key identifier: BD:5E:8B:AC:FC:46:68:4D:4D:EA:A6:8A:23:0D:AE:41:85:58:9D:AD
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/vV6LrPxGaE1N6qaKIw2uQYVYna0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3635607/08C590D2850111F1AB43C5F3CE1D38B0/72B8576AA06B11F198681BD0CE1D38B0.roa
Signing time:             Tue 25 Aug 2026 09:57:58 +0000
ROA not before:           Tue 25 Aug 2026 09:57:53 +0000
ROA not after:            Wed 31 Dec 2036 09:57:53 +0000
asID:                     16509
IP address blocks:        102.201.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3635607/08C590D2850111F1AB43C5F3CE1D38B0/vV6LrPxGaE1N6qaKIw2uQYVYna0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3635607/08C590D2850111F1AB43C5F3CE1D38B0/vV6LrPxGaE1N6qaKIw2uQYVYna0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/vV6LrPxGaE1N6qaKIw2uQYVYna0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 05:46:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 45 (0x2d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3635607AF, serialNumber=BD5E8BACFC46684D4DEAA68A230DAE4185589DAD
        Validity
            Not Before: Aug 25 09:57:53 2026 GMT
            Not After : Dec 31 09:57:53 2036 GMT
        Subject: CN=6a8d6725-3d09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:7b:39:7e:13:ac:75:ac:4f:9f:a6:bf:3e:58:
                    63:b3:d4:f2:2f:d6:47:b2:89:2b:1f:47:5d:03:d0:
                    fc:31:00:5b:1b:77:d4:a7:ed:28:49:79:3f:1a:c3:
                    94:a0:63:b1:0a:da:36:31:81:f5:74:08:be:f4:1a:
                    01:dd:c4:93:88:50:89:4c:2e:b2:b2:cb:79:5c:e3:
                    b5:cf:ce:74:f9:99:3c:6e:80:76:09:12:51:a8:a9:
                    46:da:89:4c:79:01:c2:e3:35:f7:ba:d5:f4:d0:a5:
                    a5:81:64:4a:7b:84:e5:e4:dd:2e:bd:c7:ad:e9:c9:
                    1d:04:90:5f:3d:79:25:b3:ce:8f:88:c4:10:54:6e:
                    47:72:d1:7b:0e:b2:76:30:7a:95:76:89:a6:82:eb:
                    21:f5:48:1a:7d:33:9e:41:9b:f5:7a:38:24:88:61:
                    ae:6b:9d:8c:03:ce:01:43:00:7a:88:c6:2c:7b:91:
                    24:0a:18:dd:a2:87:e0:74:5f:15:82:2d:a6:3d:15:
                    de:23:af:09:94:fe:36:e7:46:e3:bc:c8:c5:c3:e4:
                    a5:c3:b0:32:a7:12:e9:fc:57:65:59:dc:ad:85:74:
                    82:96:77:d2:62:fb:b4:6c:91:22:75:a0:fe:32:41:
                    c6:87:72:46:2b:27:25:ab:d4:91:df:ad:23:ac:b2:
                    c0:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:ED:99:72:3F:27:46:F1:4F:82:A7:06:E7:5A:38:23:8C:5C:1B:08
            X509v3 Authority Key Identifier:
                keyid:BD:5E:8B:AC:FC:46:68:4D:4D:EA:A6:8A:23:0D:AE:41:85:58:9D:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3635607/08C590D2850111F1AB43C5F3CE1D38B0/vV6LrPxGaE1N6qaKIw2uQYVYna0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/vV6LrPxGaE1N6qaKIw2uQYVYna0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3635607/08C590D2850111F1AB43C5F3CE1D38B0/72B8576AA06B11F198681BD0CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.201.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:4c:97:ad:83:4b:ad:a6:76:fc:20:44:d8:b9:f5:3c:6f:81:
         d5:fa:8a:bd:5d:66:db:63:d0:57:31:59:73:2e:7e:b0:c1:8e:
         29:96:81:86:97:25:95:d9:a8:4e:ad:93:dc:dd:47:6d:43:35:
         aa:28:f2:cd:59:3f:b2:ed:1a:42:cc:29:07:63:2e:c7:42:fc:
         c0:9c:91:b3:e7:72:0a:fa:8f:8c:be:07:da:8b:10:85:b3:53:
         7d:6a:e9:5a:cf:8f:1b:5e:2c:1f:e7:17:2f:2f:e5:af:9b:d1:
         a1:58:a2:25:84:5d:81:6e:d9:cb:41:d5:bc:08:91:2c:8d:31:
         81:3d:bc:d8:47:3d:60:ac:9f:f7:e6:ce:09:8c:94:e7:90:f2:
         c9:9b:f5:ec:89:0a:f5:0c:03:d2:4c:21:59:4a:88:a6:a8:e7:
         7f:b5:c5:fc:0b:f6:ae:ab:b4:39:48:37:d7:2b:f4:6d:ff:86:
         b6:1a:77:2e:d4:ba:e7:0b:90:90:19:04:ca:2c:5a:9d:dd:48:
         cd:2b:8c:95:83:30:37:4e:5a:84:e8:a0:80:c8:05:07:1e:6f:
         2e:87:82:2b:1d:d2:07:01:23:53:e0:3c:ad:f0:6a:b5:fd:4e:
         26:3a:4b:60:b5:fd:b5:5d:e0:38:42:2e:3a:ca:da:82:87:fb:
         97:21:b5:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----