Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3652210/010E0928F53C11F094A518DBDAE4EC9C/8042ECA664ED11F18B9C421CCF1D38B0.roa
File:                     8042ECA664ED11F18B9C421CCF1D38B0.roa (raw, json)
Hash identifier:          HoCxvJytOKvN4Wewmb/+ggiWn16JSa5j93hIBwVLwfo=
Subject key identifier:   3A:59:0B:AC:D9:BE:76:87:E9:20:EE:3D:E7:A7:78:31:AE:95:51:17
Certificate issuer:       /CN=F3652210AF/serialNumber=75519AF48BCFD3BA46851652DF54B8B7EB88EDFF
Certificate serial:       98
Authority key identifier: 75:51:9A:F4:8B:CF:D3:BA:46:85:16:52:DF:54:B8:B7:EB:88:ED:FF
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/dVGa9IvP07pGhRZS31S4t-uI7f8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3652210/010E0928F53C11F094A518DBDAE4EC9C/8042ECA664ED11F18B9C421CCF1D38B0.roa
Signing time:             Wed 10 Jun 2026 16:57:45 +0000
ROA not before:           Wed 10 Jun 2026 16:57:40 +0000
ROA not after:            Tue 10 Jun 2036 16:57:40 +0000
asID:                     37049
IP address blocks:        2c0f:fdc8::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3652210/010E0928F53C11F094A518DBDAE4EC9C/dVGa9IvP07pGhRZS31S4t-uI7f8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3652210/010E0928F53C11F094A518DBDAE4EC9C/dVGa9IvP07pGhRZS31S4t-uI7f8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/dVGa9IvP07pGhRZS31S4t-uI7f8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 15 Jun 2026 00:07:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 152 (0x98)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3652210AF, serialNumber=75519AF48BCFD3BA46851652DF54B8B7EB88EDFF
        Validity
            Not Before: Jun 10 16:57:40 2026 GMT
            Not After : Jun 10 16:57:40 2036 GMT
        Subject: CN=6a299789-3035
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:8b:e9:60:c3:7b:1d:20:49:30:58:1a:e0:23:
                    68:fb:d7:39:00:15:a0:94:94:46:6f:51:9f:f9:09:
                    d3:b6:f7:38:c2:78:f1:f7:65:24:7e:17:b7:42:f6:
                    8d:a1:18:8c:a5:ac:7d:98:6c:e5:1a:95:ab:11:a1:
                    69:6d:cc:d1:93:fc:54:d5:59:d5:2d:43:8a:67:01:
                    6b:aa:26:b3:0f:97:15:60:ad:00:2e:4f:ce:9c:73:
                    6e:e1:ab:20:01:4c:15:ce:33:a1:e3:7a:d8:10:15:
                    b4:69:7d:58:26:a0:9b:c2:35:7d:84:2f:fa:75:5c:
                    e3:35:b4:e6:9b:72:49:c2:82:3e:70:a5:b4:9d:05:
                    8f:00:4a:01:ef:6b:63:ad:5f:39:43:5e:28:da:96:
                    d5:53:da:f2:b7:23:2b:07:d9:8b:5f:5c:1f:8e:76:
                    fb:0f:3e:96:ce:87:51:ee:28:c5:a4:c5:ee:ea:f6:
                    dd:a9:66:1d:c4:04:fe:5a:9a:bc:c5:b6:82:f3:8a:
                    17:0f:11:8c:f6:00:68:a8:95:0b:7e:0b:98:af:ca:
                    e8:55:9a:f5:21:11:4e:6c:e2:65:61:34:48:3c:ef:
                    7c:77:96:df:cd:69:77:6b:f2:29:5e:bd:20:2b:58:
                    5d:05:73:26:6d:99:4f:fb:51:74:3b:29:c9:27:1e:
                    a6:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:59:0B:AC:D9:BE:76:87:E9:20:EE:3D:E7:A7:78:31:AE:95:51:17
            X509v3 Authority Key Identifier:
                keyid:75:51:9A:F4:8B:CF:D3:BA:46:85:16:52:DF:54:B8:B7:EB:88:ED:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3652210/010E0928F53C11F094A518DBDAE4EC9C/dVGa9IvP07pGhRZS31S4t-uI7f8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/dVGa9IvP07pGhRZS31S4t-uI7f8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3652210/010E0928F53C11F094A518DBDAE4EC9C/8042ECA664ED11F18B9C421CCF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:fdc8::/32

    Signature Algorithm: sha256WithRSAEncryption
         07:f0:5d:18:3f:56:f6:55:33:79:27:74:1b:43:b4:64:c5:c0:
         d4:02:61:b3:0b:d3:71:84:8e:49:eb:b0:97:48:82:a0:95:5e:
         04:61:74:ef:ce:87:ed:e4:13:43:18:c0:e6:ce:be:de:f5:42:
         46:72:ab:89:a6:f1:6f:43:9d:89:8e:7f:65:18:d8:6f:4a:69:
         5f:52:40:f4:24:cd:76:58:07:ad:6e:4f:3e:f2:de:e0:11:3e:
         f2:27:8a:01:c1:9b:bd:5e:7d:2a:93:f7:11:88:ff:eb:7d:e5:
         6c:84:bf:a6:1b:b0:ff:87:65:4c:96:88:f0:9d:13:0a:39:7b:
         f4:64:c8:94:a4:65:c8:ad:1b:6c:d2:82:4a:81:9b:2a:36:c6:
         a9:1c:f1:8c:aa:36:4c:6a:14:90:11:d4:b0:fe:9a:03:d4:ec:
         41:74:14:dd:f6:c9:e8:61:0a:10:18:10:82:8a:2c:a2:55:82:
         31:39:dc:2d:40:09:a4:34:8d:16:7f:dd:41:24:20:44:f6:77:
         6a:09:09:81:83:2e:ba:91:14:ae:1a:6e:b6:2e:b4:60:09:61:
         45:d4:86:4c:3a:fd:08:48:7c:84:f5:88:17:4c:50:cf:ad:49:
         6d:67:92:ec:f1:25:e9:b0:d1:ff:ea:35:15:3f:72:6e:90:15:
         39:1b:9c:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----