Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365BC44/892D49C6F61811ECBE1B38AFF1222468/2B5FFC7E8A8111F181915D05CF1D38B0.roa
File:                     2B5FFC7E8A8111F181915D05CF1D38B0.roa (raw, json)
Hash identifier:          3X5q3nZcQZSHPjyCY6TkppWSebt/r5l7c9ae4Wi3LQQ=
Subject key identifier:   08:94:34:39:1F:6A:AE:A5:46:28:10:B2:46:AD:25:50:D3:BC:E8:B4
Certificate issuer:       /CN=F365BC44AF/serialNumber=2D00154E600A640AC32A3285D9CE9FC50A941AB3
Certificate serial:       060B
Authority key identifier: 2D:00:15:4E:60:0A:64:0A:C3:2A:32:85:D9:CE:9F:C5:0A:94:1A:B3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/LQAVTmAKZArDKjKF2c6fxQqUGrM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365BC44/892D49C6F61811ECBE1B38AFF1222468/2B5FFC7E8A8111F181915D05CF1D38B0.roa
Signing time:             Tue 28 Jul 2026 12:38:01 +0000
ROA not before:           Tue 28 Jul 2026 12:37:57 +0000
ROA not after:            Sun 27 Jun 2032 12:37:57 +0000
asID:                     328915
IP address blocks:        2c0f:2900::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365BC44/892D49C6F61811ECBE1B38AFF1222468/LQAVTmAKZArDKjKF2c6fxQqUGrM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365BC44/892D49C6F61811ECBE1B38AFF1222468/LQAVTmAKZArDKjKF2c6fxQqUGrM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/LQAVTmAKZArDKjKF2c6fxQqUGrM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 31 Jul 2026 00:07:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1547 (0x60b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365BC44AF, serialNumber=2D00154E600A640AC32A3285D9CE9FC50A941AB3
        Validity
            Not Before: Jul 28 12:37:57 2026 GMT
            Not After : Jun 27 12:37:57 2032 GMT
        Subject: CN=6a68a2a9-aa1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:43:1f:dd:16:81:ae:88:01:0f:69:76:17:0b:
                    35:bc:de:e5:0c:fc:35:7f:b3:2c:26:24:ea:c1:53:
                    28:b0:e1:4f:16:1f:e7:5a:8a:33:2f:b2:76:bd:1f:
                    d1:4f:1b:48:6e:4b:39:c6:36:c2:62:47:0b:2e:6d:
                    34:50:0b:7e:8c:5d:65:ab:02:c2:8f:1f:f7:3d:32:
                    f2:52:07:69:e4:c4:3f:78:21:49:61:ce:ab:a0:e5:
                    f7:6a:f4:4b:58:a2:ba:b9:93:c9:8f:e5:90:74:4d:
                    05:33:26:8f:50:cf:1d:6d:c5:2d:de:d1:20:51:32:
                    2f:54:79:80:3f:72:9a:a6:c2:4e:9c:49:36:85:2b:
                    bd:a2:d8:6e:b3:37:c1:d0:34:13:13:d6:08:6d:26:
                    16:8d:e1:80:18:9b:2f:ee:a9:49:8c:0b:5e:07:dc:
                    ba:0f:2e:03:30:02:0b:50:ac:80:17:12:a0:de:8b:
                    6d:11:28:98:f1:d3:51:20:5c:68:8c:95:e7:12:f8:
                    76:05:ed:71:f7:8d:4a:b3:ca:66:54:1a:d5:00:43:
                    5d:6a:67:46:7f:7c:84:11:62:99:ef:ea:c8:e8:df:
                    2c:a1:02:09:66:65:e4:97:ca:26:9a:35:34:49:fb:
                    0f:e7:6a:f2:28:e8:d5:b4:20:55:43:e0:cd:ce:0c:
                    5d:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:94:34:39:1F:6A:AE:A5:46:28:10:B2:46:AD:25:50:D3:BC:E8:B4
            X509v3 Authority Key Identifier:
                keyid:2D:00:15:4E:60:0A:64:0A:C3:2A:32:85:D9:CE:9F:C5:0A:94:1A:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365BC44/892D49C6F61811ECBE1B38AFF1222468/LQAVTmAKZArDKjKF2c6fxQqUGrM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/LQAVTmAKZArDKjKF2c6fxQqUGrM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365BC44/892D49C6F61811ECBE1B38AFF1222468/2B5FFC7E8A8111F181915D05CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:2900::/32

    Signature Algorithm: sha256WithRSAEncryption
         9c:1c:91:25:63:60:ed:f3:7b:72:a8:4f:56:9a:ca:2a:d8:50:
         8f:7d:12:6d:72:f5:2b:37:01:ba:e8:f2:35:2a:0e:4a:a7:97:
         0c:ef:b0:bb:3d:33:20:ba:32:b7:c0:da:54:b8:8b:c2:6d:a1:
         78:7a:31:51:7a:30:7c:30:19:9f:c2:93:db:ea:4d:24:57:46:
         45:4c:76:84:0d:f2:2d:88:b0:0c:4a:58:dc:7c:64:2c:57:b7:
         e5:be:82:aa:54:1a:cd:5f:d9:8b:30:10:83:8f:81:b7:29:8b:
         a9:db:e4:4c:e4:ec:31:35:43:cd:37:50:ee:52:7b:92:03:90:
         f1:4d:3c:8f:d9:70:8a:7b:54:4b:73:13:35:6d:09:ac:f3:00:
         6e:85:0f:bc:c8:30:5e:16:9f:5e:58:2f:49:ae:ca:15:a9:bc:
         66:90:f3:b7:96:18:ea:ea:ee:2a:cb:27:af:fe:42:11:62:55:
         b0:b2:1f:40:e2:e9:1e:23:5e:2c:a9:bf:f1:0d:a5:4f:08:27:
         f1:fd:2a:5e:12:c2:b1:dd:64:54:8f:19:d6:ec:98:cd:00:86:
         f2:9c:52:e1:54:a9:9a:b4:24:31:82:9a:6c:24:c5:f9:d9:21:
         12:a4:c6:32:af:90:03:c7:a4:f9:c6:23:df:72:43:9d:bc:99:
         ca:93:9c:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----