Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/DFA7A342B04911F187D1F3DFCE1D38B0.roa
File:                     DFA7A342B04911F187D1F3DFCE1D38B0.roa (raw, json)
Hash identifier:          EQXjr+GeRZbv3c4OcOdL9TP+7SybAubMWSm6gSx0/6s=
Subject key identifier:   C3:22:86:B0:A2:15:D7:92:98:7C:97:42:BC:9A:B7:81:59:40:FC:F4
Certificate issuer:       /CN=F36A1CEFAF/serialNumber=82F1C6611A3A1467DB3D78A4A5FED50A08A57B13
Certificate serial:       0894
Authority key identifier: 82:F1:C6:61:1A:3A:14:67:DB:3D:78:A4:A5:FE:D5:0A:08:A5:7B:13
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/gvHGYRo6FGfbPXikpf7VCgilexM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/DFA7A342B04911F187D1F3DFCE1D38B0.roa
Signing time:             Mon 14 Sep 2026 14:37:56 +0000
ROA not before:           Mon 14 Sep 2026 14:37:51 +0000
ROA not after:            Fri 12 Sep 2036 14:37:51 +0000
asID:                     37645
IP address blocks:        102.201.216.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/gvHGYRo6FGfbPXikpf7VCgilexM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 02:18:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2196 (0x894)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A1CEFAF, serialNumber=82F1C6611A3A1467DB3D78A4A5FED50A08A57B13
        Validity
            Not Before: Sep 14 14:37:51 2026 GMT
            Not After : Sep 12 14:37:51 2036 GMT
        Subject: CN=6aa806c4-c2b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:98:34:63:33:cb:8c:77:a8:28:4a:eb:75:e8:
                    7e:5a:e5:46:bc:64:73:f2:4d:37:73:c7:d6:6e:1f:
                    0c:17:7f:c5:03:0b:e8:d9:eb:c9:1c:50:c7:d1:30:
                    6f:75:90:21:a0:11:a4:d5:8e:a7:3f:59:75:07:cf:
                    8c:fe:70:ff:e5:08:98:62:64:a4:bd:31:65:1e:46:
                    7a:f1:fb:34:68:ef:40:04:83:dd:16:80:b6:2c:ee:
                    d0:57:81:e8:cb:2e:97:63:a4:70:b8:6a:09:a4:93:
                    be:3c:52:94:7a:f0:82:e2:13:0c:e7:6c:4e:f8:b0:
                    f7:46:b7:43:f1:9e:31:ae:f9:fc:24:89:5b:1f:1a:
                    0d:82:1e:7e:de:a3:5f:ba:7f:16:e7:13:e2:ba:44:
                    7d:e5:04:ef:db:95:4a:64:be:b3:c8:73:dd:1f:58:
                    c5:b9:16:d6:c0:08:59:1b:cf:2b:1a:0e:70:35:7f:
                    12:70:a8:df:66:a4:f7:e0:0d:f1:5f:9c:22:bb:72:
                    b6:f0:13:76:63:08:88:b8:0a:e2:46:b9:40:89:1c:
                    36:17:b3:6c:5e:86:93:d1:27:ae:6c:35:35:44:25:
                    af:be:10:bc:6e:0c:c2:fe:9a:d5:c9:ce:87:73:41:
                    9e:69:38:4a:b6:87:63:26:ed:60:04:c2:d3:8f:71:
                    cd:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:22:86:B0:A2:15:D7:92:98:7C:97:42:BC:9A:B7:81:59:40:FC:F4
            X509v3 Authority Key Identifier:
                keyid:82:F1:C6:61:1A:3A:14:67:DB:3D:78:A4:A5:FE:D5:0A:08:A5:7B:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gvHGYRo6FGfbPXikpf7VCgilexM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/DFA7A342B04911F187D1F3DFCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.201.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         83:fa:b9:c3:31:c7:69:53:20:b5:0b:44:42:d3:c8:e6:c1:43:
         1a:f0:4f:0f:8c:e3:dd:25:bf:c3:d8:58:74:df:13:e0:fa:17:
         6f:5d:6c:8d:a1:57:74:b7:f1:92:ae:00:b2:21:ce:7c:fe:f8:
         9e:c2:40:4e:8d:17:21:a3:30:8d:03:f2:61:dc:47:dd:ba:ae:
         26:6d:b1:f4:ec:4e:e5:a5:2f:21:ec:3d:37:62:bc:8c:85:f0:
         95:e0:11:0d:3a:fe:e6:53:f3:60:4f:78:0b:06:98:3a:93:79:
         6e:22:76:2c:d6:18:1b:04:72:f5:9d:1d:ae:89:6c:fb:5c:00:
         f0:42:4b:a2:37:85:bd:d9:36:f9:4e:2e:ed:6c:b8:86:10:7f:
         fa:3a:72:8a:f1:4c:0c:ad:56:67:c3:90:df:85:be:f9:ef:d6:
         ee:35:49:cd:dd:c5:d4:32:55:1e:ca:38:dd:cc:aa:6f:32:58:
         ee:c0:48:58:c6:a6:55:7f:54:fa:d3:58:31:0f:27:13:15:ef:
         e7:d3:74:af:a9:7f:95:1b:d2:a6:c0:a6:c7:37:6f:42:8f:2a:
         a6:2b:91:a7:b9:da:26:59:fd:a3:5f:ea:e5:11:09:9b:b4:c0:
         6b:4a:bd:e2:2f:64:78:c2:f0:76:09:63:07:68:3f:b6:fc:e9:
         16:77:79:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----