Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A9104/41D036ECF61811ECA84F46AEF1222468/1DD2C4F4963111F190FF4A09CF1D38B0.roa
File:                     1DD2C4F4963111F190FF4A09CF1D38B0.roa (raw, json)
Hash identifier:          r45TeHCOeqThkk/tJFSWz2bLDsF+FEVM5VykTp2GH1o=
Subject key identifier:   74:7F:44:5E:BF:65:C5:F3:BF:99:68:5A:36:A4:B5:F0:D8:62:FD:0A
Certificate issuer:       /CN=F36A9104AF/serialNumber=18FDC8AF53877802589BEEDEE813F6B626EF82FE
Certificate serial:       0624
Authority key identifier: 18:FD:C8:AF:53:87:78:02:58:9B:EE:DE:E8:13:F6:B6:26:EF:82:FE
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/GP3Ir1OHeAJYm-7e6BP2tibvgv4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A9104/41D036ECF61811ECA84F46AEF1222468/1DD2C4F4963111F190FF4A09CF1D38B0.roa
Signing time:             Wed 12 Aug 2026 09:35:13 +0000
ROA not before:           Wed 12 Aug 2026 09:35:09 +0000
ROA not after:            Mon 24 Jan 2033 09:35:09 +0000
asID:                     329039
IP address blocks:        102.216.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A9104/41D036ECF61811ECA84F46AEF1222468/GP3Ir1OHeAJYm-7e6BP2tibvgv4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A9104/41D036ECF61811ECA84F46AEF1222468/GP3Ir1OHeAJYm-7e6BP2tibvgv4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/GP3Ir1OHeAJYm-7e6BP2tibvgv4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 02:47:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1572 (0x624)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A9104AF, serialNumber=18FDC8AF53877802589BEEDEE813F6B626EF82FE
        Validity
            Not Before: Aug 12 09:35:09 2026 GMT
            Not After : Jan 24 09:35:09 2033 GMT
        Subject: CN=6a7c3e50-5409
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:28:e0:6f:85:64:3b:58:9e:6f:ef:07:99:55:
                    bb:b5:54:65:1a:ba:2d:bf:d2:c5:b3:b6:66:e7:af:
                    07:1f:d7:0e:b2:3f:c9:9a:b7:b5:8e:5e:24:a0:06:
                    66:97:12:20:f7:19:d4:8f:fa:bb:58:17:7b:90:ac:
                    91:87:e7:ed:bd:90:60:be:52:8f:91:36:cc:c9:f8:
                    96:2a:6b:94:68:da:f1:13:fc:1f:5a:4c:84:ef:8c:
                    52:ff:79:76:c8:6d:a1:e9:1c:8c:3e:b6:8a:fc:9a:
                    02:af:9c:7b:0f:f8:0b:64:b3:0f:11:07:70:3b:32:
                    90:fa:33:2c:43:cb:e9:58:c0:86:68:20:70:c5:fa:
                    d1:af:8e:dc:23:56:e4:3d:50:92:c2:fe:a7:90:8b:
                    41:98:ab:55:47:3c:d9:2a:9b:91:f2:94:c1:31:63:
                    61:9a:d7:6a:61:88:c3:40:69:02:de:2a:6e:43:46:
                    97:7d:71:6c:0c:4b:aa:e2:79:63:1f:43:72:7e:4e:
                    d2:ba:30:ad:00:a9:ee:ce:9c:30:e2:43:e8:a8:c9:
                    b2:18:45:c0:e1:16:62:14:0c:90:97:f5:ac:d6:12:
                    c8:44:15:5d:36:d8:d7:78:b9:5e:21:15:60:a7:99:
                    21:ae:5b:6c:7d:91:9d:ae:8b:64:4a:d3:c8:c0:b0:
                    fd:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:7F:44:5E:BF:65:C5:F3:BF:99:68:5A:36:A4:B5:F0:D8:62:FD:0A
            X509v3 Authority Key Identifier:
                keyid:18:FD:C8:AF:53:87:78:02:58:9B:EE:DE:E8:13:F6:B6:26:EF:82:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A9104/41D036ECF61811ECA84F46AEF1222468/GP3Ir1OHeAJYm-7e6BP2tibvgv4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/GP3Ir1OHeAJYm-7e6BP2tibvgv4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A9104/41D036ECF61811ECA84F46AEF1222468/1DD2C4F4963111F190FF4A09CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.216.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:87:82:78:e0:77:f4:e9:a7:55:14:08:59:06:1f:55:5f:e3:
         3f:39:82:6a:ba:81:c8:b9:84:38:ee:a7:76:f1:95:c5:27:7a:
         3f:14:06:19:6f:82:6b:60:d5:54:83:30:7a:8d:c4:a4:b7:d2:
         eb:e2:68:fc:d5:04:9f:8f:24:23:c7:e8:33:74:f1:ff:65:28:
         af:30:5d:00:8b:b3:8f:d5:28:3e:74:07:d7:53:ed:64:c9:b9:
         91:47:6a:b2:eb:59:9c:f2:82:5f:37:16:5f:3e:4f:50:75:e5:
         70:c9:79:13:3d:5f:64:15:a8:e2:66:a1:94:36:65:e2:9c:6e:
         6d:bc:82:ca:5b:4f:3f:f5:5d:c7:6f:0a:aa:64:15:13:56:6f:
         7a:ad:3a:f1:67:47:d1:47:8e:bf:57:29:41:65:01:b9:65:87:
         7b:6a:9b:f8:41:6e:e7:08:69:3e:63:0c:f3:22:d4:74:b6:f8:
         3c:d6:f8:07:80:e6:7e:a9:88:6b:f7:a5:dc:35:3a:55:1c:85:
         e1:a2:ed:87:d7:31:54:34:0d:ac:b8:c8:86:fc:0b:4c:59:c6:
         0f:45:88:d3:0b:23:d4:ae:c6:dd:2d:0f:71:a4:13:1a:a6:f8:
         ea:ca:6a:a2:f9:5e:8c:8e:73:28:27:55:cf:49:e8:98:ca:38:
         78:4d:06:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----