Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A9104/41D036ECF61811ECA84F46AEF1222468/76B62D0E963111F18A737009CF1D38B0.roa
File:                     76B62D0E963111F18A737009CF1D38B0.roa (raw, json)
Hash identifier:          yEQI70whalELluED1cSmowIjp+TWQOgx7uMw+XMVnVw=
Subject key identifier:   EC:B6:86:A3:D1:BA:BE:0C:E5:38:46:42:C1:BF:6D:2B:59:36:CF:92
Certificate issuer:       /CN=F36A9104AF/serialNumber=18FDC8AF53877802589BEEDEE813F6B626EF82FE
Certificate serial:       0627
Authority key identifier: 18:FD:C8:AF:53:87:78:02:58:9B:EE:DE:E8:13:F6:B6:26:EF:82:FE
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/GP3Ir1OHeAJYm-7e6BP2tibvgv4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A9104/41D036ECF61811ECA84F46AEF1222468/76B62D0E963111F18A737009CF1D38B0.roa
Signing time:             Wed 12 Aug 2026 09:37:42 +0000
ROA not before:           Wed 12 Aug 2026 09:37:38 +0000
ROA not after:            Mon 24 Jan 2033 09:37:38 +0000
asID:                     329039
IP address blocks:        102.216.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A9104/41D036ECF61811ECA84F46AEF1222468/GP3Ir1OHeAJYm-7e6BP2tibvgv4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A9104/41D036ECF61811ECA84F46AEF1222468/GP3Ir1OHeAJYm-7e6BP2tibvgv4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/GP3Ir1OHeAJYm-7e6BP2tibvgv4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 02:47:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1575 (0x627)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A9104AF, serialNumber=18FDC8AF53877802589BEEDEE813F6B626EF82FE
        Validity
            Not Before: Aug 12 09:37:38 2026 GMT
            Not After : Jan 24 09:37:38 2033 GMT
        Subject: CN=6a7c3ee6-63fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:bb:ad:d5:1d:80:a9:f1:d0:cc:82:95:29:d1:
                    fe:df:8a:68:c2:7a:14:b3:ea:a4:84:39:47:4a:9b:
                    fb:47:d5:9d:23:4a:1a:00:c8:b9:95:87:e1:3e:3a:
                    cc:11:9c:62:6a:25:93:ca:f8:90:ad:fc:fc:a8:81:
                    df:62:a9:13:1b:f0:3f:56:88:73:94:a5:b0:14:52:
                    00:b3:33:9d:75:2c:56:c6:03:66:67:8f:7e:02:9e:
                    53:29:09:f7:50:9f:4a:52:91:af:79:39:ae:0b:11:
                    15:d2:90:94:fe:5c:69:de:ea:cb:27:f7:53:52:ab:
                    96:ff:9f:53:cd:7e:1f:90:c1:18:28:3e:c3:47:b0:
                    e3:d3:67:aa:fd:b3:6d:1d:f5:fd:37:31:b7:af:d0:
                    99:c7:ac:87:7e:32:3a:43:b9:99:5b:18:9b:7a:46:
                    42:c1:45:e6:9a:54:b9:e5:9c:c5:0e:e6:50:db:65:
                    cc:cf:11:69:50:7c:5a:8f:9f:13:61:d8:61:6b:7b:
                    21:ec:2a:3f:05:c1:a7:a1:ee:50:b5:2f:3f:4d:15:
                    de:cb:35:8c:c1:b3:ed:fe:f0:cd:32:0a:2d:dc:0c:
                    ba:87:7b:fb:3a:23:46:63:38:d1:24:97:0c:52:21:
                    06:63:52:b4:26:c1:e1:f5:12:af:81:ce:20:2d:bf:
                    9f:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:B6:86:A3:D1:BA:BE:0C:E5:38:46:42:C1:BF:6D:2B:59:36:CF:92
            X509v3 Authority Key Identifier:
                keyid:18:FD:C8:AF:53:87:78:02:58:9B:EE:DE:E8:13:F6:B6:26:EF:82:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A9104/41D036ECF61811ECA84F46AEF1222468/GP3Ir1OHeAJYm-7e6BP2tibvgv4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/GP3Ir1OHeAJYm-7e6BP2tibvgv4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A9104/41D036ECF61811ECA84F46AEF1222468/76B62D0E963111F18A737009CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.216.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:c0:e8:82:58:15:ac:87:73:f4:e9:17:4f:b5:a5:8a:dc:28:
         8e:2e:af:0f:fe:ab:58:f7:66:ac:62:fb:df:df:b0:85:09:ce:
         bf:a8:96:5b:6e:8b:8e:35:2c:b4:e4:5a:76:d9:d4:fc:87:bf:
         9f:fb:57:24:c7:9e:8a:0e:b9:cd:d8:51:1d:82:64:45:7e:a8:
         8a:1e:ec:2e:1b:c6:0b:5c:3d:42:8a:02:62:e9:67:fc:6e:47:
         27:dd:89:65:16:55:12:11:78:78:0a:53:16:f7:77:34:2e:c9:
         a5:1f:c7:0d:4a:58:da:c1:3c:c0:0f:61:9e:aa:b8:ea:33:4f:
         93:8e:bd:65:be:45:c1:d1:9e:fb:86:26:cd:e6:8a:e3:84:ed:
         14:07:32:76:b9:05:74:3c:7f:cd:d5:92:dc:b8:5b:81:d0:c0:
         2b:cb:8e:e9:f2:f4:1a:95:95:b9:5c:72:21:02:7c:d6:12:b5:
         70:90:0a:84:21:06:67:9e:ee:c0:35:d9:f6:79:e2:9f:4c:ba:
         c2:a4:51:2c:83:9f:a3:18:8e:e2:fb:a0:17:66:fe:3a:17:36:
         08:b1:5f:9b:be:ca:75:97:0f:bf:2a:ce:0b:90:67:f5:5c:ec:
         d0:87:fe:a3:ee:33:11:ed:14:48:1e:ff:2f:0e:1e:30:7e:e4:
         fa:a3:be:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----