Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A9104/41D036ECF61811ECA84F46AEF1222468/C1685DD2963011F1825F4F05CF1D38B0.roa
File:                     C1685DD2963011F1825F4F05CF1D38B0.roa (raw, json)
Hash identifier:          fhqYnuykGs+Z520AWS4FDBIQhiN3E1HNW402LnbrByo=
Subject key identifier:   F7:EF:2B:AC:2F:1D:76:9F:76:0F:E5:DE:F9:84:28:1E:55:BC:74:11
Certificate issuer:       /CN=F36A9104AF/serialNumber=18FDC8AF53877802589BEEDEE813F6B626EF82FE
Certificate serial:       0621
Authority key identifier: 18:FD:C8:AF:53:87:78:02:58:9B:EE:DE:E8:13:F6:B6:26:EF:82:FE
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/GP3Ir1OHeAJYm-7e6BP2tibvgv4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A9104/41D036ECF61811ECA84F46AEF1222468/C1685DD2963011F1825F4F05CF1D38B0.roa
Signing time:             Wed 12 Aug 2026 09:32:38 +0000
ROA not before:           Wed 12 Aug 2026 09:32:34 +0000
ROA not after:            Mon 24 Jan 2033 09:32:34 +0000
asID:                     329039
IP address blocks:        102.216.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A9104/41D036ECF61811ECA84F46AEF1222468/GP3Ir1OHeAJYm-7e6BP2tibvgv4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A9104/41D036ECF61811ECA84F46AEF1222468/GP3Ir1OHeAJYm-7e6BP2tibvgv4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/GP3Ir1OHeAJYm-7e6BP2tibvgv4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 02:47:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1569 (0x621)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A9104AF, serialNumber=18FDC8AF53877802589BEEDEE813F6B626EF82FE
        Validity
            Not Before: Aug 12 09:32:34 2026 GMT
            Not After : Jan 24 09:32:34 2033 GMT
        Subject: CN=6a7c3db5-03f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b3:43:b3:93:f3:50:69:dd:86:66:0e:b1:38:
                    75:98:d1:7e:f7:6a:c0:5c:7a:2b:37:5b:e5:b4:72:
                    14:80:e9:92:3c:8c:5d:86:92:c9:d8:cd:bd:e0:81:
                    4c:fb:b4:96:bf:4c:8c:68:3f:0f:01:dd:ec:19:38:
                    2e:7b:e5:b1:10:6e:90:93:4b:f1:4a:0f:99:97:7f:
                    cb:f0:e9:ca:33:e4:ea:87:49:04:a2:00:5d:b3:81:
                    13:72:f5:fe:58:09:90:29:cc:b0:8d:45:e5:60:74:
                    35:d0:fc:4e:eb:92:e1:f2:8e:fa:84:ba:dc:65:87:
                    76:11:27:ab:38:bb:22:8f:80:4f:d9:03:fd:44:4f:
                    36:13:cb:b9:c0:c6:b7:4a:7b:41:07:a9:71:bb:79:
                    ec:f3:94:1a:a2:90:46:c4:6c:e0:d4:35:dc:81:93:
                    18:13:63:37:2b:e0:95:24:ea:22:07:da:39:5e:85:
                    03:b9:2b:64:06:bc:4e:bd:8e:7b:93:49:21:24:17:
                    25:6d:ab:7c:19:9d:4e:73:db:c7:3e:a8:8c:25:c9:
                    69:03:af:86:0f:e1:a7:ff:c8:c7:b7:68:39:63:3f:
                    af:bf:72:c5:9e:f4:92:24:0e:74:f9:27:61:2e:a4:
                    ac:d9:eb:9f:a2:6f:cc:a8:36:97:a2:9b:dd:a0:e4:
                    e0:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:EF:2B:AC:2F:1D:76:9F:76:0F:E5:DE:F9:84:28:1E:55:BC:74:11
            X509v3 Authority Key Identifier:
                keyid:18:FD:C8:AF:53:87:78:02:58:9B:EE:DE:E8:13:F6:B6:26:EF:82:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A9104/41D036ECF61811ECA84F46AEF1222468/GP3Ir1OHeAJYm-7e6BP2tibvgv4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/GP3Ir1OHeAJYm-7e6BP2tibvgv4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A9104/41D036ECF61811ECA84F46AEF1222468/C1685DD2963011F1825F4F05CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.216.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:6d:da:9e:9b:53:58:c7:45:4f:46:ce:bd:77:4f:dc:0a:4d:
         82:bd:ab:2a:a3:df:50:10:cc:fc:36:c6:70:a7:ca:b5:9b:98:
         a8:5a:97:87:d7:2e:28:17:0a:27:ff:ae:cd:43:37:47:1e:62:
         a3:43:be:5d:5e:e7:83:82:f9:fe:26:28:fb:dd:87:5f:3e:08:
         eb:d7:50:d8:7f:e8:93:79:a7:eb:4b:e6:cb:3d:67:01:25:5c:
         9f:8e:c0:8e:8e:ae:e4:d5:34:1a:5a:46:d6:c6:0b:cf:cd:59:
         86:0c:8e:13:6b:ed:36:67:74:10:ce:43:e8:56:d6:f2:81:84:
         1a:29:22:47:62:1b:68:5b:7d:29:af:51:99:ee:02:0e:4d:08:
         4d:7f:29:cc:8f:f5:ff:ec:07:fd:7e:6f:7c:31:1c:93:f1:85:
         af:8c:b2:ce:e0:d9:c7:16:e9:a3:4f:45:47:f1:96:a3:4a:e6:
         1c:ae:d8:52:2b:24:77:f3:65:18:44:83:ac:89:5f:fe:e2:00:
         a0:4c:31:b7:dc:69:2b:79:f7:dd:4c:b5:53:69:3e:0e:4c:62:
         5d:32:52:2c:15:a7:21:40:ef:bb:7a:4c:c9:a9:73:cf:b6:10:
         02:0a:5c:ba:c8:be:a1:fb:78:34:f1:66:33:a3:67:6f:95:ef:
         92:e4:d0:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----