Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A9104/41D036ECF61811ECA84F46AEF1222468/EB112E62962F11F18E641F01CF1D38B0.roa
File:                     EB112E62962F11F18E641F01CF1D38B0.roa (raw, json)
Hash identifier:          lXP8jyvsXovBDVh6j5Lrjbv0fp3bHgsldxY2peoYWT4=
Subject key identifier:   CE:FE:9A:F1:FA:E9:9C:B8:0C:35:0B:EB:89:9E:94:6A:96:74:7D:D3
Certificate issuer:       /CN=F36A9104AF/serialNumber=18FDC8AF53877802589BEEDEE813F6B626EF82FE
Certificate serial:       061B
Authority key identifier: 18:FD:C8:AF:53:87:78:02:58:9B:EE:DE:E8:13:F6:B6:26:EF:82:FE
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/GP3Ir1OHeAJYm-7e6BP2tibvgv4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A9104/41D036ECF61811ECA84F46AEF1222468/EB112E62962F11F18E641F01CF1D38B0.roa
Signing time:             Wed 12 Aug 2026 09:26:38 +0000
ROA not before:           Wed 12 Aug 2026 09:26:34 +0000
ROA not after:            Sun 27 Jun 2032 09:26:34 +0000
asID:                     329039
IP address blocks:        102.216.16.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A9104/41D036ECF61811ECA84F46AEF1222468/GP3Ir1OHeAJYm-7e6BP2tibvgv4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A9104/41D036ECF61811ECA84F46AEF1222468/GP3Ir1OHeAJYm-7e6BP2tibvgv4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/GP3Ir1OHeAJYm-7e6BP2tibvgv4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 02:47:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1563 (0x61b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A9104AF, serialNumber=18FDC8AF53877802589BEEDEE813F6B626EF82FE
        Validity
            Not Before: Aug 12 09:26:34 2026 GMT
            Not After : Jun 27 09:26:34 2032 GMT
        Subject: CN=6a7c3c4e-5ba4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ab:0a:0f:bc:d4:97:9a:d2:a3:2f:01:0a:71:
                    84:d8:1c:92:ee:05:f0:44:6a:84:7d:5f:98:e0:16:
                    00:8d:61:e7:f6:8b:17:3c:80:60:6f:0c:b2:a8:f7:
                    63:5f:e0:26:7a:df:52:3b:39:3c:b4:6a:2a:c4:d7:
                    3e:a7:20:05:4f:d2:26:ae:74:8e:f7:15:f1:62:4c:
                    8c:6c:2f:6e:8a:f7:26:f1:fc:0c:91:d3:64:af:c2:
                    79:e4:97:4e:de:75:26:8b:46:1c:12:ed:fe:00:ec:
                    ee:b1:e1:9c:dd:85:36:b0:4f:2c:fc:ac:aa:0e:1e:
                    77:d2:f1:38:a1:b7:b3:93:51:6f:4c:61:d8:90:f7:
                    0f:5b:86:45:00:3a:fc:a1:52:4f:28:8f:21:5e:07:
                    5d:2b:7c:4a:3e:d0:d9:4f:f8:0a:1a:a7:ec:58:a8:
                    e0:8c:0f:6b:ae:74:7e:31:9b:c1:ce:89:3f:c4:72:
                    f9:ce:d7:fd:e9:59:7e:3b:f3:5a:9e:97:b8:35:f8:
                    d1:50:d6:2a:73:7b:7a:53:66:4f:76:0d:7b:a0:9b:
                    47:8a:42:1a:e3:11:b5:66:b2:87:24:6b:8a:27:bb:
                    aa:a5:2c:a9:65:bc:8b:a8:1c:ec:55:e9:8b:ca:75:
                    48:f8:22:50:1d:54:cc:60:b0:c3:7b:37:62:fc:08:
                    24:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:FE:9A:F1:FA:E9:9C:B8:0C:35:0B:EB:89:9E:94:6A:96:74:7D:D3
            X509v3 Authority Key Identifier:
                keyid:18:FD:C8:AF:53:87:78:02:58:9B:EE:DE:E8:13:F6:B6:26:EF:82:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A9104/41D036ECF61811ECA84F46AEF1222468/GP3Ir1OHeAJYm-7e6BP2tibvgv4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/GP3Ir1OHeAJYm-7e6BP2tibvgv4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A9104/41D036ECF61811ECA84F46AEF1222468/EB112E62962F11F18E641F01CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.216.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         28:2b:95:6c:2f:f6:22:03:a5:7d:52:52:2d:f5:e7:30:34:f2:
         a5:79:d7:3e:0d:a6:2e:68:c6:45:2f:01:34:0c:8b:29:6c:d9:
         f8:eb:76:37:73:fe:94:3e:ca:6e:4e:ab:46:1c:48:f5:c4:9e:
         66:f7:23:4c:68:ab:7c:65:a1:7f:8e:2e:4c:12:03:c1:70:02:
         d9:7f:c5:37:ec:e3:b7:4b:67:d8:9c:32:be:6f:8b:43:b9:e6:
         47:cd:5b:15:b9:7f:5d:df:44:4a:62:c5:7f:23:b0:fe:f6:ac:
         87:14:70:ef:6a:85:0f:76:40:0f:db:d9:fe:a1:5e:d9:42:ac:
         48:77:55:12:a6:b5:52:fc:a4:35:4e:55:de:95:0b:04:b9:1e:
         8f:a3:dc:6a:92:38:63:3d:9e:34:6c:ba:85:0c:a7:6d:d5:39:
         21:08:60:ae:cc:d6:5c:d1:f6:4c:c6:9d:9c:ee:83:1b:a4:61:
         74:8c:7a:e3:95:30:d9:36:ab:98:0c:96:49:ec:b9:24:b6:c7:
         b3:9d:ea:a6:7e:d8:f2:2a:0f:39:25:0e:7e:f5:76:b6:e4:80:
         db:95:e2:1b:96:95:11:4a:15:e8:46:a6:78:55:e0:2a:75:e7:
         e9:f3:e7:3b:13:5e:d7:5b:96:e8:f2:57:22:29:84:2d:1f:dd:
         3b:09:4e:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----