Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36C65C6/0338D9B4CF5B11EBB2E7A516F8AEA228/80AE0BC0B81D11F19E6C1EAECE1D38B0.roa
File:                     80AE0BC0B81D11F19E6C1EAECE1D38B0.roa (raw, json)
Hash identifier:          ZrLTWg0T3jTgA7OJOYdDr/Bu3UrN53Y2Pc5GbX0PshU=
Subject key identifier:   F7:2B:13:E5:71:68:0A:DD:29:83:83:91:E2:98:FB:25:64:0F:0D:12
Certificate issuer:       /CN=F36C65C6AF/serialNumber=C08F3EDC59158942C2DF39F1425E6EB82168BE3E
Certificate serial:       080E
Authority key identifier: C0:8F:3E:DC:59:15:89:42:C2:DF:39:F1:42:5E:6E:B8:21:68:BE:3E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/wI8-3FkViULC3znxQl5uuCFovj4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C65C6/0338D9B4CF5B11EBB2E7A516F8AEA228/80AE0BC0B81D11F19E6C1EAECE1D38B0.roa
Signing time:             Thu 24 Sep 2026 13:40:28 +0000
ROA not before:           Thu 24 Sep 2026 13:40:24 +0000
ROA not after:            Wed 24 Sep 2036 13:40:24 +0000
asID:                     327901
IP address blocks:        102.36.208.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C65C6/0338D9B4CF5B11EBB2E7A516F8AEA228/wI8-3FkViULC3znxQl5uuCFovj4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C65C6/0338D9B4CF5B11EBB2E7A516F8AEA228/wI8-3FkViULC3znxQl5uuCFovj4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/wI8-3FkViULC3znxQl5uuCFovj4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 02:14:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2062 (0x80e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C65C6AF, serialNumber=C08F3EDC59158942C2DF39F1425E6EB82168BE3E
        Validity
            Not Before: Sep 24 13:40:24 2026 GMT
            Not After : Sep 24 13:40:24 2036 GMT
        Subject: CN=6ab5284c-cacb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:2c:37:2a:d8:4f:69:0d:a6:5d:19:a2:60:30:
                    b6:25:01:d1:a3:1f:d5:f3:05:90:1f:cf:8e:c6:33:
                    5f:d0:aa:a1:45:c6:61:87:3e:a3:4b:ee:3b:8f:ab:
                    db:2f:f1:4c:b9:9f:64:02:df:52:a5:80:1b:fe:f9:
                    89:f4:ab:6e:0c:b0:ae:ab:a6:f8:9d:08:ff:86:57:
                    bd:0e:b7:95:b7:0f:2d:ae:43:8d:25:c4:54:36:45:
                    c5:dc:24:8b:db:72:0c:b0:1c:7a:c3:fc:c0:5d:13:
                    45:2b:16:a8:34:c0:e2:82:e6:23:3b:2b:52:e0:5c:
                    dd:11:bb:43:3f:e3:96:68:7c:93:e9:a5:31:26:8d:
                    a8:75:60:a0:51:4f:47:e3:ae:e5:72:48:5e:12:86:
                    51:f4:ac:eb:74:88:f4:b9:c1:5f:48:aa:18:d9:d0:
                    65:d8:57:dc:b9:b8:c1:36:4c:e7:dd:ec:7c:f0:c4:
                    b3:29:a2:63:29:bd:80:1c:be:8e:14:e5:07:8c:84:
                    50:3c:a5:dd:0d:ec:20:cf:48:3e:da:68:ee:d5:54:
                    1d:82:60:87:0f:92:5e:f1:2c:68:6d:d5:d4:12:95:
                    32:7f:50:b7:0a:6b:87:a2:ee:50:27:f1:cf:05:e5:
                    a1:63:10:b8:8a:25:9f:5a:5e:5f:6e:d4:0e:5d:ac:
                    fa:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:2B:13:E5:71:68:0A:DD:29:83:83:91:E2:98:FB:25:64:0F:0D:12
            X509v3 Authority Key Identifier:
                keyid:C0:8F:3E:DC:59:15:89:42:C2:DF:39:F1:42:5E:6E:B8:21:68:BE:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C65C6/0338D9B4CF5B11EBB2E7A516F8AEA228/wI8-3FkViULC3znxQl5uuCFovj4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/wI8-3FkViULC3znxQl5uuCFovj4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C65C6/0338D9B4CF5B11EBB2E7A516F8AEA228/80AE0BC0B81D11F19E6C1EAECE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.36.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8e:33:3f:49:08:13:17:b3:4c:71:40:a9:a8:34:7b:e2:32:a0:
         f0:6f:8d:46:7c:e1:a0:24:7d:9b:14:b2:82:41:7e:bb:0d:7c:
         3a:8d:3a:be:8f:94:90:8d:65:34:43:7c:00:43:05:8d:b2:e0:
         bf:38:89:44:8c:85:9f:27:b5:06:cd:f3:ab:70:23:9b:da:d2:
         d1:f7:f1:05:c4:dc:b2:14:53:89:39:ba:23:43:55:63:cf:68:
         ab:0f:f7:38:cd:61:71:10:f6:f0:36:54:dc:b1:93:f6:fc:1d:
         41:dd:41:10:33:7a:f7:0c:cb:6e:41:5f:27:58:ac:e7:6c:f2:
         7e:85:00:18:9f:da:df:69:da:2e:f3:fa:80:f2:69:08:ba:76:
         fa:39:bb:b8:8a:82:45:ea:67:8b:e4:69:8f:9b:db:ab:65:89:
         a4:b8:8b:16:12:4d:da:1c:55:f0:c9:58:11:b8:d3:4c:ad:56:
         cd:07:35:0c:d7:ef:bf:dc:c3:7e:1c:1f:67:af:d2:8e:b9:76:
         7b:1f:42:27:a5:3f:0b:17:a8:a3:d9:6c:f2:e8:d1:f9:40:5f:
         5c:19:27:91:8b:ca:a9:19:f2:11:c5:97:f5:90:eb:d9:50:50:
         b1:c7:a3:4c:8e:d1:c3:8c:1c:76:cd:45:3b:ae:bc:d7:e1:1f:
         6b:a2:05:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----