Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/34152306A2FC11F187B2C4D6CE1D38B0.roa
File:                     34152306A2FC11F187B2C4D6CE1D38B0.roa (raw, json)
Hash identifier:          L01OTzrX3QXgBOxOq9ygtuOFpcX4ssn+k1klJk+Qt0U=
Subject key identifier:   92:DB:0F:A5:CF:49:18:60:4C:B1:85:87:AF:EE:D0:A0:6B:BF:B3:90
Certificate issuer:       /CN=F36CB1BEAF/serialNumber=A5F0A2BB8B79EDD6D37C077ADFEA082514C0420F
Certificate serial:       03B5
Authority key identifier: A5:F0:A2:BB:8B:79:ED:D6:D3:7C:07:7A:DF:EA:08:25:14:C0:42:0F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/pfCiu4t57dbTfAd63-oIJRTAQg8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/34152306A2FC11F187B2C4D6CE1D38B0.roa
Signing time:             Fri 28 Aug 2026 16:19:12 +0000
ROA not before:           Fri 28 Aug 2026 16:19:08 +0000
ROA not after:            Sat 25 Aug 2029 16:19:08 +0000
asID:                     37577
IP address blocks:        197.239.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/pfCiu4t57dbTfAd63-oIJRTAQg8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/pfCiu4t57dbTfAd63-oIJRTAQg8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/pfCiu4t57dbTfAd63-oIJRTAQg8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 949 (0x3b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36CB1BEAF, serialNumber=A5F0A2BB8B79EDD6D37C077ADFEA082514C0420F
        Validity
            Not Before: Aug 28 16:19:08 2026 GMT
            Not After : Aug 25 16:19:08 2029 GMT
        Subject: CN=6a91b500-bda7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:8d:ca:08:b2:7b:89:3f:8f:af:bb:cc:80:26:
                    17:f5:e7:5b:0f:1e:cb:f0:71:ba:1e:4d:ac:55:56:
                    42:42:bb:5c:30:2b:49:c2:43:78:3e:82:a6:44:c6:
                    7a:61:e3:32:c6:ea:11:91:a2:ef:c4:c4:28:7c:53:
                    ae:69:0b:1a:05:82:56:b9:38:a0:79:0d:e1:81:57:
                    88:7a:c7:2d:95:c0:b7:e6:e1:cb:70:7d:a8:69:5e:
                    25:31:79:cd:8a:e8:5f:29:d8:7c:82:eb:01:82:bd:
                    df:6b:0a:73:3e:08:d7:51:8e:0e:fc:16:29:42:16:
                    c2:fd:3f:5a:cb:72:e1:52:47:16:50:ad:f4:21:74:
                    55:4c:7a:69:1e:a5:f4:55:dd:fe:fc:6f:f8:92:21:
                    c3:13:29:a9:79:53:e2:77:a8:80:be:f1:bf:f9:0a:
                    a2:55:aa:a1:e9:45:a2:9e:ec:30:11:ce:52:19:8d:
                    2c:6a:ed:52:fb:d6:27:0f:5f:f9:dc:62:d7:7c:af:
                    45:28:a0:26:e2:23:9c:36:44:f4:8d:8f:2f:fe:c0:
                    13:0c:35:a1:ba:0d:a5:17:a4:ec:98:cf:d2:c0:dd:
                    c4:3e:a3:52:82:06:80:7b:9d:d2:88:53:21:62:f8:
                    d7:4c:81:1a:c3:29:e3:90:b2:7f:43:7e:ce:7e:35:
                    e0:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:DB:0F:A5:CF:49:18:60:4C:B1:85:87:AF:EE:D0:A0:6B:BF:B3:90
            X509v3 Authority Key Identifier:
                keyid:A5:F0:A2:BB:8B:79:ED:D6:D3:7C:07:7A:DF:EA:08:25:14:C0:42:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/pfCiu4t57dbTfAd63-oIJRTAQg8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/pfCiu4t57dbTfAd63-oIJRTAQg8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/34152306A2FC11F187B2C4D6CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  197.239.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:79:63:d4:af:b4:99:f5:a9:08:bb:c9:c5:9f:04:c2:4a:42:
         01:d3:79:ca:bb:3e:bf:ca:3c:26:e8:1a:d9:bf:f1:96:10:63:
         69:02:39:c7:7f:f9:af:c0:2d:ea:f1:66:49:b2:69:94:ae:cd:
         ae:cf:4a:76:92:7a:89:5d:6f:3e:c9:62:f9:ec:9d:c0:74:f6:
         f1:2f:66:9d:6d:e3:b1:85:48:68:06:3d:75:1f:a5:0b:5e:7d:
         0b:df:24:2c:d7:7c:40:10:5b:c2:d3:99:34:dd:ef:f2:84:5a:
         58:7b:9c:d7:27:d3:0b:23:e6:e1:f9:ff:c5:6a:a5:e1:2c:36:
         6a:18:37:2f:0b:a1:48:e8:e5:c8:a2:4f:05:23:b2:96:af:89:
         17:7e:f6:f4:c4:78:f2:fe:82:b3:84:ff:51:b9:23:be:e1:6e:
         2a:44:e6:ec:27:52:3c:a6:5a:fe:32:73:27:d9:df:80:5d:cc:
         d9:4b:c8:05:ec:f9:d3:95:64:d8:a0:d1:d1:e7:ef:5e:04:84:
         04:69:06:39:c8:cf:8b:59:19:ce:44:fe:d2:41:72:6e:77:a8:
         cd:ca:cd:7e:af:d9:7c:8f:da:18:06:f7:fe:cc:ed:aa:9f:6d:
         2e:20:56:1b:09:f6:76:be:b3:4e:ae:0f:2e:cf:45:8c:c3:c6:
         97:bf:34:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----