Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CF917/0D7561E6E27811ECBD71BBD6F1222468/14D24A3A8A8A11F1810E49BECE1D38B0.roa
File:                     14D24A3A8A8A11F1810E49BECE1D38B0.roa (raw, json)
Hash identifier:          8ecNmNwPrHhtMp6pToYlrrAanzmGNuIqFDd82GDZ8l4=
Subject key identifier:   8A:22:7E:12:CE:BF:7F:9A:9D:97:7C:B6:B4:71:4B:A8:A7:89:8C:C9
Certificate issuer:       /CN=F36CF917AF/serialNumber=5A98A11302BA1C49AABC60D502CB750C599107C3
Certificate serial:       0647
Authority key identifier: 5A:98:A1:13:02:BA:1C:49:AA:BC:60:D5:02:CB:75:0C:59:91:07:C3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/WpihEwK6HEmqvGDVAst1DFmRB8M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36CF917/0D7561E6E27811ECBD71BBD6F1222468/14D24A3A8A8A11F1810E49BECE1D38B0.roa
Signing time:             Tue 28 Jul 2026 13:41:49 +0000
ROA not before:           Tue 28 Jul 2026 13:41:45 +0000
ROA not after:            Mon 28 Jul 2036 13:41:45 +0000
asID:                     36913
IP address blocks:        2c0f:fc58::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36CF917/0D7561E6E27811ECBD71BBD6F1222468/WpihEwK6HEmqvGDVAst1DFmRB8M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36CF917/0D7561E6E27811ECBD71BBD6F1222468/WpihEwK6HEmqvGDVAst1DFmRB8M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/WpihEwK6HEmqvGDVAst1DFmRB8M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 30 Jul 2026 14:48:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1607 (0x647)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36CF917AF, serialNumber=5A98A11302BA1C49AABC60D502CB750C599107C3
        Validity
            Not Before: Jul 28 13:41:45 2026 GMT
            Not After : Jul 28 13:41:45 2036 GMT
        Subject: CN=6a68b19d-2c35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e4:a2:18:9a:9f:4a:74:9b:c2:52:8e:a5:44:
                    f9:8a:1e:bc:00:b1:1b:d7:dc:18:8c:da:52:e0:a5:
                    0a:45:68:4a:e8:fd:70:9b:a5:33:19:ba:a6:57:4c:
                    e4:0b:10:bc:12:af:af:3a:4d:7c:57:4c:f7:5e:6c:
                    6e:a8:0a:ef:9e:5c:3d:7c:d2:6a:c1:bb:43:8f:88:
                    bb:42:e8:88:66:20:19:3c:c0:08:d3:0d:34:7e:18:
                    6d:c0:46:1a:9e:3b:c0:a7:dd:72:6e:b4:d4:81:e7:
                    9e:60:ba:d5:1a:e2:ee:b7:d7:58:cb:92:30:6c:de:
                    90:d6:78:62:f5:0f:38:b4:2f:af:8b:12:e8:6d:bd:
                    a1:73:ff:14:4b:6f:34:7d:65:2d:50:28:1c:58:e9:
                    3f:57:fe:23:47:b1:d8:6c:ef:94:29:0f:25:b6:55:
                    4f:09:db:c7:1c:f8:e1:57:56:c3:e7:31:c1:a1:67:
                    a6:f3:29:50:dd:5d:fe:5f:a7:a8:ee:54:65:0e:6f:
                    0f:43:c2:5d:00:07:01:f6:76:e4:52:ef:f1:4e:1e:
                    8d:4d:1c:6d:19:6e:ac:c2:aa:b8:36:47:3c:89:f1:
                    aa:04:12:de:2e:01:7f:30:18:a4:83:5d:a2:40:4f:
                    24:d3:84:e8:98:9e:60:6c:b7:a1:a1:90:03:c6:9e:
                    9e:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:22:7E:12:CE:BF:7F:9A:9D:97:7C:B6:B4:71:4B:A8:A7:89:8C:C9
            X509v3 Authority Key Identifier:
                keyid:5A:98:A1:13:02:BA:1C:49:AA:BC:60:D5:02:CB:75:0C:59:91:07:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36CF917/0D7561E6E27811ECBD71BBD6F1222468/WpihEwK6HEmqvGDVAst1DFmRB8M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/WpihEwK6HEmqvGDVAst1DFmRB8M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CF917/0D7561E6E27811ECBD71BBD6F1222468/14D24A3A8A8A11F1810E49BECE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:fc58::/32

    Signature Algorithm: sha256WithRSAEncryption
         93:d0:4a:43:49:fb:23:7f:1e:e2:02:73:72:e8:61:3e:4b:17:
         ee:b7:13:82:45:d6:04:f8:21:84:0a:19:0a:3b:6c:36:ec:39:
         04:6d:d7:19:3a:fe:63:3d:bc:02:99:58:6e:0e:50:ac:77:41:
         54:85:14:15:66:41:0e:db:72:b0:86:13:98:b5:a7:4c:59:09:
         97:1a:93:cb:e5:e3:e0:06:1d:ea:62:17:39:7f:be:ad:c5:d1:
         0b:25:e2:bf:c4:0f:6f:04:1d:68:40:11:fb:fb:92:49:92:13:
         c1:b8:a1:f2:f3:81:46:48:ee:6c:3e:e6:00:13:77:69:10:69:
         ec:55:00:36:d8:36:86:61:c6:41:06:ff:a3:83:7d:96:cf:f6:
         d6:12:3f:c7:fb:1b:9f:2a:20:ca:db:bb:f6:29:fc:ae:51:2b:
         6e:49:34:5d:c6:5b:21:dc:5d:a4:13:40:d3:df:9e:e0:3f:9f:
         e4:e0:b0:a5:d5:30:ab:b6:ad:4e:2c:a3:15:2a:1d:3e:a0:40:
         cb:69:77:29:04:77:82:f4:e5:d9:66:e0:54:7f:98:c2:43:d3:
         13:df:dc:36:8c:a6:a7:b8:7c:52:62:fa:a5:b5:59:db:a4:34:
         08:38:ed:51:5d:9e:da:39:56:45:83:aa:4c:47:e4:7b:a9:e3:
         25:a1:23:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----