Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CF917/0D7561E6E27811ECBD71BBD6F1222468/96B3A2488A8411F1930A171BCF1D38B0.roa
File:                     96B3A2488A8411F1930A171BCF1D38B0.roa (raw, json)
Hash identifier:          9vh192EXAyU2s2NhCiFjEOTyBt89+8e3W3X3Xn0uFFY=
Subject key identifier:   41:49:A2:82:9D:FE:D9:F6:E1:2A:3E:D9:74:DE:0A:13:DF:49:80:56
Certificate issuer:       /CN=F36CF917AF/serialNumber=5A98A11302BA1C49AABC60D502CB750C599107C3
Certificate serial:       062E
Authority key identifier: 5A:98:A1:13:02:BA:1C:49:AA:BC:60:D5:02:CB:75:0C:59:91:07:C3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/WpihEwK6HEmqvGDVAst1DFmRB8M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36CF917/0D7561E6E27811ECBD71BBD6F1222468/96B3A2488A8411F1930A171BCF1D38B0.roa
Signing time:             Tue 28 Jul 2026 13:02:30 +0000
ROA not before:           Tue 28 Jul 2026 13:02:25 +0000
ROA not after:            Mon 28 Jul 2036 13:02:25 +0000
asID:                     37294
IP address blocks:        102.70.0.0/15 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36CF917/0D7561E6E27811ECBD71BBD6F1222468/WpihEwK6HEmqvGDVAst1DFmRB8M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36CF917/0D7561E6E27811ECBD71BBD6F1222468/WpihEwK6HEmqvGDVAst1DFmRB8M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/WpihEwK6HEmqvGDVAst1DFmRB8M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 30 Jul 2026 07:32:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1582 (0x62e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36CF917AF, serialNumber=5A98A11302BA1C49AABC60D502CB750C599107C3
        Validity
            Not Before: Jul 28 13:02:25 2026 GMT
            Not After : Jul 28 13:02:25 2036 GMT
        Subject: CN=6a68a866-c0a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a9:24:a8:13:e3:98:21:86:c5:00:51:02:b0:
                    06:b4:82:a6:1e:48:75:24:7d:78:22:0d:d3:33:7b:
                    4a:de:96:51:35:2e:5b:7b:09:b2:e3:b4:01:0d:f6:
                    b4:7d:8f:fd:15:0d:54:89:e7:8a:fc:59:08:4f:b1:
                    0c:f7:54:2b:9e:39:aa:7a:78:66:47:b7:eb:d1:e3:
                    35:0d:02:52:d9:29:8e:2a:0f:96:53:da:fc:1e:cd:
                    a3:82:05:8d:f3:3a:a6:3a:89:a8:19:c3:6f:13:09:
                    fe:9b:19:20:10:41:c8:e1:8e:a3:43:d5:4b:c1:ef:
                    3d:82:bb:73:5b:aa:19:6b:6e:7c:8e:2f:98:e2:fb:
                    ef:4f:cd:c4:1f:18:8b:e1:1d:61:07:60:6c:b5:9a:
                    1f:12:25:b2:6a:7d:24:da:5d:bf:81:a7:4d:a4:d9:
                    33:f4:63:d1:fa:b3:04:f2:ba:2e:b4:8e:1e:fc:d6:
                    76:b9:79:fa:87:24:f6:0a:48:83:76:b5:25:ee:bf:
                    97:28:5d:da:1d:dc:11:17:41:b3:fb:02:ce:51:e8:
                    86:e6:73:54:8e:c0:cc:a3:3d:91:5e:8c:6a:07:0d:
                    bd:c7:20:e1:7d:bc:a5:6b:92:8c:c5:1a:19:76:9c:
                    10:bf:a7:5a:7b:b4:b2:d4:94:8f:e3:95:36:b0:69:
                    b5:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:49:A2:82:9D:FE:D9:F6:E1:2A:3E:D9:74:DE:0A:13:DF:49:80:56
            X509v3 Authority Key Identifier:
                keyid:5A:98:A1:13:02:BA:1C:49:AA:BC:60:D5:02:CB:75:0C:59:91:07:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36CF917/0D7561E6E27811ECBD71BBD6F1222468/WpihEwK6HEmqvGDVAst1DFmRB8M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/WpihEwK6HEmqvGDVAst1DFmRB8M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CF917/0D7561E6E27811ECBD71BBD6F1222468/96B3A2488A8411F1930A171BCF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.70.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         b2:eb:dc:77:de:d0:df:26:37:14:4d:9c:95:07:a2:d3:fb:87:
         ee:a9:0d:d9:ea:68:8f:f5:eb:4e:28:d3:08:80:45:ca:09:2f:
         0c:fa:f7:b0:11:13:09:e5:fa:3a:c2:4e:7a:dc:dd:d4:bf:9b:
         03:5d:92:2e:ad:fb:9e:9b:a2:b5:0f:76:3f:81:b2:e0:8a:fe:
         15:b1:4f:9d:a8:60:0e:1f:02:3d:4f:e5:61:b0:40:ab:36:0d:
         2b:7b:5d:70:06:5b:f3:10:6e:17:50:b0:6d:fe:e6:c7:cb:53:
         01:69:0e:62:ae:6e:f4:32:2e:cf:e8:6c:93:88:7e:c0:fa:37:
         70:e2:31:a8:fe:2d:74:9b:18:dd:ee:0f:4d:63:21:9a:1f:a5:
         36:6c:7f:4a:e1:54:1a:05:c5:1a:5c:1e:e7:a1:1e:2e:6b:be:
         28:1f:9a:ec:b7:69:60:c4:9c:fe:79:bf:e3:e3:96:4b:06:18:
         20:33:c5:0e:12:da:c4:d7:94:68:95:29:41:49:e0:3f:ec:ff:
         31:bb:64:1d:c2:af:4b:43:f9:f8:d3:9f:8f:4a:53:3a:f6:c4:
         e1:d5:d3:91:5f:04:80:7d:c2:d3:15:02:a2:2e:e8:79:78:ce:
         97:bb:6f:ff:aa:f9:a3:5a:ac:56:5b:dd:fc:16:7d:96:b8:b5:
         34:e2:ef:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----