Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/A4945186932C11F18534D5C3CE1D38B0.roa
File:                     A4945186932C11F18534D5C3CE1D38B0.roa (raw, json)
Hash identifier:          MiVHC2onDUsRto60CVSMNSrOZd7d3bAXQsJHhbz/2yE=
Subject key identifier:   BF:D0:32:B2:F3:76:4E:49:7E:6C:D3:D7:13:4F:D7:5D:B8:9F:8F:75
Certificate issuer:       /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial:       0A94
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/A4945186932C11F18534D5C3CE1D38B0.roa
Signing time:             Sat 08 Aug 2026 13:25:38 +0000
ROA not before:           Sat 08 Aug 2026 13:25:34 +0000
ROA not after:            Sun 31 Jul 2033 13:25:34 +0000
asID:                     37119
IP address blocks:        105.173.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Sep 2026 00:07:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2708 (0xa94)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D0F50AF, serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
        Validity
            Not Before: Aug  8 13:25:34 2026 GMT
            Not After : Jul 31 13:25:34 2033 GMT
        Subject: CN=6a772e52-8ce6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:de:9f:8d:13:d3:d5:ef:e7:84:67:4d:8c:26:
                    3e:64:99:1d:c4:06:ee:ed:df:18:bf:f8:07:e4:85:
                    6e:f7:3c:c4:76:92:46:f7:5c:ad:b6:ac:0f:f9:5a:
                    05:eb:33:2a:59:08:1b:65:4c:e5:2c:8b:22:15:ca:
                    43:4e:b3:3b:7e:fc:76:09:db:1c:68:83:7b:4b:a9:
                    54:50:19:51:87:07:63:61:6a:a0:84:fb:de:d0:e1:
                    30:b5:73:06:15:c5:0d:48:35:3b:ac:cd:87:77:e7:
                    6a:81:d1:97:0f:00:03:a7:ff:ad:b8:32:8b:68:16:
                    04:b5:c0:a5:34:a0:b4:f9:0d:cd:4c:f0:83:75:38:
                    8b:20:4c:19:e1:2f:f4:85:65:5e:37:ad:b8:5d:53:
                    e9:23:e2:97:7c:e2:10:37:11:22:e6:4a:26:72:ca:
                    e3:65:29:eb:3b:5c:2b:be:46:95:61:c4:7e:6d:62:
                    6e:05:ed:63:0a:77:95:83:d4:ef:44:2e:95:c3:78:
                    64:84:82:15:12:4c:e7:91:c9:87:22:6e:aa:1b:b7:
                    ea:fb:65:70:03:4a:b8:5e:09:8f:df:ca:54:41:87:
                    05:3a:1b:0f:3e:d3:dd:25:1a:fe:be:ec:74:61:3e:
                    c1:82:2e:58:61:56:70:14:00:07:37:93:32:5d:e2:
                    60:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:D0:32:B2:F3:76:4E:49:7E:6C:D3:D7:13:4F:D7:5D:B8:9F:8F:75
            X509v3 Authority Key Identifier:
                keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/A4945186932C11F18534D5C3CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  105.173.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         9d:d8:ef:16:54:f4:8f:a3:d4:82:fa:e2:40:15:16:eb:bb:06:
         5d:d1:21:a2:66:2e:9c:e8:01:4a:21:6d:a0:c1:e0:f6:50:53:
         5d:94:84:7b:24:c7:67:f5:9a:a1:c2:3b:02:5e:b9:19:ef:80:
         2e:a6:03:f8:42:6d:62:70:e1:47:cb:e4:59:15:f4:a5:1b:a0:
         d6:ed:ef:e6:29:61:2f:70:b3:af:60:a0:a8:3b:f6:23:f1:9c:
         03:ec:1a:ed:d7:bf:c9:16:2d:09:85:bf:57:a1:86:ae:14:37:
         68:0e:9c:47:75:b5:cd:01:f6:ed:19:65:8d:3a:67:f6:4c:d1:
         b0:7f:37:95:50:fa:1f:1d:03:7e:58:18:a7:72:f9:ac:72:77:
         02:53:df:4f:9e:6c:a5:8b:c4:e2:46:cd:4a:f9:15:b3:f7:52:
         df:11:83:68:2c:4f:ed:15:51:36:4a:28:ca:78:34:75:92:42:
         e0:97:2a:42:b3:d9:2e:e4:50:89:5c:a8:2c:fe:b9:33:b3:7d:
         9b:9d:97:86:1e:ae:5f:69:49:70:2b:e3:50:f9:4d:25:82:ed:
         5c:03:a0:9b:c6:aa:b9:93:b5:41:a5:58:ad:c9:65:a0:57:cf:
         25:51:8b:26:cc:c4:7e:85:3e:b1:10:24:f4:b0:4d:09:2b:6a:
         44:91:d8:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----