Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/CC824736926711F1A48ED717CF1D38B0.roa
File:                     CC824736926711F1A48ED717CF1D38B0.roa (raw, json)
Hash identifier:          LYkC5EyV/N9RTV5n5nqCSyZ3QRcDEfnpclyVsY79yeQ=
Subject key identifier:   EC:1F:5E:B5:C7:1E:49:2D:B7:36:E3:25:B2:83:09:81:13:22:BB:F8
Certificate issuer:       /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial:       0A6B
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/CC824736926711F1A48ED717CF1D38B0.roa
Signing time:             Fri 07 Aug 2026 13:56:34 +0000
ROA not before:           Fri 07 Aug 2026 13:56:30 +0000
ROA not after:            Sun 31 Jul 2033 13:56:30 +0000
asID:                     37119
IP address blocks:        105.173.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 05 Oct 2026 00:08:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2667 (0xa6b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D0F50AF, serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
        Validity
            Not Before: Aug  7 13:56:30 2026 GMT
            Not After : Jul 31 13:56:30 2033 GMT
        Subject: CN=6a75e412-d8ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:82:08:aa:c2:fd:2a:69:a8:d2:31:45:2c:ba:
                    70:9b:87:52:06:8a:6b:06:bd:2b:23:68:ff:34:77:
                    b2:7b:5a:a3:6d:5c:a7:f5:f3:a5:ae:51:dd:5e:02:
                    5e:a8:20:eb:5e:78:00:77:96:d9:ce:25:4c:68:bd:
                    6f:c6:b6:08:c5:0a:ef:07:dc:17:1e:39:c9:11:36:
                    66:ec:df:f4:b6:de:8e:ea:62:c4:55:5a:16:86:87:
                    45:f4:4b:28:b8:ea:f8:7b:68:c4:03:57:29:2d:b9:
                    02:14:7f:92:63:f4:5c:78:a2:6e:aa:89:c4:6c:e0:
                    0f:2d:fd:38:e8:55:f7:47:29:81:a6:e4:73:8b:bc:
                    8a:3b:6f:b4:9e:7f:28:94:5d:4c:12:5b:97:46:4e:
                    cc:d0:a2:92:2d:50:0e:2d:3b:63:83:0b:c4:54:76:
                    99:26:31:d9:a9:0e:f4:55:19:e4:d2:71:26:11:98:
                    1a:ad:73:0f:ce:98:55:6d:2e:97:f7:9e:1c:12:a0:
                    9e:55:c9:d0:18:79:f5:17:3c:19:d4:7f:33:98:75:
                    2b:88:0d:86:be:28:fd:99:85:40:dd:2a:42:5b:c6:
                    69:04:96:ca:e0:5d:32:d4:cf:cc:1e:cc:46:8a:80:
                    2e:31:e0:d1:8a:ce:2c:5d:48:84:46:53:f2:a1:ed:
                    8c:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:1F:5E:B5:C7:1E:49:2D:B7:36:E3:25:B2:83:09:81:13:22:BB:F8
            X509v3 Authority Key Identifier:
                keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/CC824736926711F1A48ED717CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  105.173.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         98:64:59:75:69:1a:cb:41:71:e1:2a:c1:18:51:b7:2e:6f:8f:
         ae:5f:ff:41:da:c2:fa:6c:86:fd:27:fb:10:11:02:1e:73:08:
         c3:57:5d:bb:73:20:93:40:a2:7c:b7:c5:92:5a:bc:9f:c7:13:
         6d:f4:ca:6a:7a:ba:15:b6:9d:05:5e:2d:a3:90:ef:e0:42:8d:
         5c:7e:e1:15:58:ba:bd:2e:3f:01:d3:f9:5c:31:e7:4b:a6:48:
         3c:84:75:eb:2c:ad:df:c9:a4:a3:75:9f:db:e5:ac:16:8f:03:
         6f:87:20:8a:03:9c:98:70:74:fd:49:c6:01:6d:b2:f7:a7:c0:
         92:c6:bd:58:e8:e8:07:8e:e6:e9:d2:62:77:89:0b:66:9f:00:
         89:04:77:f2:43:19:f8:1f:1d:2b:0c:31:7f:bb:05:f3:ef:a2:
         8d:92:cc:fa:0d:c3:aa:35:c0:68:91:26:1b:d0:37:92:70:10:
         ca:ae:f2:cf:20:58:f8:6a:3b:6c:ac:91:a7:93:53:84:24:9b:
         09:db:12:e9:1c:ce:45:50:40:be:02:d3:63:7e:f0:04:08:47:
         ee:bc:41:1c:83:b9:85:f2:e0:7d:32:03:cf:eb:d0:b6:12:53:
         ab:54:d9:6b:c0:7c:9f:0b:1f:e7:b8:f7:d1:e2:55:df:ed:d0:
         95:39:db:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----