Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36EC7CE/82014A10989911E9B7396A33F8AEA228/32E00976963E11F1BA5349D8CE1D38B0.roa
File:                     32E00976963E11F1BA5349D8CE1D38B0.roa (raw, json)
Hash identifier:          qsn/ZGUqSLM9gPu3EBVDp2FPQBJAHeUtYE5HvF7jt10=
Subject key identifier:   32:FC:2E:75:B5:68:FD:37:D1:B4:CF:32:FF:AD:61:A5:94:9D:D6:5A
Certificate issuer:       /CN=F36EC7CEAF/serialNumber=0E040ABF4F945F30D77DA28BBF028B6AC49D042C
Certificate serial:       0A95
Authority key identifier: 0E:04:0A:BF:4F:94:5F:30:D7:7D:A2:8B:BF:02:8B:6A:C4:9D:04:2C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/DgQKv0-UXzDXfaKLvwKLasSdBCw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36EC7CE/82014A10989911E9B7396A33F8AEA228/32E00976963E11F1BA5349D8CE1D38B0.roa
Signing time:             Wed 12 Aug 2026 11:08:51 +0000
ROA not before:           Wed 12 Aug 2026 11:08:47 +0000
ROA not after:            Tue 12 Aug 2036 11:08:47 +0000
asID:                     327795
IP address blocks:        102.223.8.0/24 maxlen: 24
                          102.223.9.0/24 maxlen: 24
                          102.223.10.0/24 maxlen: 24
                          102.223.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36EC7CE/82014A10989911E9B7396A33F8AEA228/DgQKv0-UXzDXfaKLvwKLasSdBCw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36EC7CE/82014A10989911E9B7396A33F8AEA228/DgQKv0-UXzDXfaKLvwKLasSdBCw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/DgQKv0-UXzDXfaKLvwKLasSdBCw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2709 (0xa95)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36EC7CEAF, serialNumber=0E040ABF4F945F30D77DA28BBF028B6AC49D042C
        Validity
            Not Before: Aug 12 11:08:47 2026 GMT
            Not After : Aug 12 11:08:47 2036 GMT
        Subject: CN=6a7c5443-de06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:30:0b:d8:48:39:3b:9b:b0:31:ca:15:39:c0:
                    91:e7:2e:8b:bb:44:86:73:d2:5e:23:b2:94:66:ae:
                    e6:cf:56:00:02:9e:29:39:dc:ee:17:70:db:68:76:
                    48:b0:44:e7:df:8b:7c:03:7d:2d:cd:67:1d:56:1b:
                    88:d6:d9:e1:09:d1:41:ed:0e:a2:07:9b:dd:29:b5:
                    d6:c3:97:58:53:9d:53:27:47:65:11:f4:53:7f:3f:
                    a0:e4:b1:2d:92:a1:2b:44:53:3c:51:a8:9d:cd:6c:
                    f7:d8:55:95:87:fd:84:e6:b9:e1:c4:44:00:f9:c2:
                    26:71:8b:07:3d:a3:74:65:9d:7b:d4:62:6d:ff:3f:
                    c8:3a:d7:74:c6:1e:47:ab:ec:ab:9f:a9:0d:1f:20:
                    24:6d:08:47:01:4e:16:ad:aa:43:a4:c8:64:b6:c9:
                    40:a8:f8:3b:00:4e:3c:10:24:a1:56:b2:8e:49:08:
                    a5:31:3d:d4:79:c4:91:60:cf:38:b5:62:b2:a6:c7:
                    02:e9:9a:b8:53:f0:27:66:a3:4d:d1:f7:98:fe:e0:
                    e8:89:71:c6:68:88:97:56:29:51:ef:d3:46:03:7b:
                    ec:fa:f7:af:ec:bc:9a:c4:d2:86:12:70:e0:65:8b:
                    f0:53:54:e8:90:df:85:d0:71:b9:5e:fa:ab:ec:4f:
                    7e:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:FC:2E:75:B5:68:FD:37:D1:B4:CF:32:FF:AD:61:A5:94:9D:D6:5A
            X509v3 Authority Key Identifier:
                keyid:0E:04:0A:BF:4F:94:5F:30:D7:7D:A2:8B:BF:02:8B:6A:C4:9D:04:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36EC7CE/82014A10989911E9B7396A33F8AEA228/DgQKv0-UXzDXfaKLvwKLasSdBCw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/DgQKv0-UXzDXfaKLvwKLasSdBCw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EC7CE/82014A10989911E9B7396A33F8AEA228/32E00976963E11F1BA5349D8CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.223.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         26:62:ab:cf:b0:82:03:8b:23:7a:f0:06:ae:ab:06:93:6d:e3:
         50:6c:38:7f:92:51:10:77:bb:61:4d:a7:d3:a2:46:1e:e1:6c:
         3c:c8:0c:b5:4e:72:9e:68:45:e6:56:d6:68:dd:6e:a5:63:73:
         9e:9f:77:7e:d5:0a:fa:ab:3b:9d:57:07:7a:e3:6f:e4:a2:20:
         7c:84:b9:d7:7a:4e:41:09:72:d9:ea:e7:e1:0e:ae:6f:2d:61:
         2a:96:73:5e:88:34:a7:19:fb:f8:5f:bb:1f:31:56:24:7f:f0:
         08:91:df:a7:47:70:93:d1:d4:9a:f3:2a:af:e0:f4:e7:73:b1:
         78:5b:b5:7d:0c:68:9e:a7:8d:c6:fb:fe:54:f6:cb:30:10:0c:
         4c:45:04:5d:a9:83:5a:05:f8:bc:3f:b2:c4:e9:04:49:e7:fb:
         d9:4e:22:71:ae:1c:45:8c:db:30:e2:c2:db:dd:69:ca:1c:71:
         aa:f1:60:c3:92:19:28:e5:22:9b:fd:03:04:09:4a:3e:85:5e:
         5b:7a:b5:5f:97:0e:70:a4:05:d7:00:12:cc:a2:81:7a:4f:84:
         eb:20:d4:92:56:af:b1:89:1f:9b:51:b4:a7:bf:32:c2:ab:54:
         a9:bd:77:c2:88:d7:cb:9e:fb:7d:f2:68:b6:be:aa:d3:76:f8:
         67:2b:a1:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----