Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36EC7CE/82014A10989911E9B7396A33F8AEA228/3C8D028C963711F191EB1CAFCE1D38B0.roa
File:                     3C8D028C963711F191EB1CAFCE1D38B0.roa (raw, json)
Hash identifier:          /csTm7NNdYNrJIGKEt25hO4hUKRB4n++erm3mKTTkw4=
Subject key identifier:   33:42:D4:7B:40:A8:6E:23:EB:6F:3C:3B:3F:A9:F1:EA:3E:F1:73:4D
Certificate issuer:       /CN=F36EC7CEAF/serialNumber=0E040ABF4F945F30D77DA28BBF028B6AC49D042C
Certificate serial:       0A86
Authority key identifier: 0E:04:0A:BF:4F:94:5F:30:D7:7D:A2:8B:BF:02:8B:6A:C4:9D:04:2C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/DgQKv0-UXzDXfaKLvwKLasSdBCw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36EC7CE/82014A10989911E9B7396A33F8AEA228/3C8D028C963711F191EB1CAFCE1D38B0.roa
Signing time:             Wed 12 Aug 2026 10:19:01 +0000
ROA not before:           Wed 12 Aug 2026 10:18:57 +0000
ROA not after:            Tue 12 Aug 2036 10:18:57 +0000
asID:                     327795
IP address blocks:        2c0f:efe8:300::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36EC7CE/82014A10989911E9B7396A33F8AEA228/DgQKv0-UXzDXfaKLvwKLasSdBCw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36EC7CE/82014A10989911E9B7396A33F8AEA228/DgQKv0-UXzDXfaKLvwKLasSdBCw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/DgQKv0-UXzDXfaKLvwKLasSdBCw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2694 (0xa86)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36EC7CEAF, serialNumber=0E040ABF4F945F30D77DA28BBF028B6AC49D042C
        Validity
            Not Before: Aug 12 10:18:57 2026 GMT
            Not After : Aug 12 10:18:57 2036 GMT
        Subject: CN=6a7c4895-a674
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:62:9a:a7:f1:df:73:03:84:67:77:0e:3b:8c:
                    9b:36:e3:0c:7a:ca:a3:e6:b3:a7:82:c6:6c:4f:d6:
                    21:7b:e7:70:f6:d0:33:b6:5b:1c:8f:11:da:25:17:
                    7b:cb:1a:2f:45:1b:5c:20:ab:91:b4:f5:a2:92:57:
                    ca:e4:e3:4d:86:aa:33:f9:0b:67:d8:20:0f:1a:3d:
                    fc:1b:7a:bf:54:a1:ae:d4:af:ad:35:ce:be:f9:34:
                    41:5a:16:09:85:e8:b0:f5:5a:db:ec:a4:18:ea:66:
                    67:4e:da:ba:ef:67:22:24:9c:75:11:5b:b0:00:60:
                    4c:e8:32:af:36:1c:b6:8f:6b:40:04:b7:1e:e3:ac:
                    21:9a:e1:a9:00:a6:29:4f:83:24:5a:7b:ad:38:53:
                    a5:1a:4d:2c:b0:c4:8c:85:d8:a2:0e:03:29:d2:5d:
                    b3:e0:5b:73:b8:d8:62:63:38:24:07:b6:36:cd:ff:
                    c5:41:36:12:33:4c:48:19:56:35:f0:3a:cc:a2:02:
                    e5:d2:01:a4:f5:0c:b9:6a:8c:97:eb:fa:07:b5:0f:
                    51:e7:aa:56:56:12:d0:94:36:3f:8d:a9:1e:fa:af:
                    48:97:d2:5a:73:ab:bb:32:db:c0:b1:49:14:46:88:
                    b8:a5:33:8b:58:19:42:f2:99:cd:f4:6b:b5:b3:c9:
                    d5:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:42:D4:7B:40:A8:6E:23:EB:6F:3C:3B:3F:A9:F1:EA:3E:F1:73:4D
            X509v3 Authority Key Identifier:
                keyid:0E:04:0A:BF:4F:94:5F:30:D7:7D:A2:8B:BF:02:8B:6A:C4:9D:04:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36EC7CE/82014A10989911E9B7396A33F8AEA228/DgQKv0-UXzDXfaKLvwKLasSdBCw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/DgQKv0-UXzDXfaKLvwKLasSdBCw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EC7CE/82014A10989911E9B7396A33F8AEA228/3C8D028C963711F191EB1CAFCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:efe8:300::/40

    Signature Algorithm: sha256WithRSAEncryption
         0e:99:ce:f4:e2:6f:e0:85:3e:ee:ea:1b:04:b3:65:33:3f:2f:
         43:59:6b:4e:55:44:ba:92:c1:04:70:29:3e:b9:d3:33:37:eb:
         9a:74:ff:0a:2e:92:37:ac:91:bf:9b:74:72:24:32:e2:03:0c:
         63:42:d3:9c:d9:fd:8e:b7:a2:dc:bf:95:e2:1c:ef:52:ca:36:
         7e:3c:22:2c:99:ba:18:fe:fc:60:5a:4e:d5:d3:58:2b:fb:da:
         a8:66:9e:76:c5:d1:73:94:c8:fc:bf:c2:a9:02:51:ba:23:05:
         f6:ba:2b:e8:ed:c1:34:ae:21:fa:d1:3a:0c:cf:7a:e6:95:0b:
         d2:54:80:c6:4c:c2:89:27:59:60:63:ed:7e:1e:b9:82:41:df:
         d5:67:cf:4d:97:52:f9:9c:04:68:0a:ff:65:60:d8:69:4d:85:
         9a:db:3d:9c:6f:d7:82:36:39:56:ca:a8:7b:e9:01:14:6a:92:
         d6:1b:20:db:97:f3:68:73:98:29:31:63:ec:4b:42:1d:99:d6:
         bd:47:fc:82:f6:01:e5:fe:a4:92:be:a9:35:28:a6:fe:ec:50:
         39:66:bb:39:6e:e9:d5:b6:61:b6:fc:0b:4d:c1:81:da:b3:cc:
         13:93:3d:ae:eb:9e:10:a3:3b:9a:cf:87:66:19:24:82:ab:fb:
         5c:45:ea:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----