Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36EC7CE/82014A10989911E9B7396A33F8AEA228/73CBFB96964011F1848080E6CE1D38B0.roa
File:                     73CBFB96964011F1848080E6CE1D38B0.roa (raw, json)
Hash identifier:          aYkoDEflzTDdM24OkR3wpR411xpSYWokIlV8nq/XCgc=
Subject key identifier:   53:B0:8B:90:C8:F3:C8:D7:0A:E2:46:C4:73:AB:AD:69:D5:BE:60:23
Certificate issuer:       /CN=F36EC7CEAF/serialNumber=0E040ABF4F945F30D77DA28BBF028B6AC49D042C
Certificate serial:       0A9B
Authority key identifier: 0E:04:0A:BF:4F:94:5F:30:D7:7D:A2:8B:BF:02:8B:6A:C4:9D:04:2C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/DgQKv0-UXzDXfaKLvwKLasSdBCw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36EC7CE/82014A10989911E9B7396A33F8AEA228/73CBFB96964011F1848080E6CE1D38B0.roa
Signing time:             Wed 12 Aug 2026 11:24:59 +0000
ROA not before:           Wed 12 Aug 2026 11:24:55 +0000
ROA not after:            Tue 12 Aug 2036 11:24:55 +0000
asID:                     327795
IP address blocks:        196.192.72.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36EC7CE/82014A10989911E9B7396A33F8AEA228/DgQKv0-UXzDXfaKLvwKLasSdBCw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36EC7CE/82014A10989911E9B7396A33F8AEA228/DgQKv0-UXzDXfaKLvwKLasSdBCw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/DgQKv0-UXzDXfaKLvwKLasSdBCw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2715 (0xa9b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36EC7CEAF, serialNumber=0E040ABF4F945F30D77DA28BBF028B6AC49D042C
        Validity
            Not Before: Aug 12 11:24:55 2026 GMT
            Not After : Aug 12 11:24:55 2036 GMT
        Subject: CN=6a7c580b-9e6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:dc:ca:7c:97:b5:f9:a7:43:4d:b7:07:41:3d:
                    b5:37:4e:cb:8a:6e:6e:43:00:76:d5:6e:34:31:21:
                    9d:c3:14:e4:60:7a:f1:f6:9c:bf:f5:8d:98:8f:93:
                    05:39:e8:f9:4b:64:60:9a:fc:20:70:3f:ac:f3:b0:
                    80:38:50:83:c6:8f:23:e8:6c:f0:d4:82:40:1f:c9:
                    24:5b:a8:8d:cc:9b:3a:3d:0f:9c:58:89:57:47:bb:
                    34:8b:64:76:23:00:e3:a5:da:7a:5b:1d:22:78:e2:
                    fb:24:b7:5c:96:60:5e:f3:2d:3d:e1:e5:5e:f6:74:
                    60:12:02:02:5d:5f:06:11:bb:4e:83:b0:3a:ce:08:
                    38:90:2c:71:70:e9:a8:29:85:2b:52:ab:a2:d6:1c:
                    6b:f9:bf:91:4a:c1:6b:36:0e:33:e3:9d:d6:99:c3:
                    7a:d5:69:1e:a2:e9:a2:87:8b:21:22:84:51:2a:eb:
                    30:e8:26:63:fa:17:b2:0b:b8:81:09:6e:47:3a:95:
                    0e:c6:68:d1:e6:d0:62:62:fc:aa:39:03:02:b4:81:
                    7d:d5:36:92:4d:24:f2:9d:ea:a7:11:ef:bb:de:fc:
                    64:76:11:5d:6b:ca:dd:91:22:7f:87:36:37:20:59:
                    cd:4e:60:ed:93:7e:5c:5d:21:4c:e9:a0:22:41:bb:
                    89:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:B0:8B:90:C8:F3:C8:D7:0A:E2:46:C4:73:AB:AD:69:D5:BE:60:23
            X509v3 Authority Key Identifier:
                keyid:0E:04:0A:BF:4F:94:5F:30:D7:7D:A2:8B:BF:02:8B:6A:C4:9D:04:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36EC7CE/82014A10989911E9B7396A33F8AEA228/DgQKv0-UXzDXfaKLvwKLasSdBCw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/DgQKv0-UXzDXfaKLvwKLasSdBCw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EC7CE/82014A10989911E9B7396A33F8AEA228/73CBFB96964011F1848080E6CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.192.72.0/21

    Signature Algorithm: sha256WithRSAEncryption
         95:89:a4:4a:40:9c:72:82:8f:6f:2c:5f:9c:dc:e5:3c:44:c8:
         1a:e3:57:7b:9f:d6:7f:1e:aa:45:aa:63:07:61:4d:5a:86:d1:
         58:7e:c6:a1:77:b6:63:dd:cd:12:41:dc:ea:76:01:4f:38:7c:
         25:ff:fb:32:01:66:c4:6b:f5:38:c2:68:73:f9:19:b8:85:f0:
         34:37:01:39:a1:2c:13:ca:54:2c:04:8e:fa:40:56:ff:d9:b3:
         f8:75:d5:04:64:71:6d:c7:1c:46:4c:1c:80:dc:03:ba:da:36:
         e0:ca:a7:2b:f2:ac:59:c1:00:42:66:38:84:06:2b:58:ce:64:
         a5:77:82:d7:70:61:a1:fd:e7:ec:e4:79:16:de:44:bc:fe:68:
         f5:50:04:59:43:81:95:cd:f1:62:94:61:3d:43:a0:7f:6c:52:
         9d:83:ff:f7:a4:1e:91:35:b8:55:82:e2:a0:63:5b:5c:f4:57:
         d5:e2:8f:45:f2:27:9b:db:4a:49:81:f3:52:71:12:a2:f5:ca:
         4e:e6:99:4e:aa:da:21:3f:04:b3:d0:78:51:2e:22:b5:b5:44:
         af:d4:11:cb:31:4e:e0:4b:02:36:d6:18:de:6f:a8:ad:a0:0a:
         25:0b:cb:ba:f8:9c:26:97:3e:af:38:b4:6a:4d:d9:72:41:0e:
         c7:08:98:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----