Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36EC7CE/82014A10989911E9B7396A33F8AEA228/9A7B53D0963711F1B2A05DB1CE1D38B0.roa
File:                     9A7B53D0963711F1B2A05DB1CE1D38B0.roa (raw, json)
Hash identifier:          HmyAQJnkkRmlSFFgdyH41p3xz7nklLlBMiyaitvZ59Q=
Subject key identifier:   CD:0C:B2:55:EC:7B:F0:7B:B6:99:A9:66:E6:BB:A0:12:E9:13:9F:6A
Certificate issuer:       /CN=F36EC7CEAF/serialNumber=0E040ABF4F945F30D77DA28BBF028B6AC49D042C
Certificate serial:       0A89
Authority key identifier: 0E:04:0A:BF:4F:94:5F:30:D7:7D:A2:8B:BF:02:8B:6A:C4:9D:04:2C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/DgQKv0-UXzDXfaKLvwKLasSdBCw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36EC7CE/82014A10989911E9B7396A33F8AEA228/9A7B53D0963711F1B2A05DB1CE1D38B0.roa
Signing time:             Wed 12 Aug 2026 10:21:39 +0000
ROA not before:           Wed 12 Aug 2026 10:21:35 +0000
ROA not after:            Tue 12 Aug 2036 10:21:35 +0000
asID:                     327795
IP address blocks:        2c0f:efe8::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36EC7CE/82014A10989911E9B7396A33F8AEA228/DgQKv0-UXzDXfaKLvwKLasSdBCw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36EC7CE/82014A10989911E9B7396A33F8AEA228/DgQKv0-UXzDXfaKLvwKLasSdBCw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/DgQKv0-UXzDXfaKLvwKLasSdBCw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2697 (0xa89)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36EC7CEAF, serialNumber=0E040ABF4F945F30D77DA28BBF028B6AC49D042C
        Validity
            Not Before: Aug 12 10:21:35 2026 GMT
            Not After : Aug 12 10:21:35 2036 GMT
        Subject: CN=6a7c4933-2468
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:19:02:73:2e:97:bc:a6:a3:8d:c7:3b:3d:b0:
                    6f:f6:87:4d:b8:a9:ae:99:0d:f4:d3:80:2e:59:c0:
                    87:d6:e7:70:ce:cf:f3:fc:1c:4b:c1:3e:64:2b:88:
                    a7:79:c7:2b:32:5c:2c:32:28:51:16:a6:2e:bd:85:
                    72:65:b0:84:b9:ad:8b:06:d8:e8:e4:c9:82:93:19:
                    7e:13:b6:5d:b9:80:60:38:01:4c:45:5b:d8:64:d1:
                    69:15:78:b9:97:55:00:ec:0e:29:0c:2f:3e:c4:d5:
                    75:be:09:06:2d:a3:2c:2f:44:bd:25:e4:24:dc:7a:
                    4e:ab:87:4c:6d:05:e2:cb:d2:8f:0a:d4:5c:8e:ef:
                    89:57:ee:38:3c:9c:2b:59:ee:46:42:a9:e3:79:58:
                    e8:49:83:65:7e:82:67:76:f7:0a:22:6b:ec:b6:96:
                    26:e2:15:ba:73:cf:99:16:19:87:7a:bc:31:8a:2c:
                    c5:6c:3f:a6:c9:38:10:ab:12:36:41:f5:83:ec:7d:
                    11:38:38:59:69:5c:83:a7:35:81:dc:5d:75:d1:ca:
                    d0:a5:b6:05:60:66:8a:ce:70:4e:3d:29:56:31:96:
                    97:ca:3e:3d:83:5c:79:cc:83:d5:9b:6b:25:cc:15:
                    42:54:27:d5:d4:af:b3:e5:c5:c5:c5:29:41:64:a5:
                    d5:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:0C:B2:55:EC:7B:F0:7B:B6:99:A9:66:E6:BB:A0:12:E9:13:9F:6A
            X509v3 Authority Key Identifier:
                keyid:0E:04:0A:BF:4F:94:5F:30:D7:7D:A2:8B:BF:02:8B:6A:C4:9D:04:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36EC7CE/82014A10989911E9B7396A33F8AEA228/DgQKv0-UXzDXfaKLvwKLasSdBCw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/DgQKv0-UXzDXfaKLvwKLasSdBCw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EC7CE/82014A10989911E9B7396A33F8AEA228/9A7B53D0963711F1B2A05DB1CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:efe8::/32

    Signature Algorithm: sha256WithRSAEncryption
         7b:43:92:e2:35:0a:54:47:fc:90:94:c4:e0:08:e1:d6:74:bd:
         92:b7:71:5b:da:72:d2:03:92:e9:c4:ac:96:2c:9d:fa:d6:0e:
         bb:e6:aa:06:91:70:26:78:1d:93:78:1d:29:8c:ba:dc:34:89:
         51:e7:2c:a8:dc:3c:ae:e8:17:23:05:48:ac:9d:a5:78:c2:df:
         0d:d8:a5:9c:a0:cc:f6:82:c3:42:da:49:b1:d8:a2:5a:41:41:
         75:87:20:38:c6:bf:c3:26:13:4d:6c:63:ac:42:8e:04:fa:e4:
         1c:4c:a2:ea:23:9d:17:2f:39:17:6f:81:bb:94:18:39:b4:11:
         80:be:a7:95:d9:ff:07:17:dc:e5:70:f2:76:ec:2a:95:1b:8f:
         00:1d:63:b7:66:f6:a6:79:4b:b0:5c:57:e9:e1:4a:4c:68:f0:
         f5:05:a1:fe:75:d2:69:b2:a4:e8:9f:c8:71:d1:11:e7:8f:63:
         c2:50:5c:59:ba:b0:54:99:48:7a:63:ad:01:44:58:9e:f5:01:
         e0:9d:b6:31:26:62:98:b7:d8:3f:46:fe:3e:db:17:0f:d9:a0:
         40:53:92:ad:9f:d4:4a:59:14:a3:ce:ca:17:93:14:cc:85:13:
         89:83:96:0a:2f:6e:f5:71:5d:26:96:b6:dd:55:4f:ac:2e:8c:
         60:27:77:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----