Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36EF186/095B7A2A548011EE8C8F332D4AD9E6FC/A46427FEB4BA11F1AF5F091BCF1D38B0.roa
File:                     A46427FEB4BA11F1AF5F091BCF1D38B0.roa (raw, json)
Hash identifier:          wwMJkqzqMBOYY9fuUGtM3dw5ts8nRju8UfY3HcCW284=
Subject key identifier:   64:1C:B2:8F:A7:8C:8D:94:89:22:D5:57:14:7C:6E:CB:53:60:08:6F
Certificate issuer:       /CN=F36EF186AF/serialNumber=F377D4D428F9465B15449C6AFD4532C422446964
Certificate serial:       0490
Authority key identifier: F3:77:D4:D4:28:F9:46:5B:15:44:9C:6A:FD:45:32:C4:22:44:69:64
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/83fU1Cj5RlsVRJxq_UUyxCJEaWQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36EF186/095B7A2A548011EE8C8F332D4AD9E6FC/A46427FEB4BA11F1AF5F091BCF1D38B0.roa
Signing time:             Sun 20 Sep 2026 06:15:14 +0000
ROA not before:           Sun 20 Sep 2026 06:15:09 +0000
ROA not after:            Sun 30 Sep 2046 06:15:09 +0000
asID:                     328611
IP address blocks:        102.201.44.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36EF186/095B7A2A548011EE8C8F332D4AD9E6FC/83fU1Cj5RlsVRJxq_UUyxCJEaWQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36EF186/095B7A2A548011EE8C8F332D4AD9E6FC/83fU1Cj5RlsVRJxq_UUyxCJEaWQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/83fU1Cj5RlsVRJxq_UUyxCJEaWQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1168 (0x490)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36EF186AF, serialNumber=F377D4D428F9465B15449C6AFD4532C422446964
        Validity
            Not Before: Sep 20 06:15:09 2026 GMT
            Not After : Sep 30 06:15:09 2046 GMT
        Subject: CN=6aaf79f2-0022
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:6e:6e:ac:01:c4:33:02:a0:47:ec:d6:c2:c5:
                    47:d9:49:a0:59:a9:a0:29:33:eb:7e:9f:b2:62:ed:
                    99:21:f1:22:cd:35:06:5b:07:bb:e7:49:a6:a9:53:
                    78:e9:a5:26:98:77:2e:72:f6:9b:6c:0b:c6:83:da:
                    a7:58:df:0b:93:0c:50:67:6a:73:e5:3a:0d:12:44:
                    4f:e3:c1:ba:30:c1:ef:5c:11:9b:85:3e:e5:60:52:
                    6a:36:fe:1c:04:38:e2:42:ec:05:78:9f:fd:ea:ba:
                    f5:3f:00:c7:96:d2:75:b6:16:72:dc:44:d0:f6:86:
                    e1:8c:04:70:8f:63:fd:23:7e:fc:4b:d4:30:e9:f7:
                    21:41:23:99:72:6d:18:a8:2b:e6:58:16:69:18:70:
                    46:29:a8:f5:a7:9f:50:00:22:27:5c:ea:24:f3:ca:
                    dd:62:cf:19:c6:de:9b:fb:12:cb:fe:19:20:b5:ae:
                    3a:3f:60:f4:e0:e3:79:f8:11:82:43:f5:b2:bf:d1:
                    0c:96:6f:b1:ee:58:65:29:c1:c0:a6:a3:ae:01:3b:
                    54:c4:3a:38:bf:aa:7a:04:ea:df:a1:cc:0e:51:4b:
                    63:f9:0a:0b:ba:7b:c7:9d:69:16:80:e4:77:6a:21:
                    35:89:d3:ac:88:a2:b1:c2:38:a9:6d:97:8e:f6:50:
                    83:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:1C:B2:8F:A7:8C:8D:94:89:22:D5:57:14:7C:6E:CB:53:60:08:6F
            X509v3 Authority Key Identifier:
                keyid:F3:77:D4:D4:28:F9:46:5B:15:44:9C:6A:FD:45:32:C4:22:44:69:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36EF186/095B7A2A548011EE8C8F332D4AD9E6FC/83fU1Cj5RlsVRJxq_UUyxCJEaWQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/83fU1Cj5RlsVRJxq_UUyxCJEaWQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EF186/095B7A2A548011EE8C8F332D4AD9E6FC/A46427FEB4BA11F1AF5F091BCF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.201.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5a:b5:73:e9:81:16:27:7f:85:01:af:7a:2b:fe:c7:47:55:ed:
         96:4c:41:fa:1b:c5:43:8b:38:50:7c:7f:ac:15:32:7c:78:9b:
         d2:4e:24:db:a8:ac:85:c4:90:b3:75:dc:2d:8b:aa:4e:15:54:
         99:60:95:dd:08:ff:6f:e4:3c:6b:7f:e3:7c:67:b3:ac:4b:de:
         42:fd:c5:66:ee:a8:50:e7:ef:76:3e:6e:7e:ae:fa:06:bf:87:
         20:16:10:27:d3:4a:db:86:f8:80:6c:a2:46:aa:b0:59:d7:b7:
         37:38:6b:38:3e:ff:79:bc:3a:77:f0:8d:a9:f9:dc:14:76:c7:
         52:e4:e6:ce:15:3d:b5:fd:d9:7c:17:f3:70:dc:90:c3:9d:08:
         e4:92:56:df:42:71:05:a8:47:27:b7:de:7d:ac:e2:10:d9:30:
         de:0c:b4:be:7f:bf:af:54:a4:78:0f:c4:29:eb:b6:3c:6b:a5:
         4a:50:d5:92:c6:3e:5c:31:e6:04:69:51:06:54:b3:1e:95:7d:
         ac:63:07:e8:a4:c9:0a:81:30:04:28:bc:c1:7d:60:08:cb:55:
         8e:f7:cb:f2:1e:4e:3e:34:42:37:58:11:21:21:e6:a1:88:c7:
         fb:25:d1:b4:c6:ca:53:a8:33:41:dd:82:5b:4b:72:0d:42:a8:
         3c:2c:90:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----