Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/4FBF1C72AD0311F1862DB40FCF1D38B0.roa
File:                     4FBF1C72AD0311F1862DB40FCF1D38B0.roa (raw, json)
Hash identifier:          t6ex/8mwd18GaETkmAnTRn/QBwkoSJmWpGTfIaWpmQg=
Subject key identifier:   50:00:30:32:89:A8:00:15:CB:D2:E5:61:42:4E:13:6E:AF:9A:37:99
Certificate issuer:       /CN=F36EF7D0AF/serialNumber=3A553B6EF80BF922312F96B8DDC1F219A8C4121B
Certificate serial:       05AD
Authority key identifier: 3A:55:3B:6E:F8:0B:F9:22:31:2F:96:B8:DD:C1:F2:19:A8:C4:12:1B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/4FBF1C72AD0311F1862DB40FCF1D38B0.roa
Signing time:             Thu 10 Sep 2026 10:35:17 +0000
ROA not before:           Thu 10 Sep 2026 10:35:12 +0000
ROA not after:            Tue 10 Sep 2030 10:35:12 +0000
asID:                     25198
IP address blocks:        102.212.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 03:25:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1453 (0x5ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36EF7D0AF, serialNumber=3A553B6EF80BF922312F96B8DDC1F219A8C4121B
        Validity
            Not Before: Sep 10 10:35:12 2026 GMT
            Not After : Sep 10 10:35:12 2030 GMT
        Subject: CN=6aa287e5-b977
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:9a:91:8d:14:37:b8:82:93:b4:f1:48:27:70:
                    28:15:8d:06:1b:75:7f:7a:42:a0:5f:6f:56:ef:0e:
                    7f:81:ea:e4:f0:7f:d9:21:d5:cb:04:0c:0f:35:32:
                    32:56:5c:fa:d5:84:3a:50:6f:b6:a6:71:b8:75:b5:
                    1a:2d:d0:aa:f7:fd:b5:2a:10:bb:23:89:41:0f:63:
                    95:1f:0a:40:0c:93:48:c9:76:15:28:43:01:00:71:
                    f2:ec:d8:9c:96:e7:e8:8e:a1:0f:f3:40:e5:34:75:
                    62:78:17:91:46:d8:10:ca:e4:50:92:75:57:ca:01:
                    a7:93:9d:15:08:ab:17:fe:b3:9c:b9:30:e0:6c:9d:
                    dc:68:90:d0:7b:2b:54:ae:76:8a:b0:06:67:ac:97:
                    e5:03:7e:30:11:73:65:36:20:90:c7:25:57:39:c8:
                    82:c2:bd:50:09:a7:48:85:f4:81:e1:26:57:e0:d7:
                    68:18:fd:eb:7b:55:3c:bd:24:29:fd:95:bf:24:6c:
                    a9:b1:8b:a8:a6:66:24:7a:d3:89:bd:4e:78:f5:d9:
                    94:f7:77:a4:86:a1:c5:60:1b:af:2c:97:2e:f7:33:
                    0f:3b:c4:ef:d5:d1:32:13:ce:77:2f:f5:b6:46:56:
                    2e:10:55:9b:d5:42:a5:d1:12:45:17:ef:99:ff:bf:
                    cd:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:00:30:32:89:A8:00:15:CB:D2:E5:61:42:4E:13:6E:AF:9A:37:99
            X509v3 Authority Key Identifier:
                keyid:3A:55:3B:6E:F8:0B:F9:22:31:2F:96:B8:DD:C1:F2:19:A8:C4:12:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/4FBF1C72AD0311F1862DB40FCF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.212.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:56:a3:24:bb:85:f9:bc:46:68:dd:1c:91:f2:70:bc:fc:39:
         94:35:d6:d0:d8:3c:52:37:1a:f0:a2:0e:22:01:fd:5e:fe:5b:
         69:4b:ff:60:78:ad:5a:3b:eb:dd:14:0f:db:e4:2c:f4:91:76:
         28:14:2f:43:b6:ed:0e:91:83:5e:7f:79:9b:30:24:e8:5c:91:
         c2:b3:e6:5c:1b:41:12:b5:4f:5b:cb:e7:a0:01:7f:bc:56:64:
         5d:08:18:4c:2e:f9:07:92:20:c4:4e:22:48:21:86:0e:c0:0c:
         6e:5d:d0:c5:be:27:76:d4:09:a3:13:1b:c2:1f:e0:3c:f2:a2:
         fd:41:29:76:2e:f2:e4:cb:16:3c:8b:bd:66:bc:d5:f0:09:57:
         08:de:17:d1:ef:3c:e0:dd:6d:a7:bf:82:1b:1e:bb:c6:d2:a9:
         fe:df:cf:0c:93:c1:cf:8f:d3:17:72:47:84:3b:f0:73:f3:64:
         b4:92:e9:58:a6:27:90:79:b2:73:4d:b7:f4:d1:e7:75:27:32:
         d7:8f:aa:da:b6:5a:f0:91:46:36:71:83:10:9c:83:2e:04:19:
         4c:f8:a5:72:4a:14:68:d8:44:58:f9:51:a1:6b:ed:bb:a3:55:
         a9:34:b3:00:b9:99:1e:a7:d6:d9:2a:2d:4e:34:4b:f9:98:c0:
         94:bf:7a:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----