Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/27636ED4B5C511F194E419E0CE1D38B0.roa
File:                     27636ED4B5C511F194E419E0CE1D38B0.roa (raw, json)
Hash identifier:          ewBZP+o3gFUaiXSh3dLy0P/FBmeqa9KK37P6TR8GuE8=
Subject key identifier:   B7:3F:3B:3C:59:DE:F9:1F:97:59:94:4E:B7:F0:EB:8D:1D:E0:B0:4A
Certificate issuer:       /CN=F36F0628AF/serialNumber=8605D7599A0402F70EC2F258D6C16BD2E4E8D1FE
Certificate serial:       0832
Authority key identifier: 86:05:D7:59:9A:04:02:F7:0E:C2:F2:58:D6:C1:6B:D2:E4:E8:D1:FE
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/hgXXWZoEAvcOwvJY1sFr0uTo0f4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/27636ED4B5C511F194E419E0CE1D38B0.roa
Signing time:             Mon 21 Sep 2026 14:03:00 +0000
ROA not before:           Mon 21 Sep 2026 14:02:56 +0000
ROA not after:            Sun 21 Sep 2036 14:02:56 +0000
asID:                     6079
IP address blocks:        196.44.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/hgXXWZoEAvcOwvJY1sFr0uTo0f4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/hgXXWZoEAvcOwvJY1sFr0uTo0f4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/hgXXWZoEAvcOwvJY1sFr0uTo0f4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2098 (0x832)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F0628AF, serialNumber=8605D7599A0402F70EC2F258D6C16BD2E4E8D1FE
        Validity
            Not Before: Sep 21 14:02:56 2026 GMT
            Not After : Sep 21 14:02:56 2036 GMT
        Subject: CN=6ab13914-6081
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:59:c0:c7:76:60:bc:0d:09:78:8e:0c:18:71:
                    da:ea:4d:8a:8a:6a:fb:32:88:e1:64:f5:a2:96:96:
                    00:76:d4:ad:a9:4a:35:03:b9:5d:e6:bf:55:59:95:
                    a1:c7:1c:7a:c4:84:4c:37:66:41:ce:46:58:3a:5d:
                    4d:9b:b6:57:fb:d4:3a:84:e7:78:41:aa:d4:6a:c4:
                    2a:53:8f:c2:63:cc:c5:47:e1:1b:78:88:94:9a:96:
                    19:09:ec:7a:73:d8:3e:44:37:c4:b0:d2:ba:82:0f:
                    58:05:e1:11:a6:a7:ca:9d:55:68:2b:02:34:d7:87:
                    1a:84:ca:1f:2a:01:d4:c5:9a:05:be:94:67:20:3b:
                    dd:8e:77:4a:7e:96:fa:59:b2:f3:5d:07:e7:9a:3d:
                    f2:6d:3d:cb:ad:d2:12:7b:67:bc:30:4e:27:98:11:
                    61:f6:f9:5d:b5:e4:29:f9:ea:63:5c:87:b3:65:b2:
                    6f:24:b0:02:2e:24:f7:3c:48:f4:75:1b:58:4e:44:
                    1d:86:73:ca:7d:e0:18:1a:42:fa:da:7c:a7:16:f9:
                    c1:5b:bd:5b:2f:4a:5e:44:cd:1a:e4:0e:a5:6f:1f:
                    55:57:61:ec:a1:86:34:31:4c:29:12:c2:43:fb:c7:
                    27:0f:39:b6:6f:0a:d0:9b:72:63:42:94:54:35:a6:
                    e0:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:3F:3B:3C:59:DE:F9:1F:97:59:94:4E:B7:F0:EB:8D:1D:E0:B0:4A
            X509v3 Authority Key Identifier:
                keyid:86:05:D7:59:9A:04:02:F7:0E:C2:F2:58:D6:C1:6B:D2:E4:E8:D1:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/hgXXWZoEAvcOwvJY1sFr0uTo0f4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hgXXWZoEAvcOwvJY1sFr0uTo0f4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/27636ED4B5C511F194E419E0CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.44.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:54:47:cf:70:ad:1e:c9:a1:6b:a8:4e:b8:9e:72:a2:ad:93:
         b0:4a:2c:a5:3d:0c:18:11:f6:3d:85:c3:1e:c8:97:38:fe:40:
         08:18:80:a4:dd:51:f6:03:b5:7f:36:c1:a9:98:7f:05:ae:90:
         ee:d4:0e:d7:a6:67:76:41:9f:5f:dc:13:45:6d:7a:a2:59:47:
         02:cc:c1:58:7e:60:51:1b:d1:6d:fd:36:55:bc:ea:af:ed:49:
         26:3d:86:be:a2:e8:af:f7:cf:f6:9b:aa:f5:d6:21:9f:c5:1c:
         52:f1:2b:98:88:2f:ad:35:36:6b:6d:47:02:0e:b7:7c:d2:c3:
         a2:65:df:e1:ac:48:a1:9f:f5:58:e9:a6:55:c7:dc:ef:e9:19:
         01:a2:7b:93:d1:19:be:1a:c4:e4:45:68:21:29:c2:fe:fe:ed:
         10:56:49:89:2d:6c:9a:e9:26:1e:2e:d7:f7:20:f2:35:13:5c:
         fc:a4:df:eb:9f:8c:c9:2c:65:fd:47:d1:cc:08:5e:2f:53:a2:
         03:b6:7d:20:e7:ff:df:fe:82:32:9f:03:76:f8:5c:85:5f:91:
         cb:9c:d2:be:fb:ef:aa:2d:d2:c4:c2:72:0f:58:e3:79:f7:d8:
         25:9c:f8:51:48:5e:75:f3:0b:78:49:7f:bf:fc:22:62:3b:72:
         67:fd:cc:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----