Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/A3A3CC06B42A11F1B9F808E8CE1D38B0.roa
File:                     A3A3CC06B42A11F1B9F808E8CE1D38B0.roa (raw, json)
Hash identifier:          CxEIEZot8UOJaKzz3NmxERvOGvRSZV/oQFD+8MUA+eo=
Subject key identifier:   80:3D:EE:3E:96:39:58:C5:2B:C2:41:F5:02:9D:A1:5E:BC:C9:14:8F
Certificate issuer:       /CN=F36F0628AF/serialNumber=8605D7599A0402F70EC2F258D6C16BD2E4E8D1FE
Certificate serial:       0829
Authority key identifier: 86:05:D7:59:9A:04:02:F7:0E:C2:F2:58:D6:C1:6B:D2:E4:E8:D1:FE
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/hgXXWZoEAvcOwvJY1sFr0uTo0f4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/A3A3CC06B42A11F1B9F808E8CE1D38B0.roa
Signing time:             Sat 19 Sep 2026 13:04:25 +0000
ROA not before:           Sat 19 Sep 2026 13:04:21 +0000
ROA not after:            Fri 19 Sep 2036 13:04:21 +0000
asID:                     7018
IP address blocks:        196.44.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/hgXXWZoEAvcOwvJY1sFr0uTo0f4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/hgXXWZoEAvcOwvJY1sFr0uTo0f4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/hgXXWZoEAvcOwvJY1sFr0uTo0f4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 02:20:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2089 (0x829)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F0628AF, serialNumber=8605D7599A0402F70EC2F258D6C16BD2E4E8D1FE
        Validity
            Not Before: Sep 19 13:04:21 2026 GMT
            Not After : Sep 19 13:04:21 2036 GMT
        Subject: CN=6aae8859-02f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:7a:65:80:86:3b:42:8e:c3:e4:9d:ce:21:5a:
                    78:e6:77:e9:22:2a:6e:00:1f:70:43:d0:33:c2:21:
                    c4:c9:f2:0c:19:7e:63:24:b9:d5:77:a6:a4:c3:e3:
                    2f:e5:4f:96:3e:d8:c6:fe:c7:ac:96:ca:30:72:9f:
                    e4:d0:d4:e4:2b:aa:df:68:30:57:92:bd:2f:e0:a4:
                    4e:95:c2:14:14:13:95:fc:e9:e7:02:ad:61:c2:55:
                    43:fe:0f:68:58:1a:eb:a4:42:76:0c:c7:e5:42:59:
                    32:e4:c9:10:36:84:17:64:32:d8:8e:e2:2a:8d:26:
                    eb:a3:59:11:9b:d9:31:1b:b6:86:9b:c0:e9:67:c6:
                    51:3c:d5:5a:a5:3a:66:b1:ec:92:f2:e7:f5:af:28:
                    44:52:68:8e:ec:46:1d:04:42:86:3f:e8:7e:3d:db:
                    1f:17:54:8b:c4:3c:a4:11:13:cc:79:a1:80:6e:c2:
                    17:5d:31:e0:84:ca:53:0e:02:79:54:9b:74:41:c1:
                    93:9d:f1:9c:f5:dd:d2:cf:d0:7e:e1:0a:fb:a6:ac:
                    94:63:fa:94:a8:bb:ec:83:5b:43:7a:1b:23:d3:52:
                    eb:29:0b:2f:e6:2b:0c:8a:03:f3:b7:87:d8:cf:7b:
                    9e:9b:6b:b1:28:b0:a1:fa:6f:17:cf:97:89:aa:05:
                    c6:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:3D:EE:3E:96:39:58:C5:2B:C2:41:F5:02:9D:A1:5E:BC:C9:14:8F
            X509v3 Authority Key Identifier:
                keyid:86:05:D7:59:9A:04:02:F7:0E:C2:F2:58:D6:C1:6B:D2:E4:E8:D1:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/hgXXWZoEAvcOwvJY1sFr0uTo0f4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hgXXWZoEAvcOwvJY1sFr0uTo0f4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/A3A3CC06B42A11F1B9F808E8CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.44.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:13:60:0e:3e:67:89:09:c0:03:93:08:06:de:79:bc:0c:6d:
         2c:69:88:a5:b2:53:3d:4c:dd:af:f6:bd:e4:6b:ae:ae:52:5e:
         55:1d:b9:8a:36:b9:11:89:86:9c:ad:09:50:71:01:4f:8e:b7:
         e8:b0:fd:44:08:ab:ce:32:49:da:c4:19:48:5c:ad:0e:b0:cd:
         8e:c6:fc:b9:98:6c:24:fe:97:69:30:98:73:bf:fc:63:94:3b:
         8c:36:77:26:92:72:14:df:1d:ee:02:bf:15:b9:6c:56:37:24:
         82:98:9a:6d:eb:63:ae:06:17:4d:89:a0:0d:c5:40:39:f1:96:
         2b:5f:28:ef:de:a2:07:90:b2:87:72:57:dc:b4:21:1e:f9:58:
         a6:7a:a5:98:d2:46:5c:4f:2a:61:ef:87:a1:71:d6:b4:25:d4:
         1c:a2:e3:31:c3:e1:10:cb:0d:cd:0d:f7:21:e5:3e:1c:fb:7e:
         b0:0f:bc:d6:5b:ea:67:c7:d4:2b:cc:c7:a5:19:fd:58:bf:52:
         b3:96:20:a3:5e:c0:4f:9a:10:2d:f0:de:72:ae:72:04:5f:29:
         c0:d8:bb:5a:59:5f:b1:c8:6b:6d:46:3f:fe:30:86:33:92:aa:
         45:96:a7:32:2a:a1:da:32:2e:f4:78:8a:32:c8:ed:34:ad:9b:
         ad:18:a4:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----