Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3626C5B/EE6ADCC2CDF711EAA5AED244F8AEA228/718E7D0C86B111F19930B2BDCE1D38B0.roa
File:                     718E7D0C86B111F19930B2BDCE1D38B0.roa (raw, json)
Hash identifier:          nBpUPuhm+PdhHS8iH4gpkrl2A2IJbJ1GitlJ8/Nq+0o=
Subject key identifier:   A2:26:DB:64:F4:13:FF:0A:BB:0F:77:11:15:DC:0B:00:5C:85:9D:B7
Certificate issuer:       /CN=F3626C5BAF/serialNumber=2CDF580E376755B1F8C6880842126DD63DD74EE7
Certificate serial:       08E3
Authority key identifier: 2C:DF:58:0E:37:67:55:B1:F8:C6:88:08:42:12:6D:D6:3D:D7:4E:E7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/LN9YDjdnVbH4xogIQhJt1j3XTuc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3626C5B/EE6ADCC2CDF711EAA5AED244F8AEA228/718E7D0C86B111F19930B2BDCE1D38B0.roa
Signing time:             Thu 23 Jul 2026 16:13:30 +0000
ROA not before:           Thu 23 Jul 2026 16:13:26 +0000
ROA not after:            Thu 31 Jul 2036 16:13:26 +0000
asID:                     37468
IP address blocks:        2c0f:f828::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3626C5B/EE6ADCC2CDF711EAA5AED244F8AEA228/LN9YDjdnVbH4xogIQhJt1j3XTuc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3626C5B/EE6ADCC2CDF711EAA5AED244F8AEA228/LN9YDjdnVbH4xogIQhJt1j3XTuc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/LN9YDjdnVbH4xogIQhJt1j3XTuc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 26 Jul 2026 00:07:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2275 (0x8e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3626C5BAF, serialNumber=2CDF580E376755B1F8C6880842126DD63DD74EE7
        Validity
            Not Before: Jul 23 16:13:26 2026 GMT
            Not After : Jul 31 16:13:26 2036 GMT
        Subject: CN=6a623daa-f2e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:61:4f:e2:3f:d4:aa:29:33:9d:67:fd:9b:98:
                    9f:db:77:be:88:74:4c:27:44:e1:97:52:5b:30:80:
                    b2:f7:ed:28:e5:e7:d8:56:15:54:17:04:de:57:3e:
                    d8:31:59:36:70:1b:46:7d:af:1c:25:75:67:3c:14:
                    cf:f2:97:22:c2:f9:90:5d:09:55:fe:ed:54:78:b1:
                    bf:a2:ae:1b:d6:9a:c2:b3:8f:8d:66:1d:49:dc:84:
                    16:36:3d:d7:e1:8c:f0:d3:db:9e:26:4e:ca:5a:67:
                    f0:7d:d7:5c:b2:8b:73:9e:83:ad:58:8a:51:b7:e4:
                    9e:8a:c6:fb:20:0f:5e:5c:6f:90:88:bc:db:3d:a7:
                    8d:88:dc:54:42:7b:d5:4a:49:d9:54:7b:d5:7a:8f:
                    57:2e:25:2a:36:25:1d:8c:24:38:33:b0:d1:aa:4e:
                    67:3b:f4:86:13:a5:1b:bd:16:7c:30:32:d5:2f:dd:
                    1e:a9:60:e7:54:ef:db:df:6c:b0:50:3f:80:8b:91:
                    06:cd:f7:06:f4:50:3b:66:c5:2e:83:3d:8a:0f:ab:
                    2b:c5:d7:06:76:d9:be:52:50:eb:0c:f1:58:33:04:
                    ad:d9:d3:6c:a5:7a:1d:3f:9d:44:50:68:04:3d:62:
                    02:ce:f5:8d:e0:b8:a9:95:3d:25:65:53:c6:e9:8b:
                    76:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:26:DB:64:F4:13:FF:0A:BB:0F:77:11:15:DC:0B:00:5C:85:9D:B7
            X509v3 Authority Key Identifier:
                keyid:2C:DF:58:0E:37:67:55:B1:F8:C6:88:08:42:12:6D:D6:3D:D7:4E:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3626C5B/EE6ADCC2CDF711EAA5AED244F8AEA228/LN9YDjdnVbH4xogIQhJt1j3XTuc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/LN9YDjdnVbH4xogIQhJt1j3XTuc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3626C5B/EE6ADCC2CDF711EAA5AED244F8AEA228/718E7D0C86B111F19930B2BDCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:f828::/32

    Signature Algorithm: sha256WithRSAEncryption
         a5:2e:1b:b8:70:71:76:23:fa:1e:ed:13:03:9d:90:df:79:2e:
         97:65:cf:b6:3b:47:30:d7:7d:ef:2d:49:ea:7c:63:0a:cb:68:
         36:16:4b:fc:3b:21:16:b4:7e:d6:0d:a9:ec:8c:d7:c3:46:a2:
         30:bf:14:91:d6:bb:d0:2a:a9:05:af:55:ae:07:73:ea:20:41:
         98:53:1f:14:ea:50:67:ee:63:ba:c3:f1:4a:8b:81:f3:c3:a5:
         b1:5a:c1:a8:04:79:3b:97:52:da:d3:02:a3:a5:2c:a2:48:2d:
         65:9c:cc:a2:4f:c4:63:73:82:70:70:21:e9:d5:ed:e8:eb:3d:
         c5:ae:0f:4c:67:16:d5:02:90:9b:7b:af:ae:02:76:28:a4:c7:
         59:26:65:6a:7e:0e:85:42:71:5f:c9:62:f1:8d:77:56:6a:84:
         19:58:78:cd:e0:d8:c2:11:90:1c:63:f8:10:f2:65:d0:87:db:
         ac:6b:23:9d:6d:4a:21:ca:88:23:f3:39:08:5c:ab:49:7f:c8:
         72:ec:c6:92:4d:18:93:0e:fa:e1:d1:a2:4b:37:a2:87:fb:f6:
         47:c4:6d:5b:43:59:05:2b:5f:ae:1e:81:44:a8:83:7e:96:76:
         72:0d:b3:df:86:9c:18:25:fc:8b:2f:7a:1c:86:06:6b:2f:46:
         fa:a9:54:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----