Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36424BF/8B42A2923A6611F1AA691F1ECF1D38B0/52A93FF2930F11F19CAE3214CF1D38B0.roa
File:                     52A93FF2930F11F19CAE3214CF1D38B0.roa (raw, json)
Hash identifier:          TJ6vhlA0WJoMlCTnSsE4i/vZ7IFEuMO0aOPBkm+ThW8=
Subject key identifier:   62:46:8C:F9:C0:D9:2A:D5:BD:FE:1C:44:75:22:57:B0:8F:35:85:1D
Certificate issuer:       /CN=F36424BFAF/serialNumber=06B1D8CB453FD3A167E8D312EC51E5893DD995D6
Certificate serial:       82
Authority key identifier: 06:B1:D8:CB:45:3F:D3:A1:67:E8:D3:12:EC:51:E5:89:3D:D9:95:D6
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/BrHYy0U_06Fn6NMS7FHliT3ZldY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36424BF/8B42A2923A6611F1AA691F1ECF1D38B0/52A93FF2930F11F19CAE3214CF1D38B0.roa
Signing time:             Sat 08 Aug 2026 09:55:45 +0000
ROA not before:           Sat 08 Aug 2026 09:55:40 +0000
ROA not after:            Thu 21 Jun 2035 09:55:40 +0000
asID:                     37326
IP address blocks:        197.220.64.0/24 maxlen: 24
                          197.220.65.0/24 maxlen: 24
                          197.220.66.0/24 maxlen: 24
                          197.220.67.0/24 maxlen: 24
                          197.220.68.0/24 maxlen: 24
                          197.220.69.0/24 maxlen: 24
                          197.220.70.0/24 maxlen: 24
                          197.220.71.0/24 maxlen: 24
                          197.220.72.0/24 maxlen: 24
                          197.220.73.0/24 maxlen: 24
                          197.220.74.0/24 maxlen: 24
                          197.220.75.0/24 maxlen: 24
                          197.220.76.0/24 maxlen: 24
                          197.220.77.0/24 maxlen: 24
                          197.220.78.0/24 maxlen: 24
                          197.220.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36424BF/8B42A2923A6611F1AA691F1ECF1D38B0/BrHYy0U_06Fn6NMS7FHliT3ZldY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36424BF/8B42A2923A6611F1AA691F1ECF1D38B0/BrHYy0U_06Fn6NMS7FHliT3ZldY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/BrHYy0U_06Fn6NMS7FHliT3ZldY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Sep 2026 05:34:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 130 (0x82)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36424BFAF, serialNumber=06B1D8CB453FD3A167E8D312EC51E5893DD995D6
        Validity
            Not Before: Aug  8 09:55:40 2026 GMT
            Not After : Jun 21 09:55:40 2035 GMT
        Subject: CN=6a76fd21-d28d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:eb:a0:8f:09:4f:b9:59:d3:51:63:9f:9f:4a:
                    95:27:ae:1b:40:08:93:63:43:48:24:17:9d:48:c8:
                    97:89:ad:74:87:a3:1b:23:08:cc:2e:3a:8f:e9:63:
                    82:74:7a:bd:6d:18:21:45:f3:41:58:5a:ab:d8:6a:
                    88:d4:fa:84:fa:a5:39:be:44:e3:91:8d:ea:26:e2:
                    d8:a6:e6:0b:6f:73:43:e3:09:0e:4a:67:f1:66:e7:
                    7c:0b:bc:cd:57:e8:c4:6e:47:5a:65:07:1a:7d:af:
                    9a:cf:45:bd:b1:12:9c:cb:2b:ad:75:a8:46:e2:20:
                    d3:5a:58:5d:2a:a2:8e:52:78:38:27:9c:2a:89:88:
                    39:0d:03:43:97:ce:70:ec:b0:3f:60:32:b0:07:99:
                    b4:31:dc:d1:9d:f5:a2:dc:ce:b0:44:8d:52:a2:d0:
                    c5:69:41:44:e7:5f:0b:ec:11:3f:cf:b2:41:4a:2e:
                    80:25:88:41:a7:0d:45:1c:30:00:1b:af:86:20:b0:
                    a3:4d:c2:47:9e:68:0e:ec:f6:e9:86:a9:8b:cf:5c:
                    d6:63:6b:77:24:5a:29:87:6d:98:ab:e4:25:09:bf:
                    22:b9:eb:33:93:7f:ac:dd:03:89:83:86:b4:73:9c:
                    44:7f:28:51:68:c3:24:ae:f6:98:ef:23:7b:8a:aa:
                    e6:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:46:8C:F9:C0:D9:2A:D5:BD:FE:1C:44:75:22:57:B0:8F:35:85:1D
            X509v3 Authority Key Identifier:
                keyid:06:B1:D8:CB:45:3F:D3:A1:67:E8:D3:12:EC:51:E5:89:3D:D9:95:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36424BF/8B42A2923A6611F1AA691F1ECF1D38B0/BrHYy0U_06Fn6NMS7FHliT3ZldY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/BrHYy0U_06Fn6NMS7FHliT3ZldY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36424BF/8B42A2923A6611F1AA691F1ECF1D38B0/52A93FF2930F11F19CAE3214CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  197.220.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         83:dc:ba:c9:4e:ae:eb:76:b5:95:f8:bb:99:b5:99:f5:b8:79:
         d9:67:1a:31:f7:79:34:54:36:45:89:e0:89:39:d8:77:f2:14:
         7a:39:02:51:19:d6:f5:f5:e1:02:04:9d:66:2a:51:9b:3b:a6:
         da:30:85:0a:e2:33:c4:e0:3c:99:bc:36:be:8d:90:b1:92:61:
         2b:ed:83:86:15:33:1c:fa:45:c7:87:fd:ee:e2:76:a2:ad:cb:
         b0:88:35:f5:14:f2:d3:17:c4:55:2c:c8:49:c5:7a:15:e1:a2:
         05:f9:b4:08:cc:0e:b3:b6:71:ab:2e:5f:33:2f:4b:9f:52:6b:
         4c:6c:6b:45:2c:ae:17:bf:0e:c0:61:63:54:83:a5:6a:38:5f:
         9c:c2:a7:c2:1f:5b:6e:c9:89:bb:3b:b5:4d:f9:13:b0:38:92:
         3a:1b:27:70:4a:3c:10:42:a3:ee:70:73:00:78:b1:75:36:5d:
         c0:9c:24:92:f5:e4:97:d6:5b:c6:0d:79:19:19:1b:15:88:7f:
         32:46:5d:f6:1a:32:20:ef:83:ad:3f:50:27:63:fe:17:fc:e0:
         17:71:85:b4:4a:8b:db:80:8f:a8:9f:c2:8f:08:a7:6a:ad:a0:
         90:bf:70:2d:2d:f3:52:0d:46:ad:1a:7a:23:85:1d:e3:f6:83:
         ee:cf:ce:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----