Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3656CC2/D69DE820BE3111EB9AD44E5DF8AEA228/C38922B885AA11F1B8F46102CF1D38B0.roa
File:                     C38922B885AA11F1B8F46102CF1D38B0.roa (raw, json)
Hash identifier:          7uYLosYaVKO+SsOlSWF5ZhmYqNDxjGyngxvLUsX6wA4=
Subject key identifier:   89:17:5D:D9:A3:7A:B1:D7:6C:7A:D9:4A:73:6A:A7:7F:9A:B2:03:E5
Certificate issuer:       /CN=F3656CC2AF/serialNumber=F09C2C7A2AF6013A5BBFFFEC61042B3BB4B5812B
Certificate serial:       0796
Authority key identifier: F0:9C:2C:7A:2A:F6:01:3A:5B:BF:FF:EC:61:04:2B:3B:B4:B5:81:2B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/8Jwseir2ATpbv__sYQQrO7S1gSs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3656CC2/D69DE820BE3111EB9AD44E5DF8AEA228/C38922B885AA11F1B8F46102CF1D38B0.roa
Signing time:             Wed 22 Jul 2026 08:53:10 +0000
ROA not before:           Wed 22 Jul 2026 08:53:06 +0000
ROA not after:            Sat 22 Jul 2028 08:53:06 +0000
asID:                     37302
IP address blocks:        2c0f:f450::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3656CC2/D69DE820BE3111EB9AD44E5DF8AEA228/8Jwseir2ATpbv__sYQQrO7S1gSs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3656CC2/D69DE820BE3111EB9AD44E5DF8AEA228/8Jwseir2ATpbv__sYQQrO7S1gSs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/8Jwseir2ATpbv__sYQQrO7S1gSs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 26 Jul 2026 00:07:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1942 (0x796)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3656CC2AF, serialNumber=F09C2C7A2AF6013A5BBFFFEC61042B3BB4B5812B
        Validity
            Not Before: Jul 22 08:53:06 2026 GMT
            Not After : Jul 22 08:53:06 2028 GMT
        Subject: CN=6a6084f6-cf2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:0b:37:43:4f:6b:12:a4:6c:89:b2:90:14:16:
                    68:fa:b1:46:c3:78:7e:89:32:45:6f:0f:ef:ba:f8:
                    31:aa:32:73:91:23:61:60:40:10:e5:f8:0b:a2:db:
                    6d:f9:57:ac:b1:38:fc:86:7b:40:7d:5f:80:80:ea:
                    02:c8:ce:66:70:19:7c:30:52:62:33:f1:5e:f0:ef:
                    a5:2e:c8:4a:ad:14:ad:0d:af:64:d6:0d:d1:6a:d8:
                    23:47:20:6d:a4:08:a6:e7:a8:f2:53:bf:21:8f:b8:
                    6d:9a:37:c1:90:4e:4b:00:7e:75:24:d5:4b:2a:46:
                    37:81:a1:b2:f7:5e:37:df:f0:8a:79:07:36:ba:5c:
                    b3:0a:40:e2:f5:4a:cd:85:69:25:46:48:d7:aa:58:
                    f9:b1:1d:8a:50:83:25:40:7b:7a:20:51:44:05:d5:
                    4f:5d:fb:d1:79:b7:34:6a:4f:70:ba:bf:8b:32:57:
                    75:ac:3c:d2:92:dc:12:d9:22:05:e0:73:01:43:50:
                    dd:6c:ad:99:d0:71:74:3e:ea:e2:dd:29:9b:10:0a:
                    95:05:ff:57:c0:69:82:0c:6a:9d:30:d6:89:57:43:
                    f0:86:83:39:53:6e:c2:e3:ba:51:79:c6:bf:59:13:
                    a1:f0:fa:05:b3:6b:24:bc:22:39:b9:ba:2c:19:2a:
                    bf:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:17:5D:D9:A3:7A:B1:D7:6C:7A:D9:4A:73:6A:A7:7F:9A:B2:03:E5
            X509v3 Authority Key Identifier:
                keyid:F0:9C:2C:7A:2A:F6:01:3A:5B:BF:FF:EC:61:04:2B:3B:B4:B5:81:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3656CC2/D69DE820BE3111EB9AD44E5DF8AEA228/8Jwseir2ATpbv__sYQQrO7S1gSs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/8Jwseir2ATpbv__sYQQrO7S1gSs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3656CC2/D69DE820BE3111EB9AD44E5DF8AEA228/C38922B885AA11F1B8F46102CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:f450::/32

    Signature Algorithm: sha256WithRSAEncryption
         15:5b:17:da:9e:20:fa:aa:75:62:71:87:15:40:54:e1:2e:27:
         f4:07:d9:32:5c:d8:88:f3:7f:c9:3d:84:3e:63:13:b6:ae:63:
         8a:27:77:c8:36:a2:e6:5a:1c:16:29:bd:ed:64:dc:f1:65:3e:
         4f:b1:a5:79:62:e7:a4:2b:f1:ab:ea:09:d6:32:d2:67:cb:6e:
         19:01:e6:05:8b:9d:b4:2a:ef:0f:a7:fa:8c:10:a0:a8:3c:dc:
         27:a9:44:f3:56:23:9f:9e:d0:51:76:d8:5e:4e:d2:b1:3b:e1:
         47:26:92:5e:b8:ad:5e:dc:48:3c:32:c9:0d:77:b8:81:2c:0c:
         56:94:d3:0a:e7:5a:59:2d:6e:37:79:a1:17:bd:cf:0f:aa:1d:
         be:06:99:62:47:fb:ed:0b:87:83:f1:5a:c7:01:c4:d0:10:ce:
         91:23:ad:3d:e2:9d:41:ec:35:cb:13:1d:af:90:a5:2c:ff:e2:
         07:dd:5c:08:80:9d:8d:a5:cd:ed:76:98:9f:99:49:28:e9:ab:
         05:d6:09:c9:e2:e4:2a:fa:6d:a2:3d:e3:7b:48:bf:7f:03:bb:
         a7:9d:b6:20:26:4f:fa:8c:51:65:7f:55:45:a3:a5:ee:eb:27:
         f4:87:f9:e4:28:b8:3a:61:f4:eb:4e:00:8a:41:00:32:a0:15:
         92:de:94:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----