Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36C6E7C/2BD3F1B6590111EDA097F2F0F1222468/68EDAB98927111F186EB3CD4CE1D38B0.roa
File:                     68EDAB98927111F186EB3CD4CE1D38B0.roa (raw, json)
Hash identifier:          kTnWk3m5q5/QJ4PYY6Jp+oga71lyxSS8SvYf7padrxY=
Subject key identifier:   24:8F:0F:08:64:2A:3C:FF:00:73:05:AE:32:76:82:BB:56:0C:34:AF
Certificate issuer:       /CN=F36C6E7CAF/serialNumber=83DD126E5E585FFA93F5F1FF5DEEF6FFFDBBFFA6
Certificate serial:       05A0
Authority key identifier: 83:DD:12:6E:5E:58:5F:FA:93:F5:F1:FF:5D:EE:F6:FF:FD:BB:FF:A6
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/g90Sbl5YX_qT9fH_Xe72__27_6Y.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C6E7C/2BD3F1B6590111EDA097F2F0F1222468/68EDAB98927111F186EB3CD4CE1D38B0.roa
Signing time:             Fri 07 Aug 2026 15:05:22 +0000
ROA not before:           Fri 07 Aug 2026 15:05:18 +0000
ROA not after:            Sun 31 Oct 2032 15:05:18 +0000
asID:                     328474
IP address blocks:        102.221.244.0/24 maxlen: 24
                          102.221.245.0/24 maxlen: 24
                          102.221.246.0/24 maxlen: 24
                          102.221.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C6E7C/2BD3F1B6590111EDA097F2F0F1222468/g90Sbl5YX_qT9fH_Xe72__27_6Y.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C6E7C/2BD3F1B6590111EDA097F2F0F1222468/g90Sbl5YX_qT9fH_Xe72__27_6Y.mft
                          rsync://rpki.afrinic.net/repository/afrinic/g90Sbl5YX_qT9fH_Xe72__27_6Y.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 04 Oct 2026 03:03:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1440 (0x5a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C6E7CAF, serialNumber=83DD126E5E585FFA93F5F1FF5DEEF6FFFDBBFFA6
        Validity
            Not Before: Aug  7 15:05:18 2026 GMT
            Not After : Oct 31 15:05:18 2032 GMT
        Subject: CN=6a75f432-1d2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b7:34:ae:4e:90:79:bd:69:c9:62:86:bd:9f:
                    c3:85:2f:c2:db:d5:93:0a:31:db:73:a1:99:e7:fa:
                    c9:d8:e8:e5:ed:c3:41:71:7f:b0:14:6f:51:7e:92:
                    0a:25:d6:75:78:bd:ad:43:7c:87:67:3c:a0:b5:9a:
                    e9:b4:08:2a:68:6b:2f:f9:b0:07:12:a1:da:04:c6:
                    8a:02:29:e1:9a:bd:44:a0:34:04:37:7f:5d:23:27:
                    69:09:5f:77:c6:78:d9:bb:de:d3:83:e8:94:e2:d1:
                    a7:a0:a8:d4:c6:76:dd:46:b4:e3:0c:31:d7:15:46:
                    05:c3:72:fa:f4:a9:2e:e4:12:d5:81:fc:ed:05:16:
                    a9:d6:b7:0f:35:d9:80:c3:6e:07:d6:88:c7:45:3c:
                    67:57:74:b4:fd:ef:c0:7f:88:6a:a0:4b:c8:6a:b9:
                    ae:39:9f:09:59:87:07:b0:4f:62:2e:56:60:03:01:
                    3b:c6:d3:b6:a7:06:de:9a:62:cc:86:90:1f:35:59:
                    5b:89:50:be:2e:10:b4:80:47:0b:9e:26:e1:ad:7d:
                    5d:22:b7:ec:16:0d:80:5f:77:23:5b:cc:b3:db:0f:
                    8b:b3:5b:a1:7e:95:20:97:be:fa:2b:17:f9:5a:6c:
                    89:11:7a:4f:48:4f:ca:5e:06:5b:5a:64:ca:54:b0:
                    0f:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:8F:0F:08:64:2A:3C:FF:00:73:05:AE:32:76:82:BB:56:0C:34:AF
            X509v3 Authority Key Identifier:
                keyid:83:DD:12:6E:5E:58:5F:FA:93:F5:F1:FF:5D:EE:F6:FF:FD:BB:FF:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C6E7C/2BD3F1B6590111EDA097F2F0F1222468/g90Sbl5YX_qT9fH_Xe72__27_6Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/g90Sbl5YX_qT9fH_Xe72__27_6Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C6E7C/2BD3F1B6590111EDA097F2F0F1222468/68EDAB98927111F186EB3CD4CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.221.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         64:43:0f:8a:0f:dd:47:af:d3:10:c8:5f:0b:43:59:3d:f8:e3:
         8c:c0:b9:e7:39:60:61:1c:7a:a3:f4:8b:1b:0c:c4:51:0e:89:
         85:c2:07:e8:90:c4:3e:7c:71:77:19:3b:22:7b:c5:77:a0:f8:
         59:93:8d:7a:a9:07:5f:51:c7:c0:04:8b:d3:84:3f:e9:d4:f0:
         e6:d2:92:32:16:85:0a:c3:3b:2a:01:7b:06:d6:da:9e:ec:20:
         2b:86:00:15:b9:15:2c:48:31:fe:4a:4c:22:27:9f:50:91:b6:
         0c:1f:1d:b0:e5:7a:e6:be:c1:a9:3f:2c:11:ba:44:72:0f:28:
         0a:b7:32:89:a9:8c:a2:ed:e3:e8:36:05:67:1e:e7:77:d6:06:
         6e:09:bd:76:82:cf:06:04:86:8c:4f:5b:87:1e:b8:ca:8b:56:
         79:79:4c:9c:3b:6d:66:c7:57:29:2e:5f:0e:1f:0e:07:47:33:
         03:fc:0d:5e:23:73:00:9b:aa:a8:eb:d5:84:1a:02:14:46:47:
         80:f6:32:e9:ed:35:86:58:0d:c9:a9:e2:f0:08:07:1f:1b:6d:
         03:98:36:f1:57:c3:f5:d4:72:e0:dc:3d:15:de:3b:19:56:e3:
         45:23:4e:e9:e6:6e:43:54:08:40:33:0d:f8:c3:17:a9:e4:2c:
         d0:e6:63:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----