Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36C6E7C/2BD3F1B6590111EDA097F2F0F1222468/AD052FB4927011F19BEA12D0CE1D38B0.roa
File:                     AD052FB4927011F19BEA12D0CE1D38B0.roa (raw, json)
Hash identifier:          e5QI8zuY7761TaGfjSjT7NI7oSIl2les1Ndd02M0R5U=
Subject key identifier:   FF:76:9D:09:AB:75:59:BC:DF:B3:94:E1:85:C4:24:4C:BD:6E:95:31
Certificate issuer:       /CN=F36C6E7CAF/serialNumber=83DD126E5E585FFA93F5F1FF5DEEF6FFFDBBFFA6
Certificate serial:       059E
Authority key identifier: 83:DD:12:6E:5E:58:5F:FA:93:F5:F1:FF:5D:EE:F6:FF:FD:BB:FF:A6
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/g90Sbl5YX_qT9fH_Xe72__27_6Y.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C6E7C/2BD3F1B6590111EDA097F2F0F1222468/AD052FB4927011F19BEA12D0CE1D38B0.roa
Signing time:             Fri 07 Aug 2026 15:00:06 +0000
ROA not before:           Fri 07 Aug 2026 15:00:02 +0000
ROA not after:            Sat 30 Oct 2032 15:00:02 +0000
asID:                     328474
IP address blocks:        102.67.56.0/24 maxlen: 24
                          102.67.57.0/24 maxlen: 24
                          102.67.58.0/24 maxlen: 24
                          102.67.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C6E7C/2BD3F1B6590111EDA097F2F0F1222468/g90Sbl5YX_qT9fH_Xe72__27_6Y.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C6E7C/2BD3F1B6590111EDA097F2F0F1222468/g90Sbl5YX_qT9fH_Xe72__27_6Y.mft
                          rsync://rpki.afrinic.net/repository/afrinic/g90Sbl5YX_qT9fH_Xe72__27_6Y.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 02 Oct 2026 00:07:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1438 (0x59e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C6E7CAF, serialNumber=83DD126E5E585FFA93F5F1FF5DEEF6FFFDBBFFA6
        Validity
            Not Before: Aug  7 15:00:02 2026 GMT
            Not After : Oct 30 15:00:02 2032 GMT
        Subject: CN=6a75f2f6-04f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:98:c0:ec:d3:51:1a:88:9a:f4:f2:ac:bc:d5:
                    dd:43:45:38:59:89:1c:46:1f:cc:ab:bc:87:bf:53:
                    0a:f7:df:93:98:f1:c6:6c:4d:d6:ce:6b:34:cc:95:
                    9b:56:31:96:9e:57:05:31:80:9d:e1:e7:2c:74:c1:
                    92:a6:3f:84:8b:17:95:7a:71:7b:79:36:f1:c7:10:
                    5c:8d:e9:51:11:f5:9f:ab:77:81:d9:32:84:a3:ff:
                    34:2f:c7:dc:c7:de:7d:e6:ab:3e:8e:c0:6a:1f:0a:
                    e1:09:3d:33:ab:2e:46:9f:63:c4:2b:5f:31:29:91:
                    47:f4:84:ee:6f:9f:35:87:5f:bf:ab:b1:de:16:75:
                    b6:35:28:68:50:e4:18:ec:dd:02:15:b4:9f:1c:40:
                    1e:e9:13:db:a8:ae:23:dd:c1:8f:be:ae:38:dd:e6:
                    f3:90:04:f0:f0:8a:12:6a:5f:00:f2:d3:65:4c:f7:
                    92:46:3d:4d:c8:45:ac:0e:1d:52:d7:0e:1e:6f:6c:
                    79:26:a4:cd:0b:e2:aa:96:bd:85:ad:3b:bc:59:cc:
                    28:b2:3a:6f:84:d4:51:ea:da:68:eb:7c:7c:ca:b2:
                    9b:55:c9:f4:6c:83:9b:56:cc:70:85:fd:3f:9f:45:
                    5d:35:c8:29:08:f4:60:7a:2c:c7:dd:10:df:47:d0:
                    1b:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:76:9D:09:AB:75:59:BC:DF:B3:94:E1:85:C4:24:4C:BD:6E:95:31
            X509v3 Authority Key Identifier:
                keyid:83:DD:12:6E:5E:58:5F:FA:93:F5:F1:FF:5D:EE:F6:FF:FD:BB:FF:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C6E7C/2BD3F1B6590111EDA097F2F0F1222468/g90Sbl5YX_qT9fH_Xe72__27_6Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/g90Sbl5YX_qT9fH_Xe72__27_6Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C6E7C/2BD3F1B6590111EDA097F2F0F1222468/AD052FB4927011F19BEA12D0CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.67.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         00:1c:e2:98:70:63:41:9d:6b:6e:a3:e6:d9:43:bb:78:8b:f2:
         94:35:e0:bf:2d:8b:97:6c:50:3c:8c:43:04:14:2a:a5:fb:b5:
         f1:42:fc:c6:30:88:72:9a:cd:7b:76:69:5b:a7:2c:6c:62:7f:
         1b:1b:ad:87:20:f9:f0:d3:f1:1b:56:72:42:13:ef:2d:db:63:
         cb:34:e9:44:2e:65:4f:64:b9:2e:f6:09:cd:1c:00:60:c7:a6:
         4f:56:0d:28:fc:e5:c3:c0:e0:f2:64:62:31:2e:4c:13:b0:7c:
         a9:6d:f3:d6:2f:7b:e0:ec:e9:f8:58:3e:06:3e:f3:e3:2f:d2:
         f1:05:b0:ba:c2:e4:be:14:69:1e:e2:97:67:72:87:cc:3a:ec:
         2b:01:84:d2:35:ba:ef:7a:ef:1b:45:eb:53:75:c1:3c:8a:6e:
         df:e9:da:e0:97:f1:91:5d:ce:51:87:a8:07:fb:cc:0d:2c:c8:
         e4:e6:27:53:6f:1b:59:6e:d2:bf:18:e8:02:5b:41:9a:c7:08:
         2f:37:06:44:77:2e:80:12:54:e1:d8:81:c4:7c:b6:5e:6b:45:
         07:38:d1:f5:ae:45:b4:2e:69:b2:06:07:f0:cc:a5:42:31:3d:
         d8:3a:77:56:af:bb:6d:65:d7:8d:2b:aa:c5:81:a1:28:99:77:
         6a:6c:7e:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----