Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36C8371/EC0AE8747AFA11E988A3C33CF8AEA228/F9ED1F02A63F11F1A345EA10CF1D38B0.roa
File:                     F9ED1F02A63F11F1A345EA10CF1D38B0.roa (raw, json)
Hash identifier:          dNQffKIfgpu5UvBEJZj10ngrY8Soenp4AD4Dzs6iXEI=
Subject key identifier:   62:68:A8:29:8A:79:33:09:F5:8E:F6:49:A4:7D:36:31:34:E6:9F:D9
Certificate issuer:       /CN=F36C8371AF/serialNumber=7B965B64C3E724B93FC00B186E15E35CED535DC7
Certificate serial:       0AE7
Authority key identifier: 7B:96:5B:64:C3:E7:24:B9:3F:C0:0B:18:6E:15:E3:5C:ED:53:5D:C7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/e5ZbZMPnJLk_wAsYbhXjXO1TXcc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C8371/EC0AE8747AFA11E988A3C33CF8AEA228/F9ED1F02A63F11F1A345EA10CF1D38B0.roa
Signing time:             Tue 01 Sep 2026 20:01:53 +0000
ROA not before:           Tue 01 Sep 2026 20:01:49 +0000
ROA not after:            Mon 01 Sep 2036 20:01:49 +0000
asID:                     327804
IP address blocks:        2c0f:f050::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C8371/EC0AE8747AFA11E988A3C33CF8AEA228/e5ZbZMPnJLk_wAsYbhXjXO1TXcc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C8371/EC0AE8747AFA11E988A3C33CF8AEA228/e5ZbZMPnJLk_wAsYbhXjXO1TXcc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/e5ZbZMPnJLk_wAsYbhXjXO1TXcc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 11 Oct 2026 01:20:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2791 (0xae7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C8371AF, serialNumber=7B965B64C3E724B93FC00B186E15E35CED535DC7
        Validity
            Not Before: Sep  1 20:01:49 2026 GMT
            Not After : Sep  1 20:01:49 2036 GMT
        Subject: CN=6a972f31-73e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:8a:eb:d2:87:c0:43:f1:75:9f:7d:73:c2:fe:
                    8c:c2:f9:52:19:11:e1:90:b9:74:3c:74:83:02:da:
                    27:07:ba:fb:a7:36:57:db:c8:dd:8f:aa:88:9c:e4:
                    1c:08:2c:d2:74:cb:53:68:6b:84:b9:a4:b3:fa:35:
                    45:b7:04:3a:95:a6:8b:18:82:80:7b:1c:38:5e:bd:
                    c0:41:d1:9b:f0:92:69:9a:24:dd:e7:1a:6f:71:a5:
                    31:e4:a4:65:5d:ca:7c:51:b5:c6:c5:20:4f:0e:cb:
                    35:33:bd:99:f6:33:07:43:da:24:5e:7b:64:53:d2:
                    ab:c0:74:e8:ed:08:80:06:c4:a4:cb:a8:c9:71:3c:
                    45:22:a1:73:79:cb:18:b4:d4:83:de:fd:a7:88:1a:
                    d9:ca:3c:c8:ee:ca:36:df:ea:7a:69:2d:de:9a:ed:
                    8e:25:74:b6:77:a1:31:42:f4:c1:2f:e9:ca:a7:49:
                    39:b2:0c:07:03:08:26:e2:91:52:93:d5:dc:fe:55:
                    6f:79:1a:f4:8e:55:d8:39:be:ae:e5:b6:68:67:47:
                    8a:70:c7:0e:16:74:b7:08:36:3c:e7:41:a5:f1:2a:
                    f7:47:b1:62:ab:32:31:0c:a3:b5:f5:f4:86:9a:1f:
                    34:5b:43:6d:72:17:13:24:41:8c:7c:2b:51:4e:13:
                    c9:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:68:A8:29:8A:79:33:09:F5:8E:F6:49:A4:7D:36:31:34:E6:9F:D9
            X509v3 Authority Key Identifier:
                keyid:7B:96:5B:64:C3:E7:24:B9:3F:C0:0B:18:6E:15:E3:5C:ED:53:5D:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C8371/EC0AE8747AFA11E988A3C33CF8AEA228/e5ZbZMPnJLk_wAsYbhXjXO1TXcc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/e5ZbZMPnJLk_wAsYbhXjXO1TXcc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C8371/EC0AE8747AFA11E988A3C33CF8AEA228/F9ED1F02A63F11F1A345EA10CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:f050::/32

    Signature Algorithm: sha256WithRSAEncryption
         ab:0e:f7:71:a1:ca:5c:6f:1e:62:54:de:b3:6d:14:91:ea:e1:
         e5:ac:af:bd:0f:de:d0:a6:f0:20:f7:85:14:f7:7d:73:0c:24:
         02:21:6b:65:b5:36:f6:84:bb:83:e5:31:ac:71:df:ae:d5:60:
         a4:a8:cd:cd:10:97:2e:c5:94:a4:bb:17:8a:82:60:20:72:15:
         ff:5d:73:e7:04:c5:39:8e:d4:f9:e4:5b:f9:77:fb:b8:39:f3:
         29:25:bb:73:05:8e:92:dd:be:b7:34:77:d0:13:52:12:20:d1:
         d5:27:4d:b3:a4:cb:34:82:a0:8b:d1:2b:d5:64:9d:a9:48:d3:
         7d:d4:6a:5c:25:c7:f0:33:4a:15:27:49:3b:d1:33:9a:d2:e0:
         0e:20:fa:b7:08:b6:a0:40:c6:d7:15:fd:54:2a:69:78:7a:69:
         be:29:47:3d:43:54:bc:9a:53:f1:45:d4:f6:c9:52:a2:37:c9:
         f8:38:5c:ae:06:90:64:7b:d4:54:6d:90:42:47:e7:2f:fc:ae:
         58:8f:33:04:08:5f:8f:5b:d2:d1:79:39:8b:e2:0f:5f:a8:c0:
         dc:21:07:bf:a2:c2:89:2a:26:f3:fe:90:1b:e6:71:2c:29:10:
         47:e7:d9:36:92:ef:38:a7:59:0d:2b:fb:9f:ff:ea:27:d9:a8:
         db:ca:eb:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----