Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/31E310CCB5C411F1AC8E7ED9CE1D38B0.roa
File:                     31E310CCB5C411F1AC8E7ED9CE1D38B0.roa (raw, json)
Hash identifier:          iWVWVjP77LsNaKIjHC8sf05lelaswMjolhlVLp8YwMA=
Subject key identifier:   DC:38:0F:26:68:A6:A5:26:D7:A0:86:AA:DD:17:AC:C6:1E:4A:91:60
Certificate issuer:       /CN=F36F0628AF/serialNumber=8605D7599A0402F70EC2F258D6C16BD2E4E8D1FE
Certificate serial:       082D
Authority key identifier: 86:05:D7:59:9A:04:02:F7:0E:C2:F2:58:D6:C1:6B:D2:E4:E8:D1:FE
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/hgXXWZoEAvcOwvJY1sFr0uTo0f4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/31E310CCB5C411F1AC8E7ED9CE1D38B0.roa
Signing time:             Mon 21 Sep 2026 13:56:08 +0000
ROA not before:           Mon 21 Sep 2026 13:56:04 +0000
ROA not after:            Sun 21 Sep 2036 13:56:04 +0000
asID:                     7018
IP address blocks:        196.44.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/hgXXWZoEAvcOwvJY1sFr0uTo0f4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/hgXXWZoEAvcOwvJY1sFr0uTo0f4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/hgXXWZoEAvcOwvJY1sFr0uTo0f4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 25 Sep 2026 00:08:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2093 (0x82d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F0628AF, serialNumber=8605D7599A0402F70EC2F258D6C16BD2E4E8D1FE
        Validity
            Not Before: Sep 21 13:56:04 2026 GMT
            Not After : Sep 21 13:56:04 2036 GMT
        Subject: CN=6ab13778-45b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ba:69:f8:67:28:5e:72:12:c9:3a:36:65:00:
                    9c:94:a8:71:e1:88:8c:50:08:23:3e:30:77:9f:34:
                    ed:f9:28:40:cc:c4:dd:cb:d4:01:d7:c5:36:a8:45:
                    40:9a:d0:f1:9a:d7:10:e5:79:9e:89:ea:70:24:77:
                    81:8b:f3:c7:1e:4e:7c:f0:86:da:e7:4c:23:e8:91:
                    3d:ab:82:ba:55:98:c7:d2:86:99:61:63:10:62:f1:
                    1a:18:c5:63:64:29:aa:ce:a9:1f:6a:10:7d:c8:47:
                    e6:dc:fc:3a:f5:00:9c:4e:ca:a6:5b:a5:63:f2:be:
                    c8:ff:80:e7:93:95:be:9c:07:66:a3:a7:c3:40:b9:
                    c1:09:de:d3:67:de:cd:5a:e3:6d:7d:f1:26:28:72:
                    e3:b7:b5:53:78:00:d2:31:af:1f:0d:95:94:80:d8:
                    f2:18:7e:ef:56:69:37:b8:76:fa:a6:14:2d:e8:0b:
                    d4:f2:09:fc:e6:c4:5a:71:ba:85:44:c7:07:83:79:
                    aa:22:d2:76:d9:e7:0c:21:53:99:80:32:c9:0a:10:
                    0f:b4:b8:6c:c3:45:11:b1:e4:17:a4:da:50:48:f6:
                    ed:91:05:f3:8e:46:93:58:9d:ef:92:14:5a:48:74:
                    03:67:fb:68:1c:6b:ba:4b:97:76:3c:1a:8b:a6:0d:
                    d2:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:38:0F:26:68:A6:A5:26:D7:A0:86:AA:DD:17:AC:C6:1E:4A:91:60
            X509v3 Authority Key Identifier:
                keyid:86:05:D7:59:9A:04:02:F7:0E:C2:F2:58:D6:C1:6B:D2:E4:E8:D1:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/hgXXWZoEAvcOwvJY1sFr0uTo0f4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hgXXWZoEAvcOwvJY1sFr0uTo0f4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/31E310CCB5C411F1AC8E7ED9CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.44.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:a7:b4:e2:29:95:fb:b3:b3:71:ac:f1:ac:27:47:4e:cd:09:
         76:86:f9:ca:6e:9d:1a:39:90:6a:20:14:ad:84:d3:3d:bc:6b:
         1a:e8:64:56:f4:78:b0:47:f8:02:32:e9:27:98:93:1d:48:77:
         a3:02:7e:e3:1f:62:dc:d8:69:df:18:33:cf:f1:89:2b:a6:28:
         b8:b2:28:52:5a:4e:b3:e6:b5:06:bf:94:03:56:3c:2a:a0:0f:
         0d:07:66:00:23:df:9b:8b:37:30:36:02:93:59:d0:00:8d:70:
         79:52:2f:e8:42:76:58:4b:81:a2:fb:ff:6d:1e:48:83:ef:ac:
         ba:77:28:97:5b:aa:5f:f6:66:3c:38:b3:ce:7f:be:12:7d:2a:
         f7:a3:b5:f6:a9:1b:9f:98:c5:a2:fd:3c:55:88:a9:56:f1:d8:
         bd:9e:51:60:b9:d8:ca:bf:f7:05:56:5a:70:0e:8c:7d:38:6c:
         fd:36:6b:66:1f:19:b6:b3:c1:8c:22:a1:4b:b8:2a:f6:b9:9e:
         1c:8a:96:bf:86:7d:95:b8:b2:40:41:59:78:05:5b:3e:12:05:
         f1:36:65:04:a0:ae:07:a4:05:70:47:85:8c:5a:2b:3e:4f:d2:
         79:d3:08:12:a4:1e:65:0d:f3:42:c0:d1:19:eb:ad:dc:c1:1d:
         e9:01:30:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----