Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36253AF/0AFC7C20A1EA11F1AFBEFBE6CE1D38B0/18CBE222A55611F19B06A20FCF1D38B0.roa
File:                     18CBE222A55611F19B06A20FCF1D38B0.roa (raw, json)
Hash identifier:          Y/v2ClyhkOIG7F4OSbZa7J9cA3ZaMsV3B5MazTgro68=
Subject key identifier:   70:91:28:FC:12:7D:84:0A:29:27:0E:4D:E2:8D:E5:FA:E5:4A:0B:44
Certificate issuer:       /CN=F36253AFAF/serialNumber=A9E77FD66A1749D792D4BF6FEA24C097650DC4D3
Certificate serial:       06
Authority key identifier: A9:E7:7F:D6:6A:17:49:D7:92:D4:BF:6F:EA:24:C0:97:65:0D:C4:D3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/qed_1moXSdeS1L9v6iTAl2UNxNM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36253AF/0AFC7C20A1EA11F1AFBEFBE6CE1D38B0/18CBE222A55611F19B06A20FCF1D38B0.roa
Signing time:             Mon 31 Aug 2026 16:07:43 +0000
ROA not before:           Mon 31 Aug 2026 16:07:39 +0000
ROA not after:            Sat 31 Aug 2030 16:07:39 +0000
asID:                     329789
IP address blocks:        102.201.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36253AF/0AFC7C20A1EA11F1AFBEFBE6CE1D38B0/qed_1moXSdeS1L9v6iTAl2UNxNM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36253AF/0AFC7C20A1EA11F1AFBEFBE6CE1D38B0/qed_1moXSdeS1L9v6iTAl2UNxNM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/qed_1moXSdeS1L9v6iTAl2UNxNM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 20 Sep 2026 00:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36253AFAF, serialNumber=A9E77FD66A1749D792D4BF6FEA24C097650DC4D3
        Validity
            Not Before: Aug 31 16:07:39 2026 GMT
            Not After : Aug 31 16:07:39 2030 GMT
        Subject: CN=6a95a6cf-5170
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:43:79:29:bf:cc:2f:f3:68:ec:72:35:52:92:
                    b8:cb:3a:d8:4e:70:4b:f0:ff:d2:c0:42:6c:17:c4:
                    4c:01:88:b2:36:7d:b8:3c:b0:96:8a:f1:cd:77:63:
                    4c:10:8f:fe:b2:4f:a5:51:7a:27:a8:7f:d4:9c:4a:
                    e8:e1:d2:ab:5f:e0:67:90:0e:cc:e8:fa:14:fa:df:
                    0b:ed:d8:62:02:a6:0c:63:e0:a7:cc:ab:dd:f2:14:
                    6e:bb:0e:b1:4e:47:71:2b:2e:77:34:ae:a4:11:35:
                    a0:a5:54:8f:c8:11:a5:d7:de:f1:7a:a8:39:07:33:
                    91:5d:a4:37:11:6e:c3:f0:ea:a7:12:eb:49:5d:dc:
                    27:8c:8d:b2:03:fd:e6:cb:59:be:c6:7f:4b:7a:f3:
                    4c:8e:cb:5e:fc:60:a7:ed:2d:92:56:01:e0:d9:af:
                    da:25:26:5d:69:9a:e7:97:19:21:91:a3:b0:b5:2f:
                    6d:fa:ff:fe:7b:bb:52:01:3d:c0:65:d7:1b:b7:d0:
                    fa:a7:c3:ac:c7:18:ab:f5:2c:b8:a3:67:48:58:cb:
                    ed:12:73:13:f7:4c:a5:3e:70:b3:dd:74:8e:1e:9e:
                    c5:bf:42:0f:2d:b4:73:8c:7d:07:75:e6:67:31:e7:
                    52:86:78:69:2f:d7:e7:c7:2f:9d:32:be:48:58:b5:
                    33:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:91:28:FC:12:7D:84:0A:29:27:0E:4D:E2:8D:E5:FA:E5:4A:0B:44
            X509v3 Authority Key Identifier:
                keyid:A9:E7:7F:D6:6A:17:49:D7:92:D4:BF:6F:EA:24:C0:97:65:0D:C4:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36253AF/0AFC7C20A1EA11F1AFBEFBE6CE1D38B0/qed_1moXSdeS1L9v6iTAl2UNxNM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/qed_1moXSdeS1L9v6iTAl2UNxNM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36253AF/0AFC7C20A1EA11F1AFBEFBE6CE1D38B0/18CBE222A55611F19B06A20FCF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.201.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:cf:42:da:48:93:67:13:f5:be:d4:f3:96:12:bd:3c:b3:08:
         c5:81:42:17:7d:57:a0:9d:18:a4:ec:c8:f5:31:82:dd:8c:fa:
         e1:02:45:72:ed:0b:c9:1d:15:19:4c:02:e2:e6:5d:01:16:bd:
         0e:a6:c4:b1:a8:f9:f0:a5:a1:07:aa:c1:8d:35:54:84:3b:f3:
         7f:13:46:d1:de:6d:14:f1:6b:bc:d4:9c:01:24:57:3d:c6:23:
         38:90:40:ab:66:87:83:9d:c2:14:c3:dc:36:90:00:b3:e3:21:
         c7:51:8c:7a:fc:09:ee:e5:e4:23:02:e5:0d:3a:58:fd:e6:e8:
         e0:e3:1b:1c:9b:8b:17:13:ab:bf:ea:9a:c2:d4:06:9f:e5:4b:
         2d:72:bc:be:95:06:27:0f:e3:cf:34:56:ab:90:51:c4:63:55:
         5b:bb:ea:59:b6:d4:09:ff:d0:52:f1:92:18:46:c3:36:fd:51:
         08:f6:a8:45:43:d0:f3:f9:38:40:50:e6:ae:d2:89:4c:21:85:
         f6:37:b5:d0:50:16:13:7b:4b:88:89:4c:5f:ba:d3:ea:a0:9b:
         0d:19:ad:18:03:d0:35:8b:ee:e4:b2:1f:da:8d:3f:0c:9b:01:
         cd:80:2d:55:e1:87:55:78:d5:b3:b1:53:2e:92:d7:ee:d0:ff:
         33:ad:f1:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----