Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3630A7F/CEC2CC6A12B111EABD58233BF8AEA228/AA540066926011F1A332FEEECE1D38B0.roa
File:                     AA540066926011F1A332FEEECE1D38B0.roa (raw, json)
Hash identifier:          uESD6pgA/ktgYvMCFOgYx2X8JsFNCARuhLdvxt7oFjU=
Subject key identifier:   1E:91:CF:92:B7:18:8F:5D:09:FD:5F:BD:D5:BE:A0:21:90:F4:45:BC
Certificate issuer:       /CN=F3630A7FAF/serialNumber=4A387F125AC9D2189D36B1BE9A146016E8A9B5C5
Certificate serial:       09CC
Authority key identifier: 4A:38:7F:12:5A:C9:D2:18:9D:36:B1:BE:9A:14:60:16:E8:A9:B5:C5
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Sjh_ElrJ0hidNrG-mhRgFuiptcU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3630A7F/CEC2CC6A12B111EABD58233BF8AEA228/AA540066926011F1A332FEEECE1D38B0.roa
Signing time:             Fri 07 Aug 2026 13:05:30 +0000
ROA not before:           Fri 07 Aug 2026 13:05:26 +0000
ROA not after:            Tue 20 Nov 2029 13:05:26 +0000
asID:                     36924
IP address blocks:        102.22.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3630A7F/CEC2CC6A12B111EABD58233BF8AEA228/Sjh_ElrJ0hidNrG-mhRgFuiptcU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3630A7F/CEC2CC6A12B111EABD58233BF8AEA228/Sjh_ElrJ0hidNrG-mhRgFuiptcU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Sjh_ElrJ0hidNrG-mhRgFuiptcU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 20 Sep 2026 00:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2508 (0x9cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3630A7FAF, serialNumber=4A387F125AC9D2189D36B1BE9A146016E8A9B5C5
        Validity
            Not Before: Aug  7 13:05:26 2026 GMT
            Not After : Nov 20 13:05:26 2029 GMT
        Subject: CN=6a75d81a-0abd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:48:58:34:0f:d9:d2:84:87:88:56:54:a7:25:
                    ed:07:b2:9c:d9:cb:ab:60:c1:02:2e:52:01:53:ae:
                    75:7b:5d:24:3a:37:e0:95:64:2b:7a:e3:a2:fb:ca:
                    1b:0f:c5:b5:df:81:c9:73:97:81:aa:9b:e1:b5:14:
                    78:2f:59:c8:b5:c8:a3:3c:41:90:8e:86:54:8f:2c:
                    fe:63:0b:7b:1f:18:08:51:88:54:b4:61:c7:41:5d:
                    94:8c:c2:1f:b7:3f:ee:87:85:64:75:fb:b1:87:f5:
                    61:7e:21:29:1e:2a:03:3f:a3:71:e6:1a:09:dc:d8:
                    6e:24:c1:e6:a6:1c:d6:b4:62:a1:de:27:56:0b:6f:
                    e9:76:c1:dd:7a:cf:46:9a:67:49:58:8e:b2:6b:05:
                    75:19:f9:cb:d7:b5:a8:b3:f0:72:b9:12:44:3d:6a:
                    1f:93:79:c1:23:5e:5e:b5:04:61:0b:63:0a:2f:fa:
                    b4:b2:6d:1c:82:f5:0a:bc:49:ea:5b:44:67:e5:e9:
                    35:fe:73:23:08:83:5b:5c:44:9e:42:a7:29:7a:ab:
                    2a:72:3f:71:34:e4:85:fd:1c:8d:54:57:9f:a4:d7:
                    ea:83:29:3b:9e:fa:62:6a:80:e4:f8:4a:80:fd:70:
                    bf:f0:b8:de:90:d6:fc:8d:4c:84:38:28:53:fa:ea:
                    0c:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:91:CF:92:B7:18:8F:5D:09:FD:5F:BD:D5:BE:A0:21:90:F4:45:BC
            X509v3 Authority Key Identifier:
                keyid:4A:38:7F:12:5A:C9:D2:18:9D:36:B1:BE:9A:14:60:16:E8:A9:B5:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3630A7F/CEC2CC6A12B111EABD58233BF8AEA228/Sjh_ElrJ0hidNrG-mhRgFuiptcU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Sjh_ElrJ0hidNrG-mhRgFuiptcU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3630A7F/CEC2CC6A12B111EABD58233BF8AEA228/AA540066926011F1A332FEEECE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.22.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         64:13:a1:c5:7f:cd:e6:25:03:f7:56:78:51:24:52:9c:2e:58:
         4e:e4:cf:34:87:6f:62:23:86:c5:dc:d4:de:e1:7e:d1:72:0e:
         fc:7b:23:70:0d:d7:95:2f:83:c4:c7:dc:de:24:3e:10:04:7b:
         2f:27:e4:87:ad:51:57:e4:e5:37:48:32:4f:bd:db:ce:12:a1:
         66:26:b5:1d:98:ef:f0:be:dd:01:40:98:8b:ad:ef:4f:98:78:
         00:1d:8e:ed:ed:33:93:09:50:64:dd:b2:d9:b3:46:ca:5a:e8:
         7d:2c:b7:e2:99:1f:5a:a9:d4:2a:b0:65:fc:87:da:ec:76:1e:
         c4:05:5e:a1:43:20:75:2f:69:79:37:29:6b:f2:cc:8b:64:3b:
         51:15:8c:cc:58:89:d8:ec:0f:08:75:75:79:8b:35:12:cf:15:
         2d:dc:ad:56:05:2f:2b:ff:61:3b:be:13:f2:b5:eb:5d:a4:d8:
         0b:75:9c:15:5e:32:af:d1:fe:d2:8d:ac:0a:9d:65:7b:88:ce:
         94:37:03:eb:21:05:73:64:12:6e:1b:02:89:ed:c7:b0:b6:1d:
         5f:df:cb:7e:35:80:c4:85:86:cf:21:b0:bc:18:57:ee:dc:ff:
         d5:dc:99:be:8f:a5:98:c4:a6:0d:39:3e:b2:01:8a:1e:cb:fd:
         62:56:30:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----