Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3636478/62BF4CD8A6D811F1B00C9AB3CE1D38B0/C6A2C518A6D811F1856314B4CE1D38B0.roa
File:                     C6A2C518A6D811F1856314B4CE1D38B0.roa (raw, json)
Hash identifier:          4C9iMvUNWW1N4xtxbTFo5PbizcYF9/fP8iKcmchDWL4=
Subject key identifier:   38:D8:D5:1A:DB:F1:54:D5:51:FD:58:92:6F:1A:E5:34:70:5F:20:9A
Certificate issuer:       /CN=F3636478AF/serialNumber=F3873BAF1EA845D4F1E3DD2E0CE536FF4ABE7E35
Certificate serial:       02
Authority key identifier: F3:87:3B:AF:1E:A8:45:D4:F1:E3:DD:2E:0C:E5:36:FF:4A:BE:7E:35
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/84c7rx6oRdTx490uDOU2_0q-fjU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3636478/62BF4CD8A6D811F1B00C9AB3CE1D38B0/C6A2C518A6D811F1856314B4CE1D38B0.roa
Signing time:             Wed 02 Sep 2026 14:15:40 +0000
ROA not before:           Wed 02 Sep 2026 14:15:36 +0000
ROA not after:            Wed 31 Dec 2036 14:15:36 +0000
asID:                     328790
IP address blocks:        102.221.60.0/22 maxlen: 24
                          2c0f:4200::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3636478/62BF4CD8A6D811F1B00C9AB3CE1D38B0/84c7rx6oRdTx490uDOU2_0q-fjU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3636478/62BF4CD8A6D811F1B00C9AB3CE1D38B0/84c7rx6oRdTx490uDOU2_0q-fjU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/84c7rx6oRdTx490uDOU2_0q-fjU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 20 Sep 2026 00:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3636478AF, serialNumber=F3873BAF1EA845D4F1E3DD2E0CE536FF4ABE7E35
        Validity
            Not Before: Sep  2 14:15:36 2026 GMT
            Not After : Dec 31 14:15:36 2036 GMT
        Subject: CN=6a982f8c-381e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:9f:79:82:af:25:ed:7c:3b:65:30:1f:54:16:
                    79:14:97:18:ed:6e:d6:ab:cb:2e:69:32:96:b2:a7:
                    5b:35:80:c0:3d:08:26:8b:40:e6:a1:b0:b6:86:cc:
                    a0:07:06:46:dc:f2:69:30:4e:8b:3f:d3:87:9c:a0:
                    60:94:80:36:cf:76:cb:16:30:a8:7e:10:d1:a7:20:
                    7d:55:73:a2:2b:b3:36:8d:a0:d3:a9:78:51:3f:be:
                    35:bd:fc:5b:31:2e:9b:54:11:9d:c5:07:c6:d0:60:
                    4e:12:b9:7a:12:03:18:45:05:75:64:2f:78:db:b0:
                    d3:e2:a2:d4:ee:0d:72:07:b0:a1:5b:c1:41:9d:b7:
                    49:fd:28:9c:90:85:f2:98:9a:a7:d6:08:3a:c3:45:
                    73:7f:ab:97:f6:2b:80:a1:ba:0d:cb:32:4a:92:ad:
                    22:22:bb:76:91:d7:3c:c6:3d:c8:4e:dd:97:b2:69:
                    0e:c8:60:0e:00:a0:12:ef:6a:74:59:fc:23:f1:fd:
                    a1:37:32:92:fa:e8:2f:c9:3e:01:4e:87:6c:3c:44:
                    17:74:ec:43:fc:1c:e9:fb:9e:9f:fe:5c:a5:9a:c8:
                    13:e5:f7:d6:1e:0a:db:32:7a:9e:6a:fe:f7:56:ec:
                    ae:de:32:7e:b0:16:2d:4d:73:a9:60:11:0a:49:5e:
                    06:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:D8:D5:1A:DB:F1:54:D5:51:FD:58:92:6F:1A:E5:34:70:5F:20:9A
            X509v3 Authority Key Identifier:
                keyid:F3:87:3B:AF:1E:A8:45:D4:F1:E3:DD:2E:0C:E5:36:FF:4A:BE:7E:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3636478/62BF4CD8A6D811F1B00C9AB3CE1D38B0/84c7rx6oRdTx490uDOU2_0q-fjU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/84c7rx6oRdTx490uDOU2_0q-fjU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3636478/62BF4CD8A6D811F1B00C9AB3CE1D38B0/C6A2C518A6D811F1856314B4CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.221.60.0/22
                IPv6:
                  2c0f:4200::/32

    Signature Algorithm: sha256WithRSAEncryption
         63:57:53:a3:50:7e:2c:4d:5b:c1:03:f5:c3:70:d6:14:fc:e0:
         7f:3a:f8:3e:02:62:df:f5:4e:bb:54:ba:d4:09:6a:bf:6c:70:
         e9:cf:e5:22:03:7f:59:d9:fd:8b:6a:52:3b:e3:e9:2b:d8:8e:
         3d:7b:f5:80:e2:9e:b0:b4:47:d8:7b:9e:8c:bd:a7:2a:a2:1e:
         8e:51:51:cd:a3:f6:85:66:74:e9:7d:5c:3b:4b:7d:97:1d:a9:
         95:8c:19:e5:43:d4:e8:5d:c8:32:8c:ab:d9:43:0b:96:ad:ae:
         2f:eb:65:b8:66:fd:32:7c:39:02:9c:a1:18:03:21:c4:63:82:
         ff:45:d4:f4:41:4a:65:01:49:e5:95:5a:c2:49:c9:2a:37:ca:
         b9:19:c1:51:b9:f9:71:42:e7:31:db:5f:2d:48:8f:95:a8:5f:
         b7:ed:1f:02:13:6d:26:58:b8:c1:53:cc:6d:57:38:cf:a3:1f:
         f3:74:89:d4:a1:d8:22:8b:71:f8:96:90:40:e4:8b:bf:a7:55:
         a2:f7:3a:b0:e5:dc:f4:8e:bf:a7:71:2b:d2:18:44:51:45:76:
         b7:f8:c2:3b:bd:6a:b6:3d:03:5a:04:b8:79:a2:f1:f0:04:59:
         cb:b3:82:b7:40:ab:9d:63:dd:9c:c9:28:0d:54:40:b6:86:aa:
         1c:98:62:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----