Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F363A60B/2C1C5274B7FF11F1BEEBDDECCE1D38B0/15A51482B81C11F1AE1731A5CE1D38B0.roa
File:                     15A51482B81C11F1AE1731A5CE1D38B0.roa (raw, json)
Hash identifier:          T2wwwn8+41/rkFD40r8o+MS7FjshlLRYKMPhiEVx5DE=
Subject key identifier:   AC:1F:94:C4:08:C8:FA:CC:4E:F2:02:F1:C9:86:02:03:30:18:FC:29
Certificate issuer:       /CN=F363A60BAF/serialNumber=3C6AB222FFABF73CBA25FEC371AB07153A15C482
Certificate serial:       04
Authority key identifier: 3C:6A:B2:22:FF:AB:F7:3C:BA:25:FE:C3:71:AB:07:15:3A:15:C4:82
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PGqyIv-r9zy6Jf7DcasHFToVxII.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363A60B/2C1C5274B7FF11F1BEEBDDECCE1D38B0/15A51482B81C11F1AE1731A5CE1D38B0.roa
Signing time:             Thu 24 Sep 2026 13:30:19 +0000
ROA not before:           Thu 24 Sep 2026 13:30:15 +0000
ROA not after:            Wed 24 Sep 2036 13:30:15 +0000
asID:                     37508
IP address blocks:        102.214.208.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363A60B/2C1C5274B7FF11F1BEEBDDECCE1D38B0/PGqyIv-r9zy6Jf7DcasHFToVxII.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363A60B/2C1C5274B7FF11F1BEEBDDECCE1D38B0/PGqyIv-r9zy6Jf7DcasHFToVxII.mft
                          rsync://rpki.afrinic.net/repository/afrinic/PGqyIv-r9zy6Jf7DcasHFToVxII.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 05:57:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363A60BAF, serialNumber=3C6AB222FFABF73CBA25FEC371AB07153A15C482
        Validity
            Not Before: Sep 24 13:30:15 2026 GMT
            Not After : Sep 24 13:30:15 2036 GMT
        Subject: CN=6ab525eb-4cf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:89:5b:40:71:da:34:44:7d:9f:ee:87:cf:8d:
                    c1:db:98:f1:46:21:8c:ae:06:17:9c:39:d1:79:53:
                    e1:d2:d3:c6:bf:2b:cb:6b:02:35:91:a9:53:20:94:
                    8e:65:c6:b7:12:8b:cb:c9:ad:5d:22:be:36:3c:1e:
                    39:b8:3f:4d:c7:8d:aa:2d:85:1a:9a:02:b1:20:e7:
                    ef:2a:e5:d2:c9:17:72:49:6f:19:25:82:42:fd:e6:
                    fa:6d:53:e6:92:3d:5f:ba:a8:34:f7:9d:e1:3c:5c:
                    aa:2d:00:74:f5:b1:9b:83:6c:a0:25:c1:1b:22:83:
                    e3:84:52:c9:6c:b6:15:07:44:95:2e:92:fd:38:0e:
                    10:e1:b5:a8:d7:6c:d3:ff:86:f6:a4:38:ce:83:a9:
                    68:a3:81:8b:4e:3b:de:82:e5:83:44:d5:19:bb:42:
                    9d:ad:bd:83:2d:37:01:bf:92:29:49:b7:3e:8a:81:
                    0b:9d:b5:67:fc:30:2e:dc:82:d2:ea:05:3d:f1:c3:
                    1e:91:3b:f7:27:cc:a3:5d:0c:6a:91:f5:f9:59:d2:
                    ca:36:c5:5d:f1:bf:7b:c4:f1:6d:9b:03:be:fd:5d:
                    50:a4:77:5a:56:e5:61:15:19:dc:16:35:3b:a2:49:
                    80:d7:65:28:f5:0b:02:b8:a9:ed:9f:bf:59:9f:4c:
                    bb:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:1F:94:C4:08:C8:FA:CC:4E:F2:02:F1:C9:86:02:03:30:18:FC:29
            X509v3 Authority Key Identifier:
                keyid:3C:6A:B2:22:FF:AB:F7:3C:BA:25:FE:C3:71:AB:07:15:3A:15:C4:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363A60B/2C1C5274B7FF11F1BEEBDDECCE1D38B0/PGqyIv-r9zy6Jf7DcasHFToVxII.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PGqyIv-r9zy6Jf7DcasHFToVxII.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363A60B/2C1C5274B7FF11F1BEEBDDECCE1D38B0/15A51482B81C11F1AE1731A5CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.214.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ca:7d:f6:71:6c:c0:53:a7:21:95:4b:08:38:5e:9b:b6:27:1e:
         32:95:17:ef:19:00:76:ea:7c:57:29:4c:b4:ed:76:23:b2:f7:
         16:0f:6f:77:6f:db:01:c6:13:9e:07:f0:51:bd:9c:cc:4f:c3:
         c5:9b:b2:86:9e:9b:48:bc:f7:2a:da:bd:5b:42:b7:1b:4c:b4:
         0d:ce:5a:d2:20:f2:62:08:0f:f7:4a:65:82:0f:d0:9c:b9:0e:
         af:e5:81:02:43:97:46:ae:36:67:0b:f7:95:3a:3c:92:01:24:
         30:98:fd:af:6a:c3:62:21:f4:5b:7e:91:8b:a9:22:46:64:9e:
         dd:9d:84:d6:7b:6c:11:af:15:35:b1:c9:67:8e:62:d7:15:1a:
         ed:3b:c7:6b:8e:bc:d6:07:bc:78:20:c0:18:4a:50:3d:48:fd:
         b1:8b:63:90:0b:da:77:e0:b7:12:44:3d:ac:88:0c:10:b3:0d:
         fd:6e:1e:28:a6:87:4b:31:9c:f9:50:ad:fe:ce:0a:2b:b3:af:
         49:be:1f:e5:5f:68:5a:3e:b7:e2:c6:bb:09:d1:a7:42:e1:f0:
         22:99:cc:1a:85:be:45:29:f1:e4:d5:ad:bd:dc:e6:a9:47:4c:
         09:6a:5c:20:0c:5b:44:ce:97:4c:0f:74:45:8e:95:cc:3f:b6:
         fd:0e:c1:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----