Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F364054B/D2E0B50CC30111F1AE7A3CD9CE1D38B0/DB8C4328C30211F19ED010E0CE1D38B0.roa
File:                     DB8C4328C30211F19ED010E0CE1D38B0.roa (raw, json)
Hash identifier:          xdlsGtxPsW3bMdBPjmSmNFX+4Sth7jGVQC4L29kMJPA=
Subject key identifier:   04:D5:1E:AB:B3:3C:5C:85:16:74:6B:77:5C:68:AB:A0:1C:5B:6F:CA
Certificate issuer:       /CN=F364054BAF/serialNumber=77C3A703F26B859A15F4F07045A032DB8E56A0EF
Certificate serial:       02
Authority key identifier: 77:C3:A7:03:F2:6B:85:9A:15:F4:F0:70:45:A0:32:DB:8E:56:A0:EF
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/d8OnA_JrhZoV9PBwRaAy245WoO8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364054B/D2E0B50CC30111F1AE7A3CD9CE1D38B0/DB8C4328C30211F19ED010E0CE1D38B0.roa
Signing time:             Thu 08 Oct 2026 10:27:27 +0000
ROA not before:           Thu 08 Oct 2026 10:27:22 +0000
ROA not after:            Wed 08 Oct 2036 10:27:22 +0000
asID:                     327757
IP address blocks:        154.73.36.0/22 maxlen: 22
                          2c0f:f728::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364054B/D2E0B50CC30111F1AE7A3CD9CE1D38B0/d8OnA_JrhZoV9PBwRaAy245WoO8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364054B/D2E0B50CC30111F1AE7A3CD9CE1D38B0/d8OnA_JrhZoV9PBwRaAy245WoO8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/d8OnA_JrhZoV9PBwRaAy245WoO8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 00:08:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364054BAF, serialNumber=77C3A703F26B859A15F4F07045A032DB8E56A0EF
        Validity
            Not Before: Oct  8 10:27:22 2026 GMT
            Not After : Oct  8 10:27:22 2036 GMT
        Subject: CN=6ac7700f-b0ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:b2:4d:fa:39:b5:ed:38:0d:4d:2a:ed:c8:4b:
                    c2:0b:e3:85:6b:08:d7:a7:40:98:0a:e9:d0:c3:20:
                    14:41:ff:98:e2:a0:e5:3b:66:6e:92:a5:57:a1:f2:
                    cc:a4:1c:2c:73:a3:dd:3a:72:fd:2a:a2:fe:b6:49:
                    d9:c7:39:ee:bb:3b:9d:79:84:62:d9:03:7c:56:f5:
                    a9:00:0b:0d:da:a8:a1:99:17:0a:2f:44:99:09:cd:
                    2f:12:0b:76:d4:ce:43:12:cc:d1:66:9d:94:a2:23:
                    c8:28:f7:9d:87:60:9a:34:b0:e7:82:43:c9:3e:8f:
                    47:ef:f9:a6:7c:50:b2:d6:34:f9:0b:77:55:58:a9:
                    dc:59:f6:0d:2e:73:3b:81:9d:fe:a7:ee:73:a7:ee:
                    33:7f:3d:ce:2d:31:4f:9e:61:f3:60:f3:5b:8d:1d:
                    ea:af:a1:b2:b3:d9:29:57:d5:2a:54:ed:72:44:79:
                    f9:56:a8:1e:34:6d:bc:f2:e0:db:81:8c:2d:0a:43:
                    88:a6:a0:3f:79:9a:7b:0d:ca:89:95:65:9e:a4:e8:
                    8d:2f:cf:a5:ca:85:31:e8:92:02:70:eb:72:a1:83:
                    f1:c2:9b:3e:12:3d:e8:b5:22:3a:bd:ed:e3:94:6a:
                    55:db:df:0e:7d:8c:15:2e:5f:bf:9d:4a:32:5a:d6:
                    c0:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:D5:1E:AB:B3:3C:5C:85:16:74:6B:77:5C:68:AB:A0:1C:5B:6F:CA
            X509v3 Authority Key Identifier:
                keyid:77:C3:A7:03:F2:6B:85:9A:15:F4:F0:70:45:A0:32:DB:8E:56:A0:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364054B/D2E0B50CC30111F1AE7A3CD9CE1D38B0/d8OnA_JrhZoV9PBwRaAy245WoO8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/d8OnA_JrhZoV9PBwRaAy245WoO8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364054B/D2E0B50CC30111F1AE7A3CD9CE1D38B0/DB8C4328C30211F19ED010E0CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.73.36.0/22
                IPv6:
                  2c0f:f728::/32

    Signature Algorithm: sha256WithRSAEncryption
         68:22:5b:24:2c:04:f4:1a:02:19:c6:fa:0d:a8:30:24:2b:48:
         e2:ef:bf:1c:1d:1b:c8:ca:49:5e:42:92:92:85:b3:92:c9:84:
         c1:3c:a6:7a:f4:b7:0b:22:5c:72:bc:10:b1:e7:14:18:9f:77:
         89:08:6f:66:2f:1a:c1:d0:f1:c9:b6:08:0c:b4:df:13:fd:8d:
         3c:3c:8a:80:ed:12:c3:69:5a:3d:d2:c3:8f:7b:c6:29:f4:c1:
         16:80:7f:36:3a:c5:4b:ff:0b:58:c6:ba:d8:e7:74:52:16:41:
         05:87:66:1c:a3:03:c3:e4:48:c3:8e:68:7b:8e:a4:c7:25:b4:
         6f:20:58:c3:c9:40:bf:e8:36:76:db:1c:81:c1:e1:73:15:65:
         21:d0:ca:68:26:fd:d0:23:cc:6e:3e:4b:9c:e9:bf:fd:82:ec:
         66:e3:ab:a8:35:f2:d9:67:86:e3:31:bb:49:46:6d:d6:ed:23:
         ee:20:86:d7:7d:19:fe:4a:ca:9b:15:40:5b:25:06:95:b9:b4:
         4b:2c:2b:ea:11:c3:bf:a0:1f:15:96:b8:d4:4c:9a:f9:85:cc:
         28:ab:bf:97:23:0f:37:ae:52:ad:4f:e3:a9:ca:14:60:11:42:
         f2:8c:1c:86:bc:7c:b5:c9:74:03:06:0d:fe:97:df:cf:58:ee:
         8d:3d:ef:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----