Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36549B1/DF788C98561311E5B1A0E360F8AEA228/4B47C07C902511F1855BC0E1CE1D38B0.roa
File:                     4B47C07C902511F1855BC0E1CE1D38B0.roa (raw, json)
Hash identifier:          LMHsEgxxHhrC80yn+QmfSbx1JlHBlW1LGksapRgWHNU=
Subject key identifier:   A1:BB:62:F0:96:A2:5D:E8:E2:10:B5:80:15:EE:27:0D:C0:F2:DF:E6
Certificate issuer:       /CN=F36549B1AF/serialNumber=9F17383EB667E547BA00CFB7F914F4284C5849CC
Certificate serial:       1014
Authority key identifier: 9F:17:38:3E:B6:67:E5:47:BA:00:CF:B7:F9:14:F4:28:4C:58:49:CC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/nxc4PrZn5Ue6AM-3-RT0KExYScw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36549B1/DF788C98561311E5B1A0E360F8AEA228/4B47C07C902511F1855BC0E1CE1D38B0.roa
Signing time:             Tue 04 Aug 2026 16:55:28 +0000
ROA not before:           Tue 04 Aug 2026 16:55:24 +0000
ROA not after:            Wed 01 Dec 2049 16:55:24 +0000
asID:                     329234
IP address blocks:        196.49.100.0/24 maxlen: 24
                          2001:43f8:691::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36549B1/DF788C98561311E5B1A0E360F8AEA228/nxc4PrZn5Ue6AM-3-RT0KExYScw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36549B1/DF788C98561311E5B1A0E360F8AEA228/nxc4PrZn5Ue6AM-3-RT0KExYScw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/nxc4PrZn5Ue6AM-3-RT0KExYScw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 23 Aug 2026 00:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4116 (0x1014)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36549B1AF, serialNumber=9F17383EB667E547BA00CFB7F914F4284C5849CC
        Validity
            Not Before: Aug  4 16:55:24 2026 GMT
            Not After : Dec  1 16:55:24 2049 GMT
        Subject: CN=6a721980-e236
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a4:63:08:84:47:37:7b:33:24:bc:58:0d:b2:
                    11:7a:14:ba:70:0b:24:f9:8b:c5:e4:5f:3f:62:a7:
                    1a:a2:92:26:10:3f:63:70:ba:ac:80:77:3b:ca:8a:
                    2f:ee:9a:f9:9d:82:7e:b4:38:c5:f4:36:b2:31:70:
                    11:18:b3:6a:e8:37:b4:1c:1b:9d:35:55:f8:9e:3b:
                    f6:80:85:f6:55:8c:cc:bd:1f:bb:e9:3a:02:b3:ef:
                    31:8e:54:40:3b:36:1d:50:99:f2:07:42:2d:7c:81:
                    e8:aa:5a:e2:55:72:32:e3:c0:f1:55:a1:c1:72:f0:
                    85:09:ff:09:fa:d7:eb:ac:41:54:d9:11:17:57:b6:
                    92:1c:be:59:ca:ac:ef:07:aa:cb:95:91:fa:b9:fe:
                    3c:4a:a5:0c:bd:27:1d:8c:b9:12:7c:8c:ca:18:1f:
                    c2:b2:45:61:37:92:51:90:0b:8c:e4:0c:1f:2d:ee:
                    85:ca:00:34:a3:07:92:91:64:60:d0:88:ef:30:78:
                    ed:39:c7:15:42:3a:f1:cf:57:1b:1d:71:25:ba:94:
                    d0:78:f3:0b:f1:7a:71:98:6e:9e:f7:37:17:05:77:
                    31:99:80:78:d6:e5:f9:94:a6:cc:e6:cb:d7:9f:eb:
                    2d:68:77:59:26:8a:11:a5:29:f8:56:ed:f7:25:64:
                    1d:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:BB:62:F0:96:A2:5D:E8:E2:10:B5:80:15:EE:27:0D:C0:F2:DF:E6
            X509v3 Authority Key Identifier:
                keyid:9F:17:38:3E:B6:67:E5:47:BA:00:CF:B7:F9:14:F4:28:4C:58:49:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36549B1/DF788C98561311E5B1A0E360F8AEA228/nxc4PrZn5Ue6AM-3-RT0KExYScw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/nxc4PrZn5Ue6AM-3-RT0KExYScw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36549B1/DF788C98561311E5B1A0E360F8AEA228/4B47C07C902511F1855BC0E1CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.49.100.0/24
                IPv6:
                  2001:43f8:691::/48

    Signature Algorithm: sha256WithRSAEncryption
         29:9e:a8:54:4f:d7:62:88:0e:ba:df:62:e4:ed:c6:eb:db:cc:
         d1:2b:64:9d:27:f3:07:98:3e:1b:92:90:fe:7b:e7:9c:45:30:
         33:35:c1:55:23:b0:8b:4e:91:ed:cc:c4:f2:95:39:c3:d5:cd:
         32:e2:43:70:76:5d:4e:cd:cf:46:e4:a9:ed:09:b7:17:8c:18:
         2c:df:02:29:c7:d2:18:89:88:d7:8d:15:ed:3d:6d:c7:87:39:
         37:e4:f2:3b:63:83:57:d4:19:5b:7a:5e:41:d0:38:1d:90:db:
         fa:b9:f2:23:5e:28:1b:c5:f6:a8:8b:de:19:c1:3f:8c:28:fb:
         24:36:ff:eb:f2:df:55:3f:00:2a:56:a5:62:f5:73:64:0a:59:
         e9:5b:f4:fa:fa:e9:c9:27:f5:b2:e0:7f:6a:52:9b:ec:9e:e1:
         06:7f:98:fb:a2:83:0a:4a:c2:b4:6a:d0:6c:b1:2a:95:d0:4a:
         8d:1d:a7:23:55:20:ef:59:47:b6:49:c7:fe:32:04:a0:45:2f:
         64:75:2c:6f:a1:8e:80:24:c4:ad:e2:53:48:63:9f:c4:f6:ac:
         b1:74:e0:f3:87:57:09:26:d4:dd:00:3d:bb:e8:00:55:06:c9:
         2d:2e:ed:69:a4:57:5d:db:20:78:8a:5d:a7:1c:2e:40:65:68:
         e6:bf:b7:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----