Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36549B1/DF788C98561311E5B1A0E360F8AEA228/63911742901F11F18E1340BDCE1D38B0.roa
File:                     63911742901F11F18E1340BDCE1D38B0.roa (raw, json)
Hash identifier:          VoYbPhNHZSIv7q3e/cQMepOJ/LmJ7pp8vT7io8/IP9M=
Subject key identifier:   94:29:F3:41:A5:7F:48:49:FC:BB:2A:32:F8:11:35:15:DA:1A:E2:8B
Certificate issuer:       /CN=F36549B1AF/serialNumber=9F17383EB667E547BA00CFB7F914F4284C5849CC
Certificate serial:       1001
Authority key identifier: 9F:17:38:3E:B6:67:E5:47:BA:00:CF:B7:F9:14:F4:28:4C:58:49:CC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/nxc4PrZn5Ue6AM-3-RT0KExYScw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36549B1/DF788C98561311E5B1A0E360F8AEA228/63911742901F11F18E1340BDCE1D38B0.roa
Signing time:             Tue 04 Aug 2026 16:13:12 +0000
ROA not before:           Tue 04 Aug 2026 16:13:08 +0000
ROA not after:            Wed 01 Dec 2049 16:13:08 +0000
asID:                     0
IP address blocks:        2001:43f8:1f0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36549B1/DF788C98561311E5B1A0E360F8AEA228/nxc4PrZn5Ue6AM-3-RT0KExYScw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36549B1/DF788C98561311E5B1A0E360F8AEA228/nxc4PrZn5Ue6AM-3-RT0KExYScw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/nxc4PrZn5Ue6AM-3-RT0KExYScw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 23 Aug 2026 00:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4097 (0x1001)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36549B1AF, serialNumber=9F17383EB667E547BA00CFB7F914F4284C5849CC
        Validity
            Not Before: Aug  4 16:13:08 2026 GMT
            Not After : Dec  1 16:13:08 2049 GMT
        Subject: CN=6a720f98-e707
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:44:56:d3:67:cf:e7:82:d3:5d:91:04:68:47:
                    d2:b9:d2:ce:32:26:c1:73:a0:79:91:16:9a:92:f2:
                    06:ac:cd:b7:79:dc:e5:e9:12:bf:a5:ea:83:fb:40:
                    99:7d:f3:a0:a9:06:29:7b:16:ed:75:27:98:07:f3:
                    f0:48:4b:ac:75:dc:15:45:72:2f:b5:7d:86:b1:c7:
                    3e:8d:73:a7:00:d5:f5:60:49:c5:c3:4d:ac:e4:d3:
                    39:3f:be:8c:97:3a:2e:6f:f4:87:bf:b6:d4:cc:dc:
                    a4:b6:58:97:32:ca:4b:f5:93:b5:05:44:51:14:7b:
                    99:10:9b:26:62:53:35:1e:bd:a5:70:48:4e:fc:a7:
                    e7:d5:76:08:72:4e:e1:ea:d4:f4:d9:63:c5:4a:45:
                    36:07:86:09:76:86:93:a2:e8:fe:db:0e:f1:7b:c8:
                    91:12:34:77:8a:f2:45:af:54:6d:3d:26:cc:41:48:
                    9a:16:ca:11:56:3e:54:df:db:78:c8:9f:be:89:dd:
                    e1:d2:64:b6:7c:01:e6:9c:18:bf:61:ba:c3:37:38:
                    c0:f0:ce:63:1c:89:77:c5:9c:3b:a5:5b:20:23:40:
                    e3:24:52:b5:ea:52:ed:03:a2:71:06:8a:bd:09:2a:
                    ec:12:4f:1f:cf:48:b1:dd:86:71:e7:32:8c:45:d0:
                    43:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:29:F3:41:A5:7F:48:49:FC:BB:2A:32:F8:11:35:15:DA:1A:E2:8B
            X509v3 Authority Key Identifier:
                keyid:9F:17:38:3E:B6:67:E5:47:BA:00:CF:B7:F9:14:F4:28:4C:58:49:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36549B1/DF788C98561311E5B1A0E360F8AEA228/nxc4PrZn5Ue6AM-3-RT0KExYScw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/nxc4PrZn5Ue6AM-3-RT0KExYScw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36549B1/DF788C98561311E5B1A0E360F8AEA228/63911742901F11F18E1340BDCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:43f8:1f0::/48

    Signature Algorithm: sha256WithRSAEncryption
         96:ea:96:d1:36:d6:de:b2:f3:f9:ac:05:9e:f5:6d:4f:4a:73:
         5a:bf:be:02:15:f7:21:46:c1:95:dd:e1:7e:91:c1:8a:3f:d5:
         3d:f6:09:31:b2:c5:40:ec:21:29:76:32:7d:4b:6b:d4:68:88:
         29:9f:57:22:4d:75:db:99:e4:98:8c:10:58:ac:48:79:15:2f:
         05:66:58:03:67:9e:16:a4:f5:7f:97:0f:cc:15:2d:c7:88:7e:
         44:df:1a:1d:8d:4b:4b:5b:54:8b:a8:b2:82:a9:9b:52:4b:dd:
         d0:76:dd:c8:5c:7e:53:24:9a:27:7f:c2:09:2c:43:66:60:b5:
         63:e7:43:6d:7b:c2:7f:2e:02:71:9a:d2:46:7b:34:90:94:1f:
         b0:37:6d:cb:94:d6:f1:a8:9e:ab:30:f6:15:0a:60:ae:d6:66:
         30:72:c7:86:17:cf:ce:68:78:ad:b0:4b:79:6f:1e:7f:52:f8:
         80:25:3f:27:3c:a8:75:bd:89:b1:87:b7:9e:0c:7b:91:e5:68:
         20:7d:18:b2:df:72:f8:c3:c3:b2:07:f2:47:60:3c:b7:8d:b0:
         5b:93:ca:60:9c:9c:83:75:84:07:d3:7f:e5:56:02:47:aa:3f:
         f0:48:c9:65:25:8a:06:d6:69:de:ae:bc:3e:ee:63:d6:bc:23:
         f3:fd:e8:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----