Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F365A480/1C47C3FCACDC11F1BFBE07A8CE1D38B0/7A60025AACDD11F1B69343B0CE1D38B0.roa
File:                     7A60025AACDD11F1B69343B0CE1D38B0.roa (raw, json)
Hash identifier:          YVJASzPQEQ6oASYVtspRouoqFyoGMfLPtGbO3Nq1LYY=
Subject key identifier:   C2:03:51:3B:B5:7E:1E:A0:78:77:45:6C:8F:19:81:2A:26:73:9E:5C
Certificate issuer:       /CN=F365A480AF/serialNumber=23036C94EFF48313795DAEA00C1299E2B4E4E293
Certificate serial:       02
Authority key identifier: 23:03:6C:94:EF:F4:83:13:79:5D:AE:A0:0C:12:99:E2:B4:E4:E2:93
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/IwNslO_0gxN5Xa6gDBKZ4rTk4pM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365A480/1C47C3FCACDC11F1BFBE07A8CE1D38B0/7A60025AACDD11F1B69343B0CE1D38B0.roa
Signing time:             Thu 10 Sep 2026 06:04:27 +0000
ROA not before:           Thu 10 Sep 2026 06:04:23 +0000
ROA not after:            Wed 10 Sep 2036 06:04:23 +0000
asID:                     37109
IP address blocks:        41.217.220.0/22 maxlen: 24
                          2c0f:f878::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365A480/1C47C3FCACDC11F1BFBE07A8CE1D38B0/IwNslO_0gxN5Xa6gDBKZ4rTk4pM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365A480/1C47C3FCACDC11F1BFBE07A8CE1D38B0/IwNslO_0gxN5Xa6gDBKZ4rTk4pM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/IwNslO_0gxN5Xa6gDBKZ4rTk4pM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 20 Sep 2026 00:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365A480AF, serialNumber=23036C94EFF48313795DAEA00C1299E2B4E4E293
        Validity
            Not Before: Sep 10 06:04:23 2026 GMT
            Not After : Sep 10 06:04:23 2036 GMT
        Subject: CN=6aa2486b-410f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:6f:de:09:f1:f0:b6:9e:70:04:c4:ba:c9:d3:
                    d4:d1:de:60:53:82:66:a7:20:fd:35:d2:4e:80:06:
                    df:f9:32:ae:01:a3:29:94:7b:6e:50:eb:b4:de:b9:
                    17:8b:9f:a0:f7:73:58:7d:0c:56:e6:4e:49:8e:05:
                    66:96:45:4d:13:9f:01:2a:13:d5:8d:56:93:a5:7d:
                    df:8e:0d:7a:f0:ac:9d:5d:c9:22:79:99:f0:fa:4a:
                    76:3c:5a:87:a0:92:7b:4d:b0:ca:bd:a4:7b:7c:88:
                    2a:1d:3c:50:60:ff:f6:b5:b1:54:de:13:77:a9:82:
                    54:0e:a3:cf:f5:e7:58:9f:6a:1c:53:67:90:6c:6c:
                    3e:d5:4a:56:8d:23:4b:90:f7:ba:56:e3:c0:85:d8:
                    4d:e5:d0:b3:c0:cc:c3:80:05:89:aa:e6:c2:d8:76:
                    63:86:b5:55:d5:a6:0c:6c:dc:c7:89:b5:0e:38:f1:
                    70:53:f0:13:fa:b6:57:8c:a1:76:a8:8d:71:72:91:
                    dc:88:43:f9:aa:19:aa:2c:93:1e:3a:c3:6d:98:98:
                    42:d0:42:9f:0e:be:49:0c:a5:99:b5:16:91:65:80:
                    47:f3:05:b4:a3:da:61:8a:9a:3b:dc:81:d3:03:b8:
                    4b:c8:9b:67:6b:7c:a3:d9:e2:85:33:7c:5b:36:4e:
                    5e:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:03:51:3B:B5:7E:1E:A0:78:77:45:6C:8F:19:81:2A:26:73:9E:5C
            X509v3 Authority Key Identifier:
                keyid:23:03:6C:94:EF:F4:83:13:79:5D:AE:A0:0C:12:99:E2:B4:E4:E2:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365A480/1C47C3FCACDC11F1BFBE07A8CE1D38B0/IwNslO_0gxN5Xa6gDBKZ4rTk4pM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/IwNslO_0gxN5Xa6gDBKZ4rTk4pM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365A480/1C47C3FCACDC11F1BFBE07A8CE1D38B0/7A60025AACDD11F1B69343B0CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.217.220.0/22
                IPv6:
                  2c0f:f878::/32

    Signature Algorithm: sha256WithRSAEncryption
         32:e0:ed:04:88:c1:4e:b8:d7:65:f9:0b:1b:e1:33:d3:ce:31:
         0b:1c:19:c7:f2:a4:89:19:7b:cf:7f:ae:da:8e:e6:6e:63:47:
         0a:2e:76:57:cf:e2:3d:c5:8c:39:85:42:30:b5:53:ea:37:56:
         39:a1:66:d1:75:49:95:e6:74:9a:60:49:66:7c:69:7c:e6:3d:
         2b:38:a0:4c:e9:a5:53:59:4b:17:2f:42:ec:23:f1:d5:da:2e:
         d6:9f:5f:6b:20:5e:90:4f:24:e8:fa:1d:73:98:1f:3d:8e:f2:
         6a:6b:95:d0:36:17:c2:85:e8:7c:e2:e6:29:c9:82:01:12:70:
         0e:0a:94:9f:dc:db:7f:b8:25:97:0d:5d:38:b0:ba:b4:67:87:
         59:f9:18:7e:8e:14:ea:e6:d9:d1:1b:48:3d:28:a4:24:5b:11:
         63:3c:30:6e:6a:aa:e1:8b:12:70:1d:a5:6c:7a:8e:46:7a:df:
         98:b4:94:0b:b3:96:d7:e7:d5:9a:71:ff:ef:fb:4b:5e:20:ba:
         73:05:8d:23:d6:c6:f2:47:54:c6:20:c7:5c:d0:ea:a9:52:68:
         72:ec:79:af:89:04:d5:b0:db:33:21:c1:ee:78:4e:f8:ce:c0:
         26:95:f5:e4:e7:7a:f9:89:a6:60:af:f9:59:6f:d3:c9:69:84:
         f4:63:02:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----