Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F366FE6C/B3374424131B11EBA4121A39F8AEA228/48022F76970D11F19B84D7C7CE1D38B0.roa
File:                     48022F76970D11F19B84D7C7CE1D38B0.roa (raw, json)
Hash identifier:          GPb+oEUk29+9AvfORiOrSL4nV5hr5La8BYm8p5oMGu0=
Subject key identifier:   AE:B9:CB:93:2A:BF:B3:E7:FF:BA:53:1E:C8:95:2F:19:B6:86:1F:B4
Certificate issuer:       /CN=F366FE6CAF/serialNumber=4A1FE76B4DFB0173B6F31B7F36A5A982E08D9C19
Certificate serial:       08D0
Authority key identifier: 4A:1F:E7:6B:4D:FB:01:73:B6:F3:1B:7F:36:A5:A9:82:E0:8D:9C:19
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Sh_na037AXO28xt_NqWpguCNnBk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366FE6C/B3374424131B11EBA4121A39F8AEA228/48022F76970D11F19B84D7C7CE1D38B0.roa
Signing time:             Thu 13 Aug 2026 11:51:13 +0000
ROA not before:           Thu 13 Aug 2026 11:51:09 +0000
ROA not after:            Sun 31 Aug 2036 11:51:09 +0000
asID:                     208809
IP address blocks:        102.207.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366FE6C/B3374424131B11EBA4121A39F8AEA228/Sh_na037AXO28xt_NqWpguCNnBk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366FE6C/B3374424131B11EBA4121A39F8AEA228/Sh_na037AXO28xt_NqWpguCNnBk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Sh_na037AXO28xt_NqWpguCNnBk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 12 Sep 2026 01:55:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2256 (0x8d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366FE6CAF, serialNumber=4A1FE76B4DFB0173B6F31B7F36A5A982E08D9C19
        Validity
            Not Before: Aug 13 11:51:09 2026 GMT
            Not After : Aug 31 11:51:09 2036 GMT
        Subject: CN=6a7dafb1-786a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ec:8d:d6:7c:ed:74:eb:41:11:4b:43:09:5c:
                    a1:36:d5:fc:fc:00:20:9b:5b:53:73:ba:98:9d:19:
                    d2:0a:3b:77:f3:24:4b:b0:5a:26:98:9d:f1:2d:f5:
                    7b:23:cb:3e:f1:5b:a0:90:1c:ea:46:05:82:5f:b8:
                    b6:17:2d:ed:ce:6f:0d:89:96:73:d0:7c:d5:a0:90:
                    55:9f:a9:bb:9b:80:25:c6:6e:bc:c9:91:b8:dd:f2:
                    8d:ad:c6:8c:50:9c:89:0b:08:6e:ab:7b:db:31:9d:
                    ee:82:8e:df:1d:7b:78:29:67:e4:12:4d:41:b4:ac:
                    fd:1b:04:4f:12:c4:b9:82:da:3d:f3:66:35:08:07:
                    c1:2f:16:5d:72:42:fb:9d:cd:76:ea:a5:4d:67:96:
                    e9:a8:a9:c9:05:47:61:f9:34:89:8d:1d:5a:99:e8:
                    4b:04:d0:0e:9d:62:41:f5:4b:de:da:3c:40:82:46:
                    79:02:af:e8:98:cd:af:46:02:32:ee:db:2e:45:0e:
                    91:0a:6b:d7:59:d1:4f:01:8e:46:64:dd:91:52:10:
                    c4:d1:d0:4e:47:42:ab:cd:10:4b:4e:4e:7b:f5:b0:
                    fe:72:eb:f8:2f:0c:c2:ff:d8:71:53:90:f5:ef:67:
                    c1:98:ce:42:b1:b8:21:06:f9:cb:29:38:80:49:31:
                    c2:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:B9:CB:93:2A:BF:B3:E7:FF:BA:53:1E:C8:95:2F:19:B6:86:1F:B4
            X509v3 Authority Key Identifier:
                keyid:4A:1F:E7:6B:4D:FB:01:73:B6:F3:1B:7F:36:A5:A9:82:E0:8D:9C:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366FE6C/B3374424131B11EBA4121A39F8AEA228/Sh_na037AXO28xt_NqWpguCNnBk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Sh_na037AXO28xt_NqWpguCNnBk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366FE6C/B3374424131B11EBA4121A39F8AEA228/48022F76970D11F19B84D7C7CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.207.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:09:5b:34:4c:fd:66:55:12:37:f8:e2:c3:53:9c:28:e0:c3:
         13:7f:85:81:b1:de:0e:ce:e2:ba:bf:a6:e0:71:33:4a:f4:cf:
         5c:04:a2:93:7e:a0:17:18:99:24:59:ee:7a:60:cc:03:6a:ac:
         e4:6f:ed:bb:19:96:0b:19:c6:a5:b4:45:51:15:58:bf:ce:18:
         bb:ea:3c:99:18:89:e0:5d:95:bb:8a:54:e3:d5:a9:54:6f:0b:
         36:0e:06:d9:de:04:33:97:9f:28:1a:ae:fe:62:11:58:6c:7f:
         19:34:7b:cf:b6:a4:1a:f9:bf:1f:4d:fb:1b:6c:db:bb:a8:ae:
         fe:f7:62:d7:9d:68:8b:e4:14:5b:53:07:52:d7:03:3a:49:de:
         88:5a:98:67:9c:0c:15:81:4d:f9:35:d5:5a:83:41:ab:02:0b:
         ab:8a:09:4c:81:05:49:29:ee:5d:b5:24:bf:4b:c6:c3:26:b2:
         c8:7d:01:e8:8c:30:34:8b:fe:c0:92:c9:e2:58:ce:da:0a:6f:
         22:cf:b8:56:a0:c3:bc:6f:8e:26:d2:35:81:1e:85:da:fa:af:
         77:02:f9:26:d2:59:a2:6a:30:0e:3c:af:73:60:3c:d1:14:a5:
         2b:ae:12:2d:35:5a:80:bb:89:01:07:b6:88:2d:4c:76:e1:9c:
         4a:01:e6:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----