Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36724C2/A9AE6FF2AB8811F1A44B0014CF1D38B0/3D1A9894AB8C11F1800375AACE1D38B0.roa
File:                     3D1A9894AB8C11F1800375AACE1D38B0.roa (raw, json)
Hash identifier:          GBs5ED+xGJq6GzmK2fLQrnQSM1dciJmOEyU5PpNU6Io=
Subject key identifier:   43:C3:12:47:2B:38:A1:DB:6E:E9:B4:18:FD:D4:37:BC:80:9B:FB:B2
Certificate issuer:       /CN=F36724C2RI/serialNumber=796DEA3867CB93873E797F142A8EB9C5488C9780
Certificate serial:       02
Authority key identifier: 79:6D:EA:38:67:CB:93:87:3E:79:7F:14:2A:8E:B9:C5:48:8C:97:80
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/eW3qOGfLk4c-eX8UKo65xUiMl4A.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36724C2/A9AE6FF2AB8811F1A44B0014CF1D38B0/3D1A9894AB8C11F1800375AACE1D38B0.roa
Signing time:             Tue 08 Sep 2026 13:50:24 +0000
ROA not before:           Tue 08 Sep 2026 13:50:19 +0000
ROA not after:            Wed 08 Sep 2027 13:50:19 +0000
asID:                     15399
IP address blocks:        62.8.64.0/19 maxlen: 20
                          62.8.64.0/19 maxlen: 21
                          62.8.64.0/19 maxlen: 22
                          62.8.64.0/19 maxlen: 23
                          62.8.64.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36724C2/A9AE6FF2AB8811F1A44B0014CF1D38B0/eW3qOGfLk4c-eX8UKo65xUiMl4A.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36724C2/A9AE6FF2AB8811F1A44B0014CF1D38B0/eW3qOGfLk4c-eX8UKo65xUiMl4A.mft
                          rsync://rpki.afrinic.net/repository/ripe/eW3qOGfLk4c-eX8UKo65xUiMl4A.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 12 Sep 2026 00:45:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36724C2RI, serialNumber=796DEA3867CB93873E797F142A8EB9C5488C9780
        Validity
            Not Before: Sep  8 13:50:19 2026 GMT
            Not After : Sep  8 13:50:19 2027 GMT
        Subject: CN=6aa012a0-64b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:6c:db:e4:02:bd:c2:92:e5:98:9d:94:e4:b6:
                    e2:ba:9a:6c:1f:c3:07:d6:78:85:1d:85:d6:ac:5f:
                    f2:8f:6d:2f:c9:02:76:66:c8:cb:22:1d:0f:de:36:
                    a3:fb:18:bd:b7:85:c1:85:1d:20:d2:e8:63:a4:29:
                    86:97:a0:05:d2:6c:d3:74:5b:8d:cf:21:2b:75:c9:
                    72:38:f7:9a:4e:03:b3:3f:4e:8e:03:7c:0c:01:15:
                    94:34:3f:90:8f:6b:b5:71:cb:5a:2a:f8:f2:2b:ef:
                    35:66:6d:de:fc:53:49:44:2c:56:7b:74:e2:c4:0c:
                    64:64:a8:e4:5d:32:49:67:f5:4c:d6:88:3a:e9:8a:
                    b6:c1:c9:75:2d:51:8d:c0:1b:fb:a1:ed:d7:90:69:
                    b2:44:ee:2b:cc:c5:c5:43:ec:4e:fb:4f:4d:a3:27:
                    f6:73:94:3a:18:7d:bb:7d:6e:4b:81:a8:93:9b:09:
                    91:cc:58:4c:76:42:4c:f7:6c:a1:c3:f6:83:a8:89:
                    32:1f:b7:f4:52:37:35:5c:f6:4f:04:66:db:81:cb:
                    76:e2:82:23:72:76:1f:6d:b5:eb:e3:ec:a6:37:63:
                    6b:8d:87:82:01:f6:b7:52:d9:0c:db:ac:07:13:70:
                    29:1d:34:41:45:18:a2:36:0b:1e:24:aa:b6:94:e9:
                    10:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:C3:12:47:2B:38:A1:DB:6E:E9:B4:18:FD:D4:37:BC:80:9B:FB:B2
            X509v3 Authority Key Identifier:
                keyid:79:6D:EA:38:67:CB:93:87:3E:79:7F:14:2A:8E:B9:C5:48:8C:97:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36724C2/A9AE6FF2AB8811F1A44B0014CF1D38B0/eW3qOGfLk4c-eX8UKo65xUiMl4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/eW3qOGfLk4c-eX8UKo65xUiMl4A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36724C2/A9AE6FF2AB8811F1A44B0014CF1D38B0/3D1A9894AB8C11F1800375AACE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.8.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         ac:ba:57:ab:73:c7:b8:0e:7e:ec:71:e0:20:50:cf:de:9e:91:
         51:6f:1d:c9:8d:83:ad:5e:68:08:9d:d4:df:06:76:7f:20:f2:
         64:38:4d:23:e1:23:ce:9d:c9:8f:e1:95:bc:29:83:d6:d8:16:
         83:1e:3c:ef:2c:de:bf:55:6a:38:75:a1:b2:0c:52:49:2f:24:
         dd:24:30:58:17:25:00:8c:e2:10:d1:ba:f7:c1:28:ff:3e:0f:
         d4:b6:8f:2c:c7:df:36:57:95:d2:f8:8e:c1:44:62:f0:a0:e3:
         ea:9a:54:9b:9c:8a:d9:1d:cb:17:c6:c9:7e:c2:ff:b1:ec:d1:
         e8:a6:88:fc:75:4e:81:46:5e:12:b8:84:31:b2:3d:98:67:a3:
         2e:58:c8:82:08:82:c4:1d:a5:3c:92:85:69:cf:13:68:05:50:
         7c:f0:63:39:48:98:41:31:3d:7c:88:bd:29:36:35:27:ec:b7:
         04:81:43:4d:74:97:ad:94:98:d0:fc:06:3f:c6:22:71:68:55:
         8e:47:92:83:e9:c1:4a:be:83:d4:ba:ee:11:d9:bc:65:09:23:
         9e:03:a0:c8:00:1f:40:94:86:01:89:30:91:72:3c:6b:dd:a9:
         9b:7b:62:33:95:c5:45:6e:70:bc:b0:6a:8a:ad:10:75:3d:c2:
         8c:65:e5:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----