Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36724C2/BFDAB754AB8811F183655414CF1D38B0/02BDACE2AC0C11F18CCB55B6CE1D38B0.roa
File:                     02BDACE2AC0C11F18CCB55B6CE1D38B0.roa (raw, json)
Hash identifier:          ZJxQZhAPpyjE5Cpr5EhF2ZIhWdEWEvyDGLHqbKq4xh4=
Subject key identifier:   51:95:95:44:06:B5:8A:FC:97:1C:15:F1:21:F1:7E:38:0C:1C:9B:07
Certificate issuer:       /CN=F36724C2AF/serialNumber=AC5DF5304809BB783EB962126958A00786E8F67C
Certificate serial:       08
Authority key identifier: AC:5D:F5:30:48:09:BB:78:3E:B9:62:12:69:58:A0:07:86:E8:F6:7C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/rF31MEgJu3g-uWISaVigB4bo9nw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36724C2/BFDAB754AB8811F183655414CF1D38B0/02BDACE2AC0C11F18CCB55B6CE1D38B0.roa
Signing time:             Wed 09 Sep 2026 05:05:01 +0000
ROA not before:           Wed 09 Sep 2026 05:04:57 +0000
ROA not after:            Thu 09 Sep 2027 05:04:57 +0000
asID:                     15399
IP address blocks:        102.214.156.0/22 maxlen: 22
                          102.214.156.0/22 maxlen: 23
                          102.214.156.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36724C2/BFDAB754AB8811F183655414CF1D38B0/rF31MEgJu3g-uWISaVigB4bo9nw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36724C2/BFDAB754AB8811F183655414CF1D38B0/rF31MEgJu3g-uWISaVigB4bo9nw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/rF31MEgJu3g-uWISaVigB4bo9nw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 20 Sep 2026 00:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8 (0x8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36724C2AF, serialNumber=AC5DF5304809BB783EB962126958A00786E8F67C
        Validity
            Not Before: Sep  9 05:04:57 2026 GMT
            Not After : Sep  9 05:04:57 2027 GMT
        Subject: CN=6aa0e8fd-aaca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:22:b3:50:d5:0b:5a:2e:31:9e:21:08:c0:33:
                    10:4e:78:48:0b:26:67:6f:de:3c:ed:c6:76:32:ee:
                    28:e2:93:d8:b0:d2:59:fb:74:e5:26:de:9a:ef:6c:
                    bd:cc:a1:23:6f:de:12:a4:67:11:b8:3f:e8:f3:ce:
                    67:c7:6a:01:e9:5c:46:37:db:7c:05:53:83:c3:46:
                    40:a6:90:d6:63:8c:c5:10:9e:9a:e9:d1:f3:20:91:
                    e7:a6:84:ca:ce:f9:b8:2c:01:b4:30:ee:dc:38:5c:
                    ea:25:6c:ff:c2:c8:46:00:ff:7a:3f:90:75:20:67:
                    c8:1d:9b:2d:3b:2a:dd:5e:50:e0:dc:97:39:6b:5f:
                    46:6e:bb:f1:b1:7d:7c:52:6e:35:4a:5a:a9:08:f9:
                    a9:4e:fa:f8:c1:7e:96:6d:7a:de:c5:dd:25:32:b5:
                    59:97:1c:ab:5c:35:31:e3:d7:74:d5:ca:45:3b:a0:
                    fc:d4:86:7a:a9:7b:ac:7d:da:d3:d0:80:5c:92:a3:
                    51:78:7c:0d:92:30:4b:05:32:1e:78:8e:4e:8e:24:
                    ed:d2:60:17:13:29:38:7e:51:b5:fe:e5:b2:95:05:
                    dc:66:c1:33:18:12:51:ac:f4:34:8d:92:4b:c6:a3:
                    91:56:9c:e0:af:77:a0:f1:58:2a:bd:6b:a6:4b:bf:
                    26:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:95:95:44:06:B5:8A:FC:97:1C:15:F1:21:F1:7E:38:0C:1C:9B:07
            X509v3 Authority Key Identifier:
                keyid:AC:5D:F5:30:48:09:BB:78:3E:B9:62:12:69:58:A0:07:86:E8:F6:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36724C2/BFDAB754AB8811F183655414CF1D38B0/rF31MEgJu3g-uWISaVigB4bo9nw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rF31MEgJu3g-uWISaVigB4bo9nw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36724C2/BFDAB754AB8811F183655414CF1D38B0/02BDACE2AC0C11F18CCB55B6CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.214.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c6:8a:f2:04:56:07:20:01:6c:24:60:3e:e1:d3:64:80:6e:e6:
         20:28:18:20:60:44:f8:48:e9:ff:ce:32:ae:82:d4:05:ed:1c:
         bb:61:44:5e:6d:4b:48:55:a5:30:9a:90:13:87:31:e6:ba:d3:
         33:bf:59:4f:7a:fb:a9:08:20:02:cb:2a:78:b7:d0:c1:d8:9a:
         9d:57:48:fe:08:e0:61:98:ea:9e:79:2e:3c:8d:68:db:91:fa:
         7b:ee:b3:9d:a9:46:73:c7:9c:56:17:be:77:0c:e8:37:37:b4:
         95:e5:22:e3:50:80:17:ab:f5:72:d2:27:5b:bf:e7:c3:9b:e2:
         0b:35:11:a8:8d:65:15:bf:a6:a3:8b:92:89:1c:b4:12:0c:95:
         6b:28:df:d9:ab:b2:c7:ae:5f:0c:b7:9b:a1:6f:59:36:14:62:
         98:ac:e9:b3:b1:c3:16:93:68:d9:33:30:90:5f:d7:3e:4d:e5:
         34:83:06:77:97:78:6f:f2:19:00:e7:43:ed:f4:82:13:c3:ff:
         40:c4:43:02:bc:bf:b9:6f:a4:7a:a9:6e:43:ec:56:b8:64:1e:
         21:1a:d6:73:23:57:f1:46:49:a3:24:62:a4:92:d4:71:d2:07:
         2f:cc:df:9f:84:71:a8:f9:fd:66:81:f1:05:5e:d6:ed:c7:73:
         16:78:2d:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----