Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36724C2/BFDAB754AB8811F183655414CF1D38B0/5AB25916AC1111F195B323DACE1D38B0.roa
File:                     5AB25916AC1111F195B323DACE1D38B0.roa (raw, json)
Hash identifier:          +9/jrIbSnE0/2tZF25LOF3ZMEm0UfdRvKf7Wywlyq2g=
Subject key identifier:   68:AF:C0:30:D5:E5:9E:64:F0:C8:4E:B7:10:82:79:7A:D4:07:AA:48
Certificate issuer:       /CN=F36724C2AF/serialNumber=AC5DF5304809BB783EB962126958A00786E8F67C
Certificate serial:       0C
Authority key identifier: AC:5D:F5:30:48:09:BB:78:3E:B9:62:12:69:58:A0:07:86:E8:F6:7C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/rF31MEgJu3g-uWISaVigB4bo9nw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36724C2/BFDAB754AB8811F183655414CF1D38B0/5AB25916AC1111F195B323DACE1D38B0.roa
Signing time:             Wed 09 Sep 2026 05:43:16 +0000
ROA not before:           Wed 09 Sep 2026 05:43:12 +0000
ROA not after:            Thu 09 Sep 2027 05:43:12 +0000
asID:                     15399
IP address blocks:        102.219.248.0/22 maxlen: 22
                          102.219.248.0/22 maxlen: 23
                          102.219.248.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36724C2/BFDAB754AB8811F183655414CF1D38B0/rF31MEgJu3g-uWISaVigB4bo9nw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36724C2/BFDAB754AB8811F183655414CF1D38B0/rF31MEgJu3g-uWISaVigB4bo9nw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/rF31MEgJu3g-uWISaVigB4bo9nw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 20 Sep 2026 00:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12 (0xc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36724C2AF, serialNumber=AC5DF5304809BB783EB962126958A00786E8F67C
        Validity
            Not Before: Sep  9 05:43:12 2026 GMT
            Not After : Sep  9 05:43:12 2027 GMT
        Subject: CN=6aa0f1f4-b4b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f4:90:06:47:82:32:78:73:e5:88:ff:f8:66:
                    42:ac:c4:49:a0:e8:a8:cb:49:f3:b0:d0:c6:9f:10:
                    1b:b5:36:19:8c:48:b2:9c:fa:43:0d:e6:fd:92:5d:
                    06:11:6c:2c:1b:af:4f:26:0e:71:a3:b7:0d:dc:8f:
                    1c:68:a1:b3:1a:5d:52:8c:79:96:a8:45:1f:4f:9e:
                    9d:e4:77:d5:7c:97:b5:77:02:c3:da:de:1e:de:49:
                    aa:8c:ec:d1:ae:fb:18:1d:0d:b9:db:65:68:75:0a:
                    47:52:4b:8c:1d:17:17:a3:fa:f6:df:c9:26:33:88:
                    55:55:56:32:b4:e2:e2:5d:f4:40:80:e6:4f:4d:37:
                    b6:35:f3:36:1c:58:35:39:ca:63:0a:13:2e:a2:26:
                    ff:d0:41:bd:da:99:e0:ff:7a:60:60:40:9f:3f:9f:
                    20:c6:ad:50:a8:80:04:ca:cc:32:53:ee:b8:94:fb:
                    72:78:8b:d8:ca:34:2f:24:df:cc:83:d3:45:7a:fb:
                    7a:56:7d:e6:38:3f:47:de:6a:4b:88:98:0c:d5:0e:
                    57:7a:c0:2e:1c:ab:04:60:92:5f:85:19:f0:4f:a5:
                    86:2d:a6:ef:60:5a:b5:6c:39:c2:a4:f0:78:06:60:
                    22:60:6d:c5:b6:aa:37:58:8e:a1:e7:2b:63:c9:0e:
                    b2:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:AF:C0:30:D5:E5:9E:64:F0:C8:4E:B7:10:82:79:7A:D4:07:AA:48
            X509v3 Authority Key Identifier:
                keyid:AC:5D:F5:30:48:09:BB:78:3E:B9:62:12:69:58:A0:07:86:E8:F6:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36724C2/BFDAB754AB8811F183655414CF1D38B0/rF31MEgJu3g-uWISaVigB4bo9nw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rF31MEgJu3g-uWISaVigB4bo9nw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36724C2/BFDAB754AB8811F183655414CF1D38B0/5AB25916AC1111F195B323DACE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.219.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2d:63:85:d2:04:02:03:5e:05:0b:07:4f:96:8f:ca:cf:e0:7b:
         7e:00:2f:42:cb:94:51:4a:3d:6f:f6:15:b9:b4:bd:d8:4d:ea:
         09:72:fe:2e:4f:3c:f5:6d:06:12:b2:f3:da:a0:80:d3:86:8e:
         8f:b5:a9:03:c9:f2:c8:9c:c7:7a:cd:ff:09:4d:b8:86:ab:81:
         d5:48:fc:7a:87:33:8e:c2:1b:68:d0:fd:94:ed:94:63:23:84:
         ec:6b:3c:90:19:c1:ef:28:43:45:9b:49:da:c6:b2:9a:5d:3d:
         34:e5:32:32:be:94:fe:c2:49:6b:47:c4:33:07:d5:fc:ca:e4:
         5e:1e:b4:e3:0b:ec:2c:15:b9:b1:df:73:61:c1:05:7a:b0:90:
         97:75:64:69:36:75:9c:d8:77:9a:3f:4d:28:4a:3d:49:44:0b:
         a8:6c:6e:63:d2:57:cf:22:49:b1:35:5b:fa:01:2e:d6:73:26:
         70:b0:55:97:da:b8:e1:0e:ef:11:d8:7a:fa:67:f1:73:38:38:
         28:96:3b:23:57:c5:9c:9b:57:ad:ba:89:20:c6:f6:4a:8e:50:
         25:a1:f4:5d:5e:e3:d6:be:7a:e6:82:07:11:77:ab:e8:71:42:
         26:f1:6f:0a:59:03:b8:c6:70:45:87:c8:10:91:cf:68:fd:70:
         60:92:ac:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----