Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F369C738/896BE78AEEA911EA8FDCFB1BF8AEA228/85C020368F1311F19E39A4EFCE1D38B0.roa
File:                     85C020368F1311F19E39A4EFCE1D38B0.roa (raw, json)
Hash identifier:          gyC2sm4kc95dRk/7xGd5hTUBMpQrFeDNPVysCG/CwVs=
Subject key identifier:   19:A9:D8:9F:4C:E5:F0:FA:04:64:CD:D6:87:49:87:F7:C2:F4:B7:DF
Certificate issuer:       /CN=F369C738RI/serialNumber=74FD8A99B98F7C598272578F5EA14F121897A95B
Certificate serial:       08A2
Authority key identifier: 74:FD:8A:99:B9:8F:7C:59:82:72:57:8F:5E:A1:4F:12:18:97:A9:5B
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/dP2KmbmPfFmCclePXqFPEhiXqVs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369C738/896BE78AEEA911EA8FDCFB1BF8AEA228/85C020368F1311F19E39A4EFCE1D38B0.roa
Signing time:             Mon 03 Aug 2026 08:15:44 +0000
ROA not before:           Mon 03 Aug 2026 08:15:40 +0000
ROA not after:            Sun 09 May 2032 08:15:40 +0000
asID:                     15706
IP address blocks:        212.0.128.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369C738/896BE78AEEA911EA8FDCFB1BF8AEA228/dP2KmbmPfFmCclePXqFPEhiXqVs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369C738/896BE78AEEA911EA8FDCFB1BF8AEA228/dP2KmbmPfFmCclePXqFPEhiXqVs.mft
                          rsync://rpki.afrinic.net/repository/ripe/dP2KmbmPfFmCclePXqFPEhiXqVs.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 12 Sep 2026 00:45:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2210 (0x8a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369C738RI, serialNumber=74FD8A99B98F7C598272578F5EA14F121897A95B
        Validity
            Not Before: Aug  3 08:15:40 2026 GMT
            Not After : May  9 08:15:40 2032 GMT
        Subject: CN=6a704e30-5fcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ce:5c:ee:25:09:f0:89:e0:e7:7f:cb:90:7f:
                    96:de:0f:bd:d8:21:8a:35:1b:a0:52:5b:9b:93:89:
                    5d:c3:dc:90:cc:00:d8:ca:67:3f:30:b2:b4:e3:55:
                    ca:7c:47:8d:48:4f:10:cd:39:4f:60:44:1f:ba:ca:
                    a6:f8:59:75:e9:d3:57:ef:2a:08:cf:2d:c3:d7:a2:
                    5f:f2:02:f8:e2:09:25:75:13:fa:c5:34:68:60:2d:
                    bc:e5:d5:65:c6:80:a8:12:c7:d5:5c:42:d8:48:e1:
                    26:04:a4:36:2e:8e:66:08:c6:f1:e6:6f:9c:47:5a:
                    09:b6:5d:6a:90:d1:23:18:e1:26:93:a7:40:e2:5a:
                    3b:37:cb:f6:e1:be:e1:3a:92:ef:43:ba:d3:cb:bc:
                    d1:31:b4:ad:4d:05:3e:e0:c8:52:ff:5f:2d:c4:c6:
                    ea:97:45:f1:4e:5d:27:e5:1e:51:a0:ec:e8:6e:ff:
                    41:6c:c0:a7:d2:31:2d:7b:51:1e:01:ac:00:8f:ed:
                    f8:f6:d0:4a:f9:31:af:1c:f5:36:21:6a:5f:bf:f1:
                    b5:5b:52:e8:6d:91:a7:ba:d8:c5:92:77:6f:da:0d:
                    f2:ba:f9:93:34:4d:12:fb:ba:76:cb:78:f5:b6:f8:
                    ea:dc:9f:e5:db:9b:12:a6:cf:5b:11:1e:83:ed:18:
                    a5:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:A9:D8:9F:4C:E5:F0:FA:04:64:CD:D6:87:49:87:F7:C2:F4:B7:DF
            X509v3 Authority Key Identifier:
                keyid:74:FD:8A:99:B9:8F:7C:59:82:72:57:8F:5E:A1:4F:12:18:97:A9:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369C738/896BE78AEEA911EA8FDCFB1BF8AEA228/dP2KmbmPfFmCclePXqFPEhiXqVs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/dP2KmbmPfFmCclePXqFPEhiXqVs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369C738/896BE78AEEA911EA8FDCFB1BF8AEA228/85C020368F1311F19E39A4EFCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.0.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         31:48:58:c2:d3:f0:76:b6:47:fc:76:20:21:9a:f3:76:74:85:
         08:2f:93:c3:60:e2:d0:56:33:de:10:64:55:57:36:35:7c:42:
         e4:e8:e7:b5:66:3e:83:b7:ac:aa:36:13:d3:ec:3e:48:d9:48:
         a8:51:59:54:83:a8:7f:bf:14:5e:6c:60:b0:2e:21:59:a6:87:
         b9:d3:07:c5:5e:70:aa:40:60:97:d7:8a:e4:77:41:8f:e8:d6:
         3e:6c:87:af:5f:7c:f9:50:b5:cd:9b:30:9f:e6:74:ba:dc:53:
         4b:50:90:9e:2a:7d:49:a0:1f:5a:b0:8e:92:70:c3:b2:cd:94:
         e6:54:0a:8c:81:4e:76:90:bd:14:60:13:5f:4c:39:78:0a:67:
         da:9f:eb:3b:99:bd:c6:0b:cf:cb:2c:f3:8a:6c:0b:e6:40:3e:
         b7:47:99:9a:f6:eb:f4:33:ac:54:35:f8:9a:ee:67:11:1f:ff:
         92:5d:0e:57:de:50:dd:3e:2e:e1:f6:74:e3:17:96:43:63:2a:
         30:ff:b9:67:17:4a:62:6b:86:20:5b:9a:bf:a7:4c:b1:d6:da:
         9e:90:e8:bc:48:0a:e8:26:a4:6d:b1:30:a7:29:3c:79:7f:be:
         5a:cc:20:04:9f:ab:a8:d5:c3:bc:92:30:8d:f2:9b:9a:82:6e:
         6e:94:bb:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----