Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A6DD7/5CB7C22E587F11E5BF942749F8AEA228/3E8FB5F6C6F311F1A4371710CF1D38B0.roa
File:                     3E8FB5F6C6F311F1A4371710CF1D38B0.roa (raw, json)
Hash identifier:          jEA61Gdz8sajMMeLoieSyasJl8T6fXHGvGeCifokhtk=
Subject key identifier:   F9:2B:6B:18:FC:40:56:DB:23:C6:39:34:F9:D9:8E:06:F0:87:10:54
Certificate issuer:       /CN=F36A6DD7AF/serialNumber=3E226B20C2E1769880FC68E1DD335AD17A0ACEA3
Certificate serial:       1040
Authority key identifier: 3E:22:6B:20:C2:E1:76:98:80:FC:68:E1:DD:33:5A:D1:7A:0A:CE:A3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PiJrIMLhdpiA_Gjh3TNa0XoKzqM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A6DD7/5CB7C22E587F11E5BF942749F8AEA228/3E8FB5F6C6F311F1A4371710CF1D38B0.roa
Signing time:             Tue 13 Oct 2026 10:45:46 +0000
ROA not before:           Tue 13 Oct 2026 10:45:41 +0000
ROA not after:            Mon 13 Oct 2036 10:45:41 +0000
asID:                     213481
IP address blocks:        2c0f:f720:2000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A6DD7/5CB7C22E587F11E5BF942749F8AEA228/PiJrIMLhdpiA_Gjh3TNa0XoKzqM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A6DD7/5CB7C22E587F11E5BF942749F8AEA228/PiJrIMLhdpiA_Gjh3TNa0XoKzqM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/PiJrIMLhdpiA_Gjh3TNa0XoKzqM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 00:08:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4160 (0x1040)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A6DD7AF, serialNumber=3E226B20C2E1769880FC68E1DD335AD17A0ACEA3
        Validity
            Not Before: Oct 13 10:45:41 2026 GMT
            Not After : Oct 13 10:45:41 2036 GMT
        Subject: CN=6ace0bda-84c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:dd:cc:6a:2c:5f:58:f8:22:52:5f:7e:d8:99:
                    92:c3:08:30:87:06:2f:60:ef:12:2c:49:22:d5:c1:
                    62:3f:b5:07:bb:33:56:89:87:de:98:96:c5:48:e3:
                    8d:79:33:74:d7:67:f7:6a:c0:02:fa:be:22:f4:6a:
                    a1:aa:c4:f1:3a:8f:c8:de:e9:79:7a:e2:fd:ad:1a:
                    de:61:34:79:cb:eb:4e:2e:f9:e3:97:6c:87:62:a7:
                    9d:54:2f:cd:89:c1:80:27:40:77:d7:fb:95:e2:da:
                    d3:d9:42:b6:a7:3a:2b:ab:5d:2e:67:5c:85:74:17:
                    f9:18:d7:74:a9:7c:cc:4f:79:54:de:06:a6:75:8f:
                    1b:03:08:5b:98:a7:81:a7:30:52:8b:5b:e5:71:ec:
                    df:a3:a2:22:fd:84:49:69:f2:d5:33:8f:48:96:54:
                    30:1b:6f:22:bd:23:f5:4e:b3:5e:9e:2c:04:f3:93:
                    ba:e9:db:e2:39:6a:dc:c0:05:42:f0:88:d8:72:11:
                    7a:fb:af:f7:32:0f:8b:6a:7c:9e:64:35:54:cc:e0:
                    46:43:71:5b:6e:17:32:5e:8a:97:13:21:d9:c9:0d:
                    20:ca:e9:af:28:10:82:b2:3c:62:d4:76:9b:6e:60:
                    1b:3f:69:cd:bc:35:25:26:af:77:20:3e:68:64:dd:
                    c8:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:2B:6B:18:FC:40:56:DB:23:C6:39:34:F9:D9:8E:06:F0:87:10:54
            X509v3 Authority Key Identifier:
                keyid:3E:22:6B:20:C2:E1:76:98:80:FC:68:E1:DD:33:5A:D1:7A:0A:CE:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A6DD7/5CB7C22E587F11E5BF942749F8AEA228/PiJrIMLhdpiA_Gjh3TNa0XoKzqM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PiJrIMLhdpiA_Gjh3TNa0XoKzqM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A6DD7/5CB7C22E587F11E5BF942749F8AEA228/3E8FB5F6C6F311F1A4371710CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:f720:2000::/40

    Signature Algorithm: sha256WithRSAEncryption
         67:c4:b9:9a:da:2d:72:b8:02:39:6a:78:f4:02:b3:06:80:ef:
         35:a5:82:28:2e:83:70:03:50:9a:b4:c9:9e:63:2e:13:f1:67:
         98:ad:60:c7:94:61:be:64:ef:79:bf:9b:6c:27:54:14:03:26:
         6a:94:30:f0:44:4d:2e:dd:d8:c1:2a:4f:32:f0:17:73:ce:ce:
         15:75:67:7a:9a:5a:98:2b:6a:cb:36:94:9e:e6:74:57:4c:02:
         08:df:f4:96:d2:8f:5c:c0:c9:23:ba:f4:0d:7b:5e:f4:03:c3:
         ce:73:1b:62:85:a9:65:a7:62:3b:1a:6c:3c:5c:2a:b7:a8:cd:
         a8:88:bd:ac:1e:71:9a:ca:22:51:f5:ea:5b:5e:40:23:c4:b4:
         26:a1:4c:be:af:99:2a:3b:a9:8c:db:c5:f3:a0:28:1a:ce:e4:
         05:8e:e4:84:d9:6a:73:bb:8d:3c:5d:b1:c4:3d:d2:59:b7:3e:
         4e:98:14:27:3d:8f:cf:47:b9:be:55:29:40:c8:cf:fd:9d:77:
         f8:04:d2:d2:78:51:79:93:10:13:ec:34:97:a7:6c:67:bd:fc:
         ad:3a:f9:32:48:e3:7b:7d:ab:9f:6c:93:24:75:50:75:35:bd:
         dc:6b:c4:be:64:ec:77:53:6d:41:d9:db:6f:9b:81:ea:65:7b:
         d5:b2:86:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----