Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A98E6/766CC766BE7911F191C0A5A7CE1D38B0/E0E0C2FABE7911F19832F3A9CE1D38B0.roa
File:                     E0E0C2FABE7911F19832F3A9CE1D38B0.roa (raw, json)
Hash identifier:          uqCZz6nRZxmB/tjQT/x9TxgPCvmfRDoANnQA3adzDsQ=
Subject key identifier:   63:3E:DF:49:20:FE:D3:34:58:73:40:51:87:DC:CA:30:1C:21:44:60
Certificate issuer:       /CN=F36A98E6AF/serialNumber=BAED2213E4EFDD2EA7A294B310307C1BB94DAD27
Certificate serial:       02
Authority key identifier: BA:ED:22:13:E4:EF:DD:2E:A7:A2:94:B3:10:30:7C:1B:B9:4D:AD:27
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/uu0iE-Tv3S6nopSzEDB8G7lNrSc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A98E6/766CC766BE7911F191C0A5A7CE1D38B0/E0E0C2FABE7911F19832F3A9CE1D38B0.roa
Signing time:             Fri 02 Oct 2026 15:56:50 +0000
ROA not before:           Fri 02 Oct 2026 15:56:46 +0000
ROA not after:            Thu 02 Oct 2036 15:56:46 +0000
asID:                     329561
IP address blocks:        102.205.152.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A98E6/766CC766BE7911F191C0A5A7CE1D38B0/uu0iE-Tv3S6nopSzEDB8G7lNrSc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A98E6/766CC766BE7911F191C0A5A7CE1D38B0/uu0iE-Tv3S6nopSzEDB8G7lNrSc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/uu0iE-Tv3S6nopSzEDB8G7lNrSc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 28 Oct 2026 05:52:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A98E6AF, serialNumber=BAED2213E4EFDD2EA7A294B310307C1BB94DAD27
        Validity
            Not Before: Oct  2 15:56:46 2026 GMT
            Not After : Oct  2 15:56:46 2036 GMT
        Subject: CN=6abfd442-0d1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:d9:14:dc:db:fd:40:28:37:e4:0f:62:03:73:
                    b1:59:d1:4a:c3:20:69:c6:b1:e4:bf:58:da:a0:47:
                    2d:d6:46:de:a4:86:6b:15:d8:93:74:e1:4f:83:95:
                    95:0d:81:92:bb:9f:08:3c:b6:26:3d:6e:db:1f:3b:
                    12:f1:71:ca:b4:6e:b4:f8:75:ec:af:57:bf:64:01:
                    0c:cb:ff:b5:06:ab:17:fe:0f:fa:6e:5b:8b:1b:4a:
                    5a:8e:f2:b3:0b:40:26:a9:59:c8:b1:4e:e2:23:a9:
                    a4:08:bb:ad:75:83:8f:59:6b:f0:b4:5e:84:44:b3:
                    ce:29:22:55:cd:56:f4:e4:84:ab:61:63:f9:a7:05:
                    57:ba:82:4c:65:0f:a9:d2:86:d0:a4:3f:0a:6f:9c:
                    6c:5a:ed:ab:48:dd:a9:f4:85:5c:1c:dd:f9:04:b1:
                    19:dc:c4:77:25:50:04:cc:f2:89:4c:ee:f1:4c:6c:
                    5b:eb:f7:86:a0:a3:1b:3b:6f:20:b1:5b:f2:a6:37:
                    45:e3:f6:87:3c:04:64:de:fb:4f:3e:ee:7d:78:87:
                    dd:04:7f:5e:7d:b1:47:99:b2:6a:14:3b:d8:b4:39:
                    57:dc:cf:42:c3:45:5d:3b:53:d6:af:9f:9d:ff:8d:
                    43:f3:a1:60:3c:f1:ae:e6:a0:a6:26:de:c2:92:51:
                    71:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:3E:DF:49:20:FE:D3:34:58:73:40:51:87:DC:CA:30:1C:21:44:60
            X509v3 Authority Key Identifier:
                keyid:BA:ED:22:13:E4:EF:DD:2E:A7:A2:94:B3:10:30:7C:1B:B9:4D:AD:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A98E6/766CC766BE7911F191C0A5A7CE1D38B0/uu0iE-Tv3S6nopSzEDB8G7lNrSc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/uu0iE-Tv3S6nopSzEDB8G7lNrSc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A98E6/766CC766BE7911F191C0A5A7CE1D38B0/E0E0C2FABE7911F19832F3A9CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.205.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         02:26:1a:ef:eb:2f:41:f6:26:aa:3c:53:02:eb:22:99:17:66:
         41:26:58:55:86:90:36:b4:20:e5:30:99:5e:4b:27:bc:e4:17:
         89:75:96:89:96:71:9b:1d:de:eb:ae:db:f3:16:72:84:93:22:
         c8:fe:d5:4b:4c:ca:03:61:c7:25:67:46:d4:af:c9:43:1a:31:
         8c:42:3f:d7:28:f0:e2:19:53:82:95:68:79:b9:34:c9:5f:bb:
         79:8c:b0:1a:e1:ce:6d:6a:8f:72:70:b0:8c:4b:82:37:9a:35:
         39:52:9b:9a:70:19:e7:73:5a:76:68:cf:55:9a:07:64:97:d7:
         73:a4:bf:bd:f2:23:22:34:fc:cd:a5:ae:55:f5:bc:d7:c0:db:
         75:8a:0f:61:55:61:85:89:56:9d:6f:1a:1a:e0:0c:a8:8c:49:
         63:e8:9e:f8:40:12:94:c1:a9:fa:89:e2:37:f9:9d:2d:c9:bf:
         8e:72:1e:ff:17:b4:8d:6d:93:5b:67:e0:8d:3e:f2:3c:f5:c5:
         58:e3:38:34:8c:79:64:64:13:61:a6:56:24:d1:02:7b:9e:0b:
         5c:47:da:94:11:04:58:26:a7:44:74:5d:e6:f0:07:c7:35:ab:
         75:f7:b0:7c:99:e2:9a:62:29:1f:15:3f:6c:d6:b4:4d:8d:44:
         83:18:f3:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----