Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36B5EE7/15CB94DC6B9111F086EA8D85DAE4EC9C/443868DC9FA611F19908A5A1CE1D38B0.roa
File:                     443868DC9FA611F19908A5A1CE1D38B0.roa (raw, json)
Hash identifier:          C1U6Wl6ewW/3tiJCP8CLW9EkGOWkCp+qYa6Suj5NV9s=
Subject key identifier:   E4:5F:02:38:7A:8F:1C:9D:9D:0B:39:89:BC:A4:7A:C2:93:84:D0:16
Certificate issuer:       /CN=F36B5EE7AF/serialNumber=EB4A89C924BA17F0E9BB995834F5235A8619B471
Certificate serial:       0197
Authority key identifier: EB:4A:89:C9:24:BA:17:F0:E9:BB:99:58:34:F5:23:5A:86:19:B4:71
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/60qJySS6F_Dpu5lYNPUjWoYZtHE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B5EE7/15CB94DC6B9111F086EA8D85DAE4EC9C/443868DC9FA611F19908A5A1CE1D38B0.roa
Signing time:             Mon 24 Aug 2026 10:26:29 +0000
ROA not before:           Mon 24 Aug 2026 10:26:24 +0000
ROA not after:            Sun 24 Aug 2036 10:26:24 +0000
asID:                     327794
IP address blocks:        102.36.48.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B5EE7/15CB94DC6B9111F086EA8D85DAE4EC9C/60qJySS6F_Dpu5lYNPUjWoYZtHE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B5EE7/15CB94DC6B9111F086EA8D85DAE4EC9C/60qJySS6F_Dpu5lYNPUjWoYZtHE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/60qJySS6F_Dpu5lYNPUjWoYZtHE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 12 Sep 2026 05:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 407 (0x197)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B5EE7AF, serialNumber=EB4A89C924BA17F0E9BB995834F5235A8619B471
        Validity
            Not Before: Aug 24 10:26:24 2026 GMT
            Not After : Aug 24 10:26:24 2036 GMT
        Subject: CN=6a8c1c54-413c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:1f:92:54:98:83:cc:6e:98:9d:c3:40:a7:74:
                    0b:7f:39:a6:cb:3d:1b:27:02:1a:f9:df:77:26:d9:
                    c3:18:3b:2f:1e:56:69:c6:f3:1d:af:7a:c7:bc:a6:
                    5c:55:05:ed:f0:71:69:b9:37:8c:a4:ff:55:b8:70:
                    23:0f:d7:1a:c0:67:24:5c:6c:f9:e8:45:8d:af:10:
                    ae:77:ab:a6:dd:63:1b:5e:5e:c9:a2:47:19:28:63:
                    81:e3:0c:13:c9:cc:f5:b8:14:34:ec:eb:f9:2d:4b:
                    df:92:ec:c8:c6:ee:14:c4:74:15:be:10:9e:2e:e9:
                    b5:8e:e2:78:a4:2d:b5:c2:04:59:66:2c:65:93:24:
                    e5:7e:77:24:f8:53:4b:55:55:f2:a4:51:a3:9d:5b:
                    ee:35:51:0b:1e:6b:27:71:90:6b:29:8e:63:7d:2f:
                    04:82:d3:f0:ad:7a:c4:9b:66:83:99:2f:4f:32:6e:
                    97:00:09:e0:f1:60:5f:19:46:ae:d3:5d:8a:1c:45:
                    c6:6b:e1:d6:9b:b5:d2:72:00:98:7d:91:c0:0c:6f:
                    d0:23:b1:ef:33:75:4a:ff:7d:6f:fd:70:f6:a3:cd:
                    01:cb:2e:24:9d:37:38:ea:d6:a9:20:11:ea:1f:3a:
                    9d:72:21:b8:86:9f:94:03:70:7c:2e:9e:6a:4c:5a:
                    4c:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:5F:02:38:7A:8F:1C:9D:9D:0B:39:89:BC:A4:7A:C2:93:84:D0:16
            X509v3 Authority Key Identifier:
                keyid:EB:4A:89:C9:24:BA:17:F0:E9:BB:99:58:34:F5:23:5A:86:19:B4:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B5EE7/15CB94DC6B9111F086EA8D85DAE4EC9C/60qJySS6F_Dpu5lYNPUjWoYZtHE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/60qJySS6F_Dpu5lYNPUjWoYZtHE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B5EE7/15CB94DC6B9111F086EA8D85DAE4EC9C/443868DC9FA611F19908A5A1CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.36.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         d0:36:67:2c:12:36:92:6b:72:8e:56:ec:7e:b1:0b:0e:ea:2e:
         39:0e:83:e1:04:2e:35:e0:e5:62:5e:67:c0:9e:91:17:cb:15:
         55:10:83:eb:39:de:7a:99:2e:72:b9:6b:09:3a:03:cd:4c:34:
         cd:30:64:cf:29:fd:4d:01:42:6c:63:0b:35:95:49:9c:08:ae:
         7c:77:b5:6d:b6:c5:6d:d7:53:83:f6:7e:c9:ec:38:89:03:a8:
         b7:39:ac:ad:4a:56:c4:c8:4d:22:06:a7:8a:00:4c:e3:49:a0:
         ab:e2:6c:c1:17:2d:13:30:c8:b3:88:92:50:a6:79:0d:c4:92:
         77:3e:ff:21:be:72:8e:8a:06:38:01:d2:d6:e6:73:4a:80:65:
         df:c6:9d:33:df:e4:25:cd:63:27:ee:a2:68:cc:3a:14:d8:3b:
         f7:82:77:22:0c:bf:23:25:0a:ff:59:cc:2d:85:a1:c6:e9:db:
         e2:9a:62:48:3b:6f:02:10:78:6e:00:cd:45:0e:1e:17:aa:b0:
         b6:3e:05:7b:4a:d0:d2:19:01:3d:d9:fb:b0:68:ff:b9:fc:da:
         d3:c2:16:27:ea:cf:cd:b4:c1:81:fe:e1:1d:e0:c7:ec:73:68:
         6c:bd:53:ee:13:ed:02:ef:3e:48:d4:38:0e:c0:f9:dc:43:85:
         1c:69:f0:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----