Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36B5EE7/15CB94DC6B9111F086EA8D85DAE4EC9C/CDDD6EBC9FA511F18196C91DCF1D38B0.roa
File:                     CDDD6EBC9FA511F18196C91DCF1D38B0.roa (raw, json)
Hash identifier:          xge/n2kJncJZmLgblZqf4l8lnDWBnn0jczEVI2pEAJI=
Subject key identifier:   28:71:1C:9A:2D:07:A5:DE:B1:56:93:46:25:88:D3:37:8E:D5:A9:89
Certificate issuer:       /CN=F36B5EE7AF/serialNumber=EB4A89C924BA17F0E9BB995834F5235A8619B471
Certificate serial:       0191
Authority key identifier: EB:4A:89:C9:24:BA:17:F0:E9:BB:99:58:34:F5:23:5A:86:19:B4:71
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/60qJySS6F_Dpu5lYNPUjWoYZtHE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B5EE7/15CB94DC6B9111F086EA8D85DAE4EC9C/CDDD6EBC9FA511F18196C91DCF1D38B0.roa
Signing time:             Mon 24 Aug 2026 10:23:10 +0000
ROA not before:           Mon 24 Aug 2026 10:23:06 +0000
ROA not after:            Sun 24 Aug 2036 10:23:06 +0000
asID:                     327794
IP address blocks:        102.36.0.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B5EE7/15CB94DC6B9111F086EA8D85DAE4EC9C/60qJySS6F_Dpu5lYNPUjWoYZtHE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B5EE7/15CB94DC6B9111F086EA8D85DAE4EC9C/60qJySS6F_Dpu5lYNPUjWoYZtHE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/60qJySS6F_Dpu5lYNPUjWoYZtHE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 12 Sep 2026 05:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 401 (0x191)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B5EE7AF, serialNumber=EB4A89C924BA17F0E9BB995834F5235A8619B471
        Validity
            Not Before: Aug 24 10:23:06 2026 GMT
            Not After : Aug 24 10:23:06 2036 GMT
        Subject: CN=6a8c1b8e-48e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:81:81:77:a2:54:7e:df:9d:1b:33:d4:c0:0d:
                    fd:8e:ba:41:6a:59:38:35:a1:a1:50:e3:5d:12:61:
                    10:68:d3:ea:2f:bc:02:57:41:d5:8f:ae:f8:ce:a4:
                    da:cf:e8:31:be:84:a4:e9:8c:69:50:cd:ef:91:06:
                    94:ad:6d:eb:d9:a5:a9:69:4a:1d:7d:98:c5:15:78:
                    2e:90:c3:ea:4d:68:ea:75:23:49:d3:e8:dd:47:ce:
                    8a:c7:32:e1:7e:8e:65:c6:7c:ea:32:e8:9f:9d:1f:
                    4c:b7:a1:0c:e7:20:43:0f:f9:f7:a3:f5:8b:f3:9c:
                    f4:6c:6f:68:bd:9d:1f:55:ea:c2:58:de:e5:dd:2c:
                    d2:b3:08:86:4b:c0:eb:ab:89:57:a6:39:0e:2b:00:
                    50:5c:8c:64:df:ad:a2:88:69:1a:fc:5c:bb:73:40:
                    ad:c7:f6:60:eb:ab:1c:7e:8d:20:92:c6:b9:27:5e:
                    3c:e8:39:9f:75:b7:f7:1a:65:fc:69:bc:3f:2f:21:
                    97:5c:3a:5f:28:7e:36:59:18:be:8e:17:bf:f5:3e:
                    d3:dc:6d:8a:33:4e:2f:8a:6c:9e:db:30:90:a4:f9:
                    94:b3:1e:54:41:1b:74:ce:ae:cd:09:92:3b:3d:3c:
                    9b:74:16:88:32:eb:91:2e:92:83:24:03:8e:fb:4f:
                    26:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:71:1C:9A:2D:07:A5:DE:B1:56:93:46:25:88:D3:37:8E:D5:A9:89
            X509v3 Authority Key Identifier:
                keyid:EB:4A:89:C9:24:BA:17:F0:E9:BB:99:58:34:F5:23:5A:86:19:B4:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B5EE7/15CB94DC6B9111F086EA8D85DAE4EC9C/60qJySS6F_Dpu5lYNPUjWoYZtHE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/60qJySS6F_Dpu5lYNPUjWoYZtHE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B5EE7/15CB94DC6B9111F086EA8D85DAE4EC9C/CDDD6EBC9FA511F18196C91DCF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.36.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         bf:f0:20:0c:24:29:b8:80:2d:1b:63:62:0a:e5:12:15:7d:d1:
         64:ca:5e:c0:3e:24:ca:5f:6c:62:89:7f:02:87:40:36:b1:6f:
         72:a8:72:c0:63:1c:e5:f2:74:49:73:8e:57:29:61:da:a9:26:
         56:cc:67:f1:e7:6d:31:e7:8d:05:1c:fa:2e:3b:d8:de:41:11:
         69:86:36:63:95:f6:61:31:ba:aa:56:ee:21:68:eb:3f:9d:44:
         ff:82:87:50:6b:f8:e7:e8:4c:34:0c:bd:be:ce:ec:4f:2b:ce:
         8d:43:5d:8d:97:fd:a3:20:3e:6f:86:87:c4:51:ff:68:48:f5:
         73:59:43:31:14:d6:ca:c1:13:0e:98:ce:43:fc:e1:f5:6b:54:
         8e:7e:ad:48:71:10:56:86:4b:f3:91:32:91:1b:b4:c2:e7:2f:
         df:66:17:58:f1:db:67:79:01:92:7f:a9:68:64:cd:bb:79:b6:
         9e:dd:ca:f8:74:8c:86:82:9b:4d:43:9c:18:d2:47:e7:0b:e6:
         ac:09:c9:ee:16:30:2e:66:79:af:7d:7f:85:c4:55:68:fb:c3:
         e1:bc:48:7e:9f:7f:56:9f:44:21:b7:de:64:14:98:7e:15:72:
         f2:10:3b:94:80:69:57:d5:17:82:72:2b:83:bb:c9:b5:28:99:
         2f:63:73:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----