Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36B5EE7/15CB94DC6B9111F086EA8D85DAE4EC9C/FBC8BDB89FA511F1AD60E81DCF1D38B0.roa
File:                     FBC8BDB89FA511F1AD60E81DCF1D38B0.roa (raw, json)
Hash identifier:          g+Cyxl3GP7s9I0cq0IHFVLdb518alvat429lkTlvqQs=
Subject key identifier:   1F:B3:8C:8D:14:9A:1D:83:35:5F:1C:7C:F7:1D:EE:E5:CF:18:A6:A6
Certificate issuer:       /CN=F36B5EE7AF/serialNumber=EB4A89C924BA17F0E9BB995834F5235A8619B471
Certificate serial:       0193
Authority key identifier: EB:4A:89:C9:24:BA:17:F0:E9:BB:99:58:34:F5:23:5A:86:19:B4:71
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/60qJySS6F_Dpu5lYNPUjWoYZtHE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B5EE7/15CB94DC6B9111F086EA8D85DAE4EC9C/FBC8BDB89FA511F1AD60E81DCF1D38B0.roa
Signing time:             Mon 24 Aug 2026 10:24:27 +0000
ROA not before:           Mon 24 Aug 2026 10:24:23 +0000
ROA not after:            Sun 24 Aug 2036 10:24:23 +0000
asID:                     327794
IP address blocks:        102.36.16.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B5EE7/15CB94DC6B9111F086EA8D85DAE4EC9C/60qJySS6F_Dpu5lYNPUjWoYZtHE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B5EE7/15CB94DC6B9111F086EA8D85DAE4EC9C/60qJySS6F_Dpu5lYNPUjWoYZtHE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/60qJySS6F_Dpu5lYNPUjWoYZtHE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 12 Sep 2026 05:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 403 (0x193)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B5EE7AF, serialNumber=EB4A89C924BA17F0E9BB995834F5235A8619B471
        Validity
            Not Before: Aug 24 10:24:23 2026 GMT
            Not After : Aug 24 10:24:23 2036 GMT
        Subject: CN=6a8c1bdb-5a7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:08:f8:33:06:e3:18:72:52:36:8b:61:96:fb:
                    94:09:91:1e:cb:1b:a6:11:73:4e:a3:33:e0:d6:10:
                    70:fb:cb:ec:91:e3:8c:4f:1f:3f:56:bc:72:46:9c:
                    80:6c:69:69:7f:59:c2:db:d4:b8:34:7c:95:46:e9:
                    b3:fd:dc:97:5a:7e:8e:ea:a8:40:0c:64:f6:e0:d3:
                    f7:4c:1f:ad:61:44:c3:ce:e3:d9:ed:5f:e0:f3:b8:
                    bd:0a:7a:e1:2d:95:bf:0f:60:17:f4:a7:99:20:68:
                    06:d0:19:0c:c7:9a:6a:5c:8d:74:06:09:9d:ed:7d:
                    bc:ff:bb:47:ae:df:93:0c:b8:7c:75:ec:55:ae:d5:
                    06:a6:b1:7d:bd:96:12:d8:11:48:0e:c7:db:96:1f:
                    d5:fd:d2:f1:38:ba:ac:75:44:31:8b:d8:b3:08:40:
                    3e:4d:72:71:b7:3a:1b:95:99:c2:80:bc:20:2b:59:
                    00:c9:25:69:43:fb:d1:a7:ce:61:94:7e:16:6c:62:
                    d2:d7:67:a4:60:93:69:57:4c:47:92:c7:8a:90:7f:
                    6e:a9:bd:8a:91:34:c7:a6:99:54:88:2a:6d:85:32:
                    a0:81:2a:5a:ca:aa:a6:d7:c2:16:59:7a:94:23:f0:
                    4f:d9:06:45:fe:33:c1:95:40:06:dd:5b:37:dc:ae:
                    3f:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:B3:8C:8D:14:9A:1D:83:35:5F:1C:7C:F7:1D:EE:E5:CF:18:A6:A6
            X509v3 Authority Key Identifier:
                keyid:EB:4A:89:C9:24:BA:17:F0:E9:BB:99:58:34:F5:23:5A:86:19:B4:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B5EE7/15CB94DC6B9111F086EA8D85DAE4EC9C/60qJySS6F_Dpu5lYNPUjWoYZtHE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/60qJySS6F_Dpu5lYNPUjWoYZtHE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B5EE7/15CB94DC6B9111F086EA8D85DAE4EC9C/FBC8BDB89FA511F1AD60E81DCF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.36.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         84:24:d9:49:31:6f:87:c2:1f:43:51:e5:e5:32:a8:a4:59:36:
         b9:c2:51:4c:f6:49:69:a9:69:4e:5d:f7:b7:4f:9a:c9:b0:8c:
         9b:7f:58:d9:dd:bb:c5:e6:37:4b:96:5e:f0:50:ac:37:e5:0d:
         05:51:c3:65:aa:73:eb:95:35:d0:6d:21:b4:68:ac:fd:22:c2:
         d7:35:19:5d:2e:e1:96:29:96:47:0d:cf:a8:52:67:38:2d:7e:
         76:c5:33:33:10:a3:8c:3b:51:09:9f:46:77:71:8c:a1:a2:a0:
         e9:25:fb:84:8d:62:ce:f2:cb:bd:62:9e:ac:64:8b:04:b5:24:
         05:23:80:ae:2a:2a:a1:3f:ab:3b:03:f6:20:82:58:e3:64:b5:
         70:d1:8f:88:d1:29:5c:a3:77:72:5f:d6:17:88:c1:1d:80:41:
         55:52:2e:95:72:70:6f:5d:e4:bb:88:c3:25:b8:96:b2:d8:7d:
         0b:3c:05:79:4a:62:0f:21:46:77:58:bf:e8:93:f5:a6:18:fe:
         5c:1b:2c:ff:ee:2f:18:c8:5c:5d:00:92:47:44:ad:79:54:c8:
         dd:86:ce:a4:1f:ae:fa:08:50:52:99:97:c9:ea:7b:9e:67:2e:
         1a:f5:69:e9:c5:f7:9b:dc:4c:df:68:45:1b:09:8d:c8:05:79:
         09:ac:1e:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----