Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36B7F24/7363D6B8940811F1B22253EFCE1D38B0/12A1149A940C11F18B624505CF1D38B0.roa
File:                     12A1149A940C11F18B624505CF1D38B0.roa (raw, json)
Hash identifier:          8mLLCndnzMbQ2nyrvyzBRBW70YFateeTW3IJydAjH4k=
Subject key identifier:   46:DE:87:AF:C5:E0:FC:2A:17:6E:A2:F8:F4:FB:D6:A5:28:FF:F0:D1
Certificate issuer:       /CN=F36B7F24AF/serialNumber=53509F4C3A74B5923B727C7D349A81CF315FB62B
Certificate serial:       02
Authority key identifier: 53:50:9F:4C:3A:74:B5:92:3B:72:7C:7D:34:9A:81:CF:31:5F:B6:2B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/U1CfTDp0tZI7cnx9NJqBzzFftis.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B7F24/7363D6B8940811F1B22253EFCE1D38B0/12A1149A940C11F18B624505CF1D38B0.roa
Signing time:             Sun 09 Aug 2026 16:05:00 +0000
ROA not before:           Sun 09 Aug 2026 16:04:56 +0000
ROA not after:            Sat 09 Aug 2031 16:04:56 +0000
asID:                     329477
IP address blocks:        102.208.40.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B7F24/7363D6B8940811F1B22253EFCE1D38B0/U1CfTDp0tZI7cnx9NJqBzzFftis.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B7F24/7363D6B8940811F1B22253EFCE1D38B0/U1CfTDp0tZI7cnx9NJqBzzFftis.mft
                          rsync://rpki.afrinic.net/repository/afrinic/U1CfTDp0tZI7cnx9NJqBzzFftis.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 20 Sep 2026 00:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B7F24AF, serialNumber=53509F4C3A74B5923B727C7D349A81CF315FB62B
        Validity
            Not Before: Aug  9 16:04:56 2026 GMT
            Not After : Aug  9 16:04:56 2031 GMT
        Subject: CN=6a78a52c-dfae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a9:62:50:4b:8b:9a:41:79:e4:ec:5a:23:77:
                    25:18:bb:29:b8:57:18:83:4f:bc:91:84:c7:74:2d:
                    2e:c2:15:1c:13:c6:9d:9f:ab:c2:ba:c3:6a:22:8f:
                    f1:83:f8:9e:4e:ae:53:d0:14:52:7b:3e:a4:c5:fa:
                    b7:4a:a5:a6:bc:f8:99:1f:58:53:76:f2:5f:2f:a7:
                    5f:8a:d8:d8:61:ac:34:7b:c2:7c:46:5b:12:75:74:
                    d3:d3:31:eb:e6:6e:7e:f0:43:bf:d1:bf:5f:c7:4b:
                    28:be:29:e6:59:55:65:cc:fd:5f:57:bf:ee:b8:4c:
                    fa:d9:2b:cc:6e:a4:4b:14:2e:36:e4:ab:fa:81:30:
                    00:7e:b9:2b:dd:60:7a:33:2f:55:92:d9:cc:95:0f:
                    c5:36:43:29:75:89:33:81:a0:a8:48:5c:2a:8a:4d:
                    36:c9:49:c2:b2:c5:8f:fc:b5:4f:5c:2a:5f:96:1f:
                    a9:7f:43:b9:23:57:28:b0:f0:c9:4b:cb:0d:68:74:
                    bd:c1:b0:60:c0:a0:49:cb:d1:aa:7e:89:1c:28:41:
                    f6:21:97:33:9b:8f:24:2d:85:5d:ce:fb:98:59:6d:
                    53:89:34:3f:d8:62:66:e4:90:61:c7:b5:66:dc:ba:
                    d3:cc:3b:e4:7a:d0:bd:4e:61:ff:ae:07:29:22:da:
                    06:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:DE:87:AF:C5:E0:FC:2A:17:6E:A2:F8:F4:FB:D6:A5:28:FF:F0:D1
            X509v3 Authority Key Identifier:
                keyid:53:50:9F:4C:3A:74:B5:92:3B:72:7C:7D:34:9A:81:CF:31:5F:B6:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B7F24/7363D6B8940811F1B22253EFCE1D38B0/U1CfTDp0tZI7cnx9NJqBzzFftis.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/U1CfTDp0tZI7cnx9NJqBzzFftis.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B7F24/7363D6B8940811F1B22253EFCE1D38B0/12A1149A940C11F18B624505CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.208.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         53:5b:94:c8:67:64:7e:26:76:90:8e:88:d0:7c:81:60:4f:36:
         da:65:7b:a2:82:ef:f3:d7:be:6e:cc:35:c2:41:45:db:be:b5:
         a2:6d:83:14:ed:ac:5f:dc:a3:92:22:7c:5b:59:75:3c:e3:20:
         06:b4:e8:fc:17:96:5a:5a:82:3a:cd:20:ed:15:64:9f:17:15:
         d4:1d:f7:56:f1:33:a7:ca:30:99:08:be:8f:1c:4d:ac:08:e9:
         c5:ad:78:2d:14:d3:36:81:81:f1:00:33:54:b8:05:ab:34:72:
         51:70:18:22:65:6a:e5:d6:83:50:c8:d6:3a:0a:fd:01:4f:7b:
         d0:17:66:c3:ac:86:75:39:3b:22:38:84:05:5f:0a:bc:69:52:
         bc:ca:64:d2:2c:e0:4a:ae:d1:41:23:ec:07:53:71:b3:9a:cb:
         cc:8b:7f:5f:e9:9f:ad:7a:da:81:59:6d:77:f9:ed:4f:9e:25:
         3a:16:fa:23:32:56:2a:92:4d:d6:b0:07:9d:fc:b2:eb:f3:94:
         7c:0e:0b:b6:a2:bf:9e:6f:be:40:78:20:c5:8f:4b:bd:12:14:
         2c:9f:91:18:0d:48:53:6f:0d:69:7a:26:75:f2:b6:3d:ac:d6:
         a9:4d:0a:d3:a9:84:a1:e9:22:cf:44:eb:cd:22:46:5d:fe:54:
         18:9a:38:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----