Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36B7F24/7363D6B8940811F1B22253EFCE1D38B0/FCC8A5EEAF6711F1A22EAA0BCF1D38B0.roa
File:                     FCC8A5EEAF6711F1A22EAA0BCF1D38B0.roa (raw, json)
Hash identifier:          H9dfCQysmouTEaUEeYveL3U37VaeWoFn81c3+Rr0znk=
Subject key identifier:   27:6D:1C:DC:1A:1D:3A:C4:3B:97:59:DC:A0:B3:76:21:10:F5:7D:6E
Certificate issuer:       /CN=F36B7F24AF/serialNumber=53509F4C3A74B5923B727C7D349A81CF315FB62B
Certificate serial:       28
Authority key identifier: 53:50:9F:4C:3A:74:B5:92:3B:72:7C:7D:34:9A:81:CF:31:5F:B6:2B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/U1CfTDp0tZI7cnx9NJqBzzFftis.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B7F24/7363D6B8940811F1B22253EFCE1D38B0/FCC8A5EEAF6711F1A22EAA0BCF1D38B0.roa
Signing time:             Sun 13 Sep 2026 11:40:58 +0000
ROA not before:           Sun 13 Sep 2026 11:40:54 +0000
ROA not after:            Sat 13 Sep 2031 11:40:54 +0000
asID:                     329477
IP address blocks:        2c0f:55a0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B7F24/7363D6B8940811F1B22253EFCE1D38B0/U1CfTDp0tZI7cnx9NJqBzzFftis.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B7F24/7363D6B8940811F1B22253EFCE1D38B0/U1CfTDp0tZI7cnx9NJqBzzFftis.mft
                          rsync://rpki.afrinic.net/repository/afrinic/U1CfTDp0tZI7cnx9NJqBzzFftis.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 20 Sep 2026 00:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 40 (0x28)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B7F24AF, serialNumber=53509F4C3A74B5923B727C7D349A81CF315FB62B
        Validity
            Not Before: Sep 13 11:40:54 2026 GMT
            Not After : Sep 13 11:40:54 2031 GMT
        Subject: CN=6aa68bca-13ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:2e:39:a9:3a:f8:b2:2d:64:17:16:b5:a4:af:
                    aa:92:b9:bf:d7:2e:32:21:c5:6d:69:6b:5f:ac:49:
                    ad:75:46:52:8c:9f:c3:c3:b2:da:75:70:5b:3f:c7:
                    3c:fb:d8:36:19:b1:86:6f:a2:d3:70:81:98:2e:b5:
                    85:ac:bc:1b:15:61:36:b6:87:7d:b0:9e:08:a4:24:
                    71:52:51:31:7d:8b:7f:a6:71:e6:4c:00:1e:c0:b4:
                    17:c4:1c:61:b4:e4:96:cc:40:58:f1:bf:c4:0b:51:
                    4b:21:b5:cd:e3:2d:1c:dc:c3:9e:81:a9:d1:cf:ae:
                    6b:71:27:9f:fc:91:1b:89:af:be:49:e7:ee:53:4b:
                    8a:e4:58:e1:6e:64:b0:a9:7a:80:0b:c6:7a:83:3f:
                    de:ee:19:2f:b8:77:a2:14:ce:75:01:b1:ea:ef:d3:
                    49:1c:fc:62:14:db:35:ed:af:85:b9:2b:6d:74:4a:
                    74:ba:20:86:07:af:14:66:bc:8d:51:c0:a3:18:a1:
                    47:fe:79:41:90:7a:91:8b:2a:3e:05:4a:c6:9e:7e:
                    3e:75:33:00:59:5c:be:21:4b:75:98:2d:75:8f:d3:
                    1c:c2:70:7a:7f:48:b6:9f:cc:7d:81:52:42:92:46:
                    51:e4:67:c7:af:c7:70:7b:c4:be:45:b7:dc:83:5e:
                    9a:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:6D:1C:DC:1A:1D:3A:C4:3B:97:59:DC:A0:B3:76:21:10:F5:7D:6E
            X509v3 Authority Key Identifier:
                keyid:53:50:9F:4C:3A:74:B5:92:3B:72:7C:7D:34:9A:81:CF:31:5F:B6:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B7F24/7363D6B8940811F1B22253EFCE1D38B0/U1CfTDp0tZI7cnx9NJqBzzFftis.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/U1CfTDp0tZI7cnx9NJqBzzFftis.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B7F24/7363D6B8940811F1B22253EFCE1D38B0/FCC8A5EEAF6711F1A22EAA0BCF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:55a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         2e:37:d4:88:13:8c:9f:83:dc:0f:b6:85:83:ef:67:25:65:42:
         76:8c:bd:03:98:6d:34:3c:fc:1c:ea:3c:d5:51:f5:8d:27:17:
         29:f4:8c:a6:3b:be:9f:aa:a4:17:26:3b:88:e2:c9:63:29:0f:
         81:f6:9b:61:2c:28:47:49:06:2f:5a:18:77:2e:18:e5:db:af:
         c5:59:5f:38:7b:6a:ca:8d:e3:3d:c6:21:16:1b:f8:8a:33:98:
         20:9b:5a:bb:1c:0b:5b:31:f5:ea:d1:f7:7f:f1:d1:93:e4:78:
         f9:8f:75:90:41:ef:f8:ef:e1:00:64:d2:98:14:56:55:84:47:
         03:bc:c9:af:74:db:17:e2:28:63:50:08:ad:0d:56:85:ae:fd:
         81:c4:3c:78:c8:c9:c1:0b:69:54:6c:da:b4:6d:17:96:fc:f8:
         bc:5a:b7:66:f3:02:33:ef:87:e2:f9:2a:f6:95:81:88:0b:c3:
         a9:ef:81:1e:25:fa:d0:ae:b1:e9:fe:19:7b:39:7c:72:58:a2:
         6e:33:1c:36:d4:9a:e4:7f:0d:27:80:8b:46:29:e5:59:2d:71:
         9e:35:52:5b:1e:31:6a:3e:ee:8d:9c:2d:77:e2:5d:92:59:4a:
         0a:8f:d5:79:aa:90:c8:30:f6:bc:a5:f1:da:83:a5:5c:ff:c0:
         60:af:34:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----