Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36BCC19/F6336432550111ECB65B497AD8A014CE/6102702E926911F18CD387A1CE1D38B0.roa
File:                     6102702E926911F18CD387A1CE1D38B0.roa (raw, json)
Hash identifier:          wlFhrMwDQWEukdgHUfz2btTKwMRTeU8PJVqB0Z0/5s4=
Subject key identifier:   F8:BF:09:90:36:56:55:4F:6A:DF:76:04:A7:98:DE:28:5F:53:A0:DD
Certificate issuer:       /CN=F36BCC19AF/serialNumber=87C277EA5445529DD06B2FE5EE9F33CDC7CE84E0
Certificate serial:       06ED
Authority key identifier: 87:C2:77:EA:54:45:52:9D:D0:6B:2F:E5:EE:9F:33:CD:C7:CE:84:E0
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/h8J36lRFUp3Qay_l7p8zzcfOhOA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BCC19/F6336432550111ECB65B497AD8A014CE/6102702E926911F18CD387A1CE1D38B0.roa
Signing time:             Fri 07 Aug 2026 14:07:52 +0000
ROA not before:           Fri 07 Aug 2026 14:07:48 +0000
ROA not after:            Thu 07 Aug 2036 14:07:48 +0000
asID:                     328250
IP address blocks:        102.220.40.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36BCC19/F6336432550111ECB65B497AD8A014CE/h8J36lRFUp3Qay_l7p8zzcfOhOA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36BCC19/F6336432550111ECB65B497AD8A014CE/h8J36lRFUp3Qay_l7p8zzcfOhOA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/h8J36lRFUp3Qay_l7p8zzcfOhOA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 16 Sep 2026 02:32:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1773 (0x6ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BCC19AF, serialNumber=87C277EA5445529DD06B2FE5EE9F33CDC7CE84E0
        Validity
            Not Before: Aug  7 14:07:48 2026 GMT
            Not After : Aug  7 14:07:48 2036 GMT
        Subject: CN=6a75e6b8-0f01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:fd:81:3b:37:c7:34:47:b0:fa:5d:d7:0b:67:
                    ea:80:4d:ca:bd:3b:44:54:94:34:c1:79:68:5d:e5:
                    f6:db:93:5b:3b:4d:a5:dc:97:bc:3e:80:9a:ee:22:
                    62:6a:80:08:e8:66:e5:49:26:ab:44:26:7b:b4:c3:
                    f9:6d:9e:e7:d0:91:38:33:60:a6:93:df:d1:bb:06:
                    7d:f1:14:f8:e4:26:62:dc:4d:c6:40:6e:3e:78:12:
                    1f:88:1f:92:88:3e:15:a4:59:30:54:78:06:5f:db:
                    b3:98:b0:a4:07:fd:27:01:30:47:01:73:a6:74:58:
                    e1:d0:be:fb:84:07:78:9a:e6:56:90:80:63:02:01:
                    1e:7c:5e:b4:c2:89:66:07:59:a6:4f:83:d1:04:2d:
                    5c:1f:72:4c:09:06:d7:6c:a0:8b:b8:41:68:43:de:
                    db:e3:a2:1f:c7:a4:da:94:8b:2b:e8:33:d0:bc:8c:
                    28:a8:da:33:d9:b7:6b:77:db:03:d9:f7:2c:80:6e:
                    3d:cb:7a:4f:be:66:fb:8f:8d:eb:5c:3f:ba:7d:2e:
                    1c:6e:36:fd:af:17:a8:d1:8d:d3:72:f3:d9:67:bd:
                    22:ff:35:21:6b:80:c1:c2:aa:ea:27:ac:2f:97:21:
                    bd:ca:9a:6c:27:02:b7:20:c3:a9:64:80:48:e8:51:
                    2e:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:BF:09:90:36:56:55:4F:6A:DF:76:04:A7:98:DE:28:5F:53:A0:DD
            X509v3 Authority Key Identifier:
                keyid:87:C2:77:EA:54:45:52:9D:D0:6B:2F:E5:EE:9F:33:CD:C7:CE:84:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BCC19/F6336432550111ECB65B497AD8A014CE/h8J36lRFUp3Qay_l7p8zzcfOhOA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/h8J36lRFUp3Qay_l7p8zzcfOhOA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BCC19/F6336432550111ECB65B497AD8A014CE/6102702E926911F18CD387A1CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.220.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ba:57:6e:a3:7b:c9:18:99:dd:b2:0f:2d:1b:33:9d:3f:f2:3a:
         76:85:94:07:c0:a1:9a:96:1c:2c:8e:8a:61:9b:85:8f:8c:cb:
         ed:33:40:75:4c:1e:be:6e:12:f9:c6:97:19:3e:24:17:1c:cd:
         b5:31:e7:b8:25:b9:bf:e2:bd:ab:0e:17:55:98:de:d1:39:ce:
         55:72:10:fb:53:54:f4:6e:39:9a:9f:ff:7f:2e:5d:f9:5b:c7:
         f8:84:98:9d:8f:2c:88:5a:d7:28:c2:f0:6b:88:22:ff:43:b0:
         2f:38:1d:86:2e:6e:3b:3d:2d:e4:0d:bd:62:b3:fe:20:4c:48:
         53:ee:57:17:9c:f2:cc:5f:a9:24:3e:be:a3:75:5a:83:03:21:
         2e:4c:7d:ea:85:42:02:ed:4a:7d:26:7f:07:f6:71:f4:73:84:
         8d:39:4a:e1:f3:55:ba:3c:89:f0:59:17:90:37:5f:ab:41:e7:
         48:53:84:db:f8:84:69:a8:40:cf:2a:3d:62:ff:3e:01:9d:48:
         e3:3d:dc:93:c3:f1:f7:ae:c0:1d:ed:55:66:45:08:2e:8c:2e:
         6b:72:46:84:cf:33:a2:e3:c3:90:f2:47:e0:89:fa:a2:5d:7b:
         be:f4:60:17:e7:ce:a0:86:7f:57:26:06:c8:37:56:75:f7:32:
         d4:05:49:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----