Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36BE2ED/2C4CE81097DF11EDB38878F3F1222468/ADB9B708995B11F1A1CA01C8CE1D38B0.roa
File:                     ADB9B708995B11F1A1CA01C8CE1D38B0.roa (raw, json)
Hash identifier:          cXwKEysGRT5pt4r3qpVk9S3HdJJILQ9myg0ojU6TlsY=
Subject key identifier:   12:32:FD:0D:9B:4B:8D:60:54:11:FA:5B:A2:67:D2:85:7B:39:AD:B9
Certificate issuer:       /CN=F36BE2EDAF/serialNumber=742FA2030FA40C4B1F29E063FF32E7053009FA33
Certificate serial:       054A
Authority key identifier: 74:2F:A2:03:0F:A4:0C:4B:1F:29:E0:63:FF:32:E7:05:30:09:FA:33
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/dC-iAw-kDEsfKeBj_zLnBTAJ-jM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BE2ED/2C4CE81097DF11EDB38878F3F1222468/ADB9B708995B11F1A1CA01C8CE1D38B0.roa
Signing time:             Sun 16 Aug 2026 10:17:26 +0000
ROA not before:           Sun 16 Aug 2026 10:17:22 +0000
ROA not after:            Wed 31 Dec 2036 10:17:22 +0000
asID:                     33779
IP address blocks:        102.201.180.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36BE2ED/2C4CE81097DF11EDB38878F3F1222468/dC-iAw-kDEsfKeBj_zLnBTAJ-jM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36BE2ED/2C4CE81097DF11EDB38878F3F1222468/dC-iAw-kDEsfKeBj_zLnBTAJ-jM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/dC-iAw-kDEsfKeBj_zLnBTAJ-jM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 12 Sep 2026 03:10:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1354 (0x54a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BE2EDAF, serialNumber=742FA2030FA40C4B1F29E063FF32E7053009FA33
        Validity
            Not Before: Aug 16 10:17:22 2026 GMT
            Not After : Dec 31 10:17:22 2036 GMT
        Subject: CN=6a818e36-9bf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:22:dc:b4:2b:91:d4:ae:7f:bd:b9:61:81:ac:
                    99:b6:ad:25:ea:2e:7c:55:e7:5c:93:34:32:6d:28:
                    26:93:c5:92:9d:8b:8f:18:77:7f:cf:43:fd:a3:86:
                    f3:ac:69:0f:3a:a7:57:cb:68:23:a6:e9:44:7b:f9:
                    d5:2c:8e:5d:36:e6:5f:b4:70:44:41:b7:79:6c:28:
                    01:17:d0:91:00:1e:52:ea:ab:ed:ce:97:18:b9:b0:
                    fa:7f:dc:f5:e5:f7:0e:a1:c7:56:8f:2a:95:c2:c6:
                    b7:6f:c7:62:bd:ee:26:bb:82:27:b5:12:73:36:2f:
                    3e:91:67:80:79:0e:b5:d4:8e:2a:ef:29:4f:ae:93:
                    ae:76:25:3d:00:ce:72:b0:a5:37:a7:74:88:5f:12:
                    f3:fe:56:75:a1:d8:85:de:6b:da:74:d3:4b:3d:7e:
                    a1:a1:5d:fd:81:e4:42:79:f5:11:d3:23:db:8e:9d:
                    b6:d3:cc:12:ad:3f:95:49:48:76:aa:8c:97:e9:a9:
                    e6:4f:40:7f:4d:61:73:31:94:e8:16:97:63:8f:ab:
                    1e:e8:c6:5a:cf:8a:59:02:00:3e:e2:1c:fd:6f:fe:
                    7b:98:11:7c:d2:82:bc:25:27:03:03:1e:e1:c3:3c:
                    71:6e:bb:56:ab:18:e7:85:4e:47:64:55:de:8c:70:
                    e0:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:32:FD:0D:9B:4B:8D:60:54:11:FA:5B:A2:67:D2:85:7B:39:AD:B9
            X509v3 Authority Key Identifier:
                keyid:74:2F:A2:03:0F:A4:0C:4B:1F:29:E0:63:FF:32:E7:05:30:09:FA:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BE2ED/2C4CE81097DF11EDB38878F3F1222468/dC-iAw-kDEsfKeBj_zLnBTAJ-jM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/dC-iAw-kDEsfKeBj_zLnBTAJ-jM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BE2ED/2C4CE81097DF11EDB38878F3F1222468/ADB9B708995B11F1A1CA01C8CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.201.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1e:67:fa:5f:5c:f1:81:cc:b7:44:93:c6:32:5e:c8:89:f4:6b:
         10:4b:1d:82:25:9c:be:54:9c:53:45:0f:6c:c7:f8:c6:3a:f4:
         6d:bc:a0:ff:62:23:96:60:41:68:f3:b3:b4:9c:da:9e:2b:d1:
         f8:7d:bc:eb:a2:6e:c1:19:78:b5:e8:2e:d4:50:18:4c:5d:56:
         09:4e:d2:0a:81:e4:00:56:c5:be:f9:df:d6:aa:11:35:b8:e8:
         da:46:ef:87:e4:8d:19:a8:da:97:d5:5f:db:d9:64:80:54:c4:
         b5:87:d7:a4:c1:d8:46:89:cc:b5:81:85:4c:76:b1:b6:bd:bf:
         97:50:ec:6b:16:d5:7a:57:fc:4c:71:fd:6b:96:fe:61:15:cd:
         82:4b:f9:23:38:44:c8:6a:d9:d3:35:a9:6d:79:b4:68:05:ed:
         c6:b3:f6:2c:ff:2b:85:1b:65:1d:0b:d2:e0:b3:e8:3c:50:08:
         42:af:54:4f:99:66:d4:6c:6f:82:ab:2a:58:ea:a9:bb:f7:35:
         86:2a:2f:c6:c5:d6:bb:a5:b3:9d:62:86:3b:c1:8c:ef:c8:2e:
         ee:d4:12:4c:42:21:44:0b:c1:c7:c6:64:e8:91:a8:4d:fd:6c:
         c9:b3:a9:d4:9d:a4:1f:72:52:fb:59:d6:a2:a2:5f:31:6d:e8:
         da:2a:c2:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----