Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/1B4C6EC8BD9711F1A5403CE6CE1D38B0.roa
File:                     1B4C6EC8BD9711F1A5403CE6CE1D38B0.roa (raw, json)
Hash identifier:          iA+C95BCeWsQHSh9k/0rQPbSQq37avEUCJfMUuUMU1s=
Subject key identifier:   DF:C2:CB:3F:B3:12:81:6C:45:1B:EC:78:3B:81:2A:95:B1:3F:39:2D
Certificate issuer:       /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial:       1A49
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/1B4C6EC8BD9711F1A5403CE6CE1D38B0.roa
Signing time:             Thu 01 Oct 2026 12:53:32 +0000
ROA not before:           Thu 01 Oct 2026 12:53:28 +0000
ROA not after:            Sun 01 Oct 2028 12:53:28 +0000
asID:                     53340
IP address blocks:        102.129.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 05 Oct 2026 00:08:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6729 (0x1a49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
        Validity
            Not Before: Oct  1 12:53:28 2026 GMT
            Not After : Oct  1 12:53:28 2028 GMT
        Subject: CN=6abe57cc-e1be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b9:1d:5a:06:c2:c6:c0:b1:3d:83:77:00:b0:
                    4f:a7:59:6e:29:b6:4f:43:08:12:c9:ca:84:db:db:
                    cc:61:38:9d:d0:4e:80:0a:89:ce:67:72:19:64:a6:
                    e6:b1:83:17:b2:16:ec:a6:dc:ed:63:dc:17:85:0e:
                    7b:6a:ce:22:ef:a7:c6:42:ac:41:91:40:8e:d2:9a:
                    28:96:3b:f1:dd:79:94:b4:0d:d1:2f:ba:8b:85:cd:
                    07:50:a2:a8:ac:d6:b6:49:29:34:03:b6:69:b1:f3:
                    3d:4b:c5:97:9f:f3:09:6b:3d:c4:3b:05:2e:9e:2d:
                    8d:2c:e8:ba:70:fc:c2:72:d3:87:8c:47:db:e8:41:
                    b6:b5:a0:66:88:49:90:c7:a2:7c:1b:3e:c4:e1:6b:
                    cb:ce:92:d5:22:a7:07:1f:e8:ae:62:dc:a8:fb:3a:
                    e2:c8:fd:37:9f:5c:bf:e9:db:2a:7b:35:e5:69:16:
                    94:f5:6c:4a:6c:89:ad:ca:91:1b:ab:c2:3e:52:3a:
                    2e:c4:30:a8:ba:da:39:ac:a8:af:d5:b0:92:34:0b:
                    24:93:d7:17:c3:fc:ca:05:88:15:73:95:03:f7:20:
                    81:fe:1d:e2:b6:73:a3:ee:f7:23:af:a9:a4:f2:52:
                    79:89:b4:6d:56:34:23:e3:ac:3a:5f:85:9d:64:b0:
                    0e:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:C2:CB:3F:B3:12:81:6C:45:1B:EC:78:3B:81:2A:95:B1:3F:39:2D
            X509v3 Authority Key Identifier:
                keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/1B4C6EC8BD9711F1A5403CE6CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.129.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:f1:4f:87:08:65:23:cd:4b:fd:33:c2:c2:52:2d:62:2c:ee:
         8d:e2:2c:e2:14:5e:17:63:3b:29:5a:3d:96:ad:c5:af:21:8f:
         73:58:ed:99:b4:b9:42:72:f1:9b:b9:76:cc:24:c5:1b:5b:d2:
         4d:2b:3b:d6:07:be:8c:5a:a2:8c:ef:7a:0b:d8:62:48:0b:10:
         d9:ef:64:45:ea:50:8e:ec:26:24:17:92:f7:0e:19:c6:b8:45:
         8a:58:c1:d9:40:c5:10:ba:34:4c:65:53:8f:e7:94:10:ef:c7:
         fd:27:12:fe:3c:74:54:cd:cd:af:1c:46:1f:34:e1:17:dd:65:
         d3:bb:8f:b3:4a:5e:27:d4:67:bc:c9:29:a2:0e:c7:ce:e7:e3:
         9e:c1:db:3d:24:d0:f3:8c:60:fb:f2:6e:79:6f:a1:d4:d5:e0:
         3a:c9:7d:2f:e9:0e:06:60:b9:37:09:9c:e7:ec:c6:fd:a2:fe:
         6f:08:53:1d:3e:87:24:b5:44:69:be:cd:f4:d8:ea:32:49:29:
         74:77:7b:f7:5c:25:1e:dd:a0:99:d5:39:6a:69:64:b3:ec:92:
         fa:52:b9:36:73:d5:e2:bf:0d:14:dc:4e:9f:c9:82:24:94:66:
         f9:59:43:f6:75:a5:57:ac:18:77:75:4d:80:b2:1e:38:8e:8b:
         b8:96:b9:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----