Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/1DDE792EA9D311F1B81E74C3CE1D38B0.roa
File:                     1DDE792EA9D311F1B81E74C3CE1D38B0.roa (raw, json)
Hash identifier:          d2Kx0dAeqz87uxRAAuKxsvOR/RWBafkkHDhQDZVvfzM=
Subject key identifier:   7C:3A:EC:A4:A0:80:A7:2D:A3:B7:CC:88:20:A2:0C:66:A2:9D:BE:B7
Certificate issuer:       /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial:       19F1
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/1DDE792EA9D311F1B81E74C3CE1D38B0.roa
Signing time:             Sun 06 Sep 2026 09:12:43 +0000
ROA not before:           Sun 06 Sep 2026 09:12:39 +0000
ROA not after:            Wed 06 Sep 2028 09:12:39 +0000
asID:                     834
IP address blocks:        102.129.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 08 Sep 2026 00:07:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6641 (0x19f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
        Validity
            Not Before: Sep  6 09:12:39 2026 GMT
            Not After : Sep  6 09:12:39 2028 GMT
        Subject: CN=6a9d2e8b-c597
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:4c:1c:da:15:97:b9:88:5b:5f:b2:f7:6e:f9:
                    68:cc:6b:46:ba:78:ad:01:a6:d6:85:32:40:16:b1:
                    2f:2e:3a:91:72:61:b5:a7:98:18:df:33:86:04:70:
                    db:c7:3a:53:20:9e:76:29:bf:f8:1e:e4:27:f7:59:
                    65:07:4a:88:e6:92:83:6d:2d:18:df:87:25:90:eb:
                    30:9d:b0:0c:3f:dc:b6:bc:c5:05:38:f6:2e:df:de:
                    f8:2d:29:40:89:65:40:18:16:54:a2:fd:b2:b4:ed:
                    3b:7e:c0:0c:bd:3a:7b:b5:80:df:bd:bb:cc:18:62:
                    07:aa:a8:75:cd:b7:40:d6:6b:c9:5f:7a:94:f2:28:
                    fa:12:04:56:94:c0:42:5d:84:96:ab:ad:cd:6d:2d:
                    63:22:72:d3:53:88:16:46:d2:03:38:ac:38:21:24:
                    10:18:7f:92:62:f9:b0:4f:2e:09:a1:49:b4:ca:bc:
                    e8:6e:91:5c:01:fe:dd:08:a4:5f:ef:98:60:26:ca:
                    92:35:de:29:a2:12:82:82:f0:e9:e7:aa:34:50:a7:
                    39:3c:93:cc:c5:1d:7b:0f:e2:c4:bd:ae:4d:88:d6:
                    b8:2d:71:b0:2d:e5:44:46:de:cf:8d:ce:3c:a6:dc:
                    ca:1d:85:2d:7e:13:b0:2d:1d:34:fa:87:36:81:85:
                    ba:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:3A:EC:A4:A0:80:A7:2D:A3:B7:CC:88:20:A2:0C:66:A2:9D:BE:B7
            X509v3 Authority Key Identifier:
                keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/1DDE792EA9D311F1B81E74C3CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.129.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:f2:09:d9:9b:af:76:48:ae:ef:04:90:96:21:9b:0c:91:78:
         90:0a:a3:42:5f:5a:63:a4:e7:e6:b9:04:d0:15:bb:a5:67:43:
         35:98:0a:c2:64:68:9f:ed:18:4d:e8:8e:05:ea:a6:b9:e8:67:
         61:75:b7:88:8e:30:07:68:ad:34:42:b1:34:ce:87:be:d6:85:
         c4:72:3c:59:4c:55:54:f7:36:30:a9:ae:88:e0:8c:fd:3d:76:
         c0:2b:25:c6:9d:41:01:64:6d:57:2c:bc:2a:87:ec:57:6e:b0:
         b0:c4:38:75:20:9d:75:51:e6:b1:72:57:b4:6c:da:db:c0:eb:
         b5:15:69:b1:8a:66:50:8b:6c:79:25:98:6f:e4:56:ea:74:06:
         49:40:09:93:49:3b:ec:a9:8d:65:5e:95:6d:4d:15:2d:96:ed:
         9d:8e:84:de:94:c1:98:e3:e4:77:c2:79:de:d2:94:48:8a:ed:
         1d:02:4a:1c:a1:a3:03:3d:c0:14:1e:da:10:02:39:26:f1:75:
         f6:c3:95:f3:4d:0a:31:d1:90:de:0d:dc:95:34:be:91:8e:48:
         4a:f1:33:21:b7:fd:84:e0:44:c6:6f:23:d1:54:6f:ed:2e:c7:
         be:f5:05:63:81:2c:ff:8e:fa:46:fa:c7:f1:be:61:fc:d2:62:
         27:43:ce:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----