Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/3508202EC33611F1884067A6CE1D38B0.roa
File:                     3508202EC33611F1884067A6CE1D38B0.roa (raw, json)
Hash identifier:          3DBJ62PkQYIdkYs8sv7gmNBKVYBV58hydfIyhDlEv2A=
Subject key identifier:   39:07:14:42:4F:59:64:5A:ED:03:1A:A0:D8:5F:1F:A3:C7:6A:74:7A
Certificate issuer:       /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial:       1A68
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/3508202EC33611F1884067A6CE1D38B0.roa
Signing time:             Thu 08 Oct 2026 16:35:01 +0000
ROA not before:           Thu 08 Oct 2026 16:34:57 +0000
ROA not after:            Sun 08 Oct 2028 16:34:57 +0000
asID:                     401362
IP address blocks:        102.129.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 12 Oct 2026 00:08:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6760 (0x1a68)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
        Validity
            Not Before: Oct  8 16:34:57 2026 GMT
            Not After : Oct  8 16:34:57 2028 GMT
        Subject: CN=6ac7c635-2b5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:e7:33:87:56:95:05:96:eb:7e:46:69:e4:30:
                    33:43:c5:4e:94:6f:3e:2e:0d:f3:04:22:4c:8f:56:
                    dc:4b:c2:70:e0:5b:57:ce:8f:4d:8f:a7:74:e9:61:
                    cc:f1:6b:26:02:2b:72:d5:d4:bd:53:77:81:3e:c9:
                    d6:14:9e:ce:7b:36:62:eb:04:97:be:17:6b:da:51:
                    f6:25:e9:3b:01:ae:af:12:80:d7:da:1f:e6:01:37:
                    c3:e5:21:25:6e:43:15:99:02:45:b7:bc:2e:cc:ac:
                    3f:b9:f9:38:58:03:d8:76:72:31:d0:a0:4a:56:45:
                    a7:dc:44:3b:8e:95:ea:95:ca:cf:dd:46:1e:a7:de:
                    a0:32:da:4c:5e:85:cd:6d:0e:d3:9e:1d:21:3b:21:
                    ea:d5:08:39:42:32:74:74:11:6d:e8:a0:4f:c5:e0:
                    41:ea:5e:da:07:c2:b4:db:81:17:7c:b0:bc:d9:5a:
                    4e:9b:93:d0:75:79:36:6d:d8:52:b5:69:c7:46:81:
                    3b:cb:de:05:eb:f3:da:20:75:84:56:9c:02:3f:d1:
                    e9:b5:db:2c:e3:7b:d4:c9:13:22:5e:21:11:10:64:
                    46:a4:69:4b:ab:ac:9f:18:a1:5f:40:f9:35:82:00:
                    05:fc:b2:f6:9c:16:80:95:c3:3b:c7:46:c4:67:8a:
                    46:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:07:14:42:4F:59:64:5A:ED:03:1A:A0:D8:5F:1F:A3:C7:6A:74:7A
            X509v3 Authority Key Identifier:
                keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/3508202EC33611F1884067A6CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.129.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:ef:ac:e0:df:6c:f8:2e:ed:f1:74:86:82:b0:bf:31:11:b4:
         bd:52:52:b1:7f:66:c4:fd:f0:8a:a3:7a:7c:ce:f0:a5:42:b0:
         4b:0e:60:1c:81:a5:27:0f:09:16:12:e0:09:65:8e:4e:dc:ee:
         73:58:11:9f:09:78:83:87:c8:7b:4b:ab:db:fc:9a:e2:16:6d:
         e3:7c:b6:7c:38:bd:51:c3:a1:80:dd:bf:0d:60:3c:9e:b6:1b:
         11:77:12:84:ea:8d:8b:0f:84:29:4b:ab:c0:bd:1d:5a:94:36:
         a2:62:b4:69:85:de:ec:71:6f:e9:5c:94:53:7e:4c:1f:19:93:
         00:0b:81:e9:7c:77:8e:38:a2:56:99:d9:b5:46:e8:f2:02:5c:
         b3:23:86:9b:e3:a9:ad:96:8c:17:77:66:36:d4:61:e6:3f:89:
         a1:5c:2b:24:66:5a:39:fb:e6:69:bd:e1:49:e2:a6:f2:b9:29:
         96:d1:50:a4:e2:35:cc:ea:70:25:c2:80:1c:6a:a3:c3:ff:c3:
         d2:af:00:0f:57:75:d2:e3:df:84:b9:96:15:79:94:77:23:5d:
         eb:d2:e9:29:45:37:53:f8:e3:de:0d:14:33:fd:c2:7e:85:1a:
         c2:93:65:a3:4b:ae:7b:9e:25:9f:c4:dc:6d:5e:d1:63:de:c2:
         83:6f:cb:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----