Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/3CB359AEA6FF11F193185E15CF1D38B0.roa
File:                     3CB359AEA6FF11F193185E15CF1D38B0.roa (raw, json)
Hash identifier:          xpzgiF0j8RXP3zZrcrN+kfKDJEwym18Rhbt3mBeGWjc=
Subject key identifier:   31:58:49:28:8C:03:79:5C:A0:3E:7F:E4:AE:EA:6D:02:CB:A6:B7:46
Certificate issuer:       /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial:       19E4
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/3CB359AEA6FF11F193185E15CF1D38B0.roa
Signing time:             Wed 02 Sep 2026 18:50:59 +0000
ROA not before:           Wed 02 Sep 2026 18:50:55 +0000
ROA not after:            Sat 02 Sep 2028 18:50:55 +0000
asID:                     402265
IP address blocks:        102.165.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 05 Sep 2026 00:07:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6628 (0x19e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
        Validity
            Not Before: Sep  2 18:50:55 2026 GMT
            Not After : Sep  2 18:50:55 2028 GMT
        Subject: CN=6a987013-9868
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:21:cd:8c:88:30:7e:69:1c:dd:1f:f9:4a:2b:
                    a1:a6:b2:90:05:e7:11:79:49:b1:78:87:2a:b3:08:
                    bc:8a:f8:39:54:d3:3b:68:a4:3a:fe:db:8d:87:b8:
                    29:21:53:7d:bf:aa:7e:e3:28:59:43:2d:b6:5b:b0:
                    46:15:fd:8e:be:4a:e8:e9:11:59:fa:22:f0:b9:e1:
                    c2:24:9a:5d:4a:26:8b:1a:4b:8b:eb:a9:2d:8c:96:
                    53:34:4f:d2:b5:11:aa:11:be:01:18:38:25:6b:41:
                    7d:e5:e1:44:fc:f9:9c:cb:5c:cd:b4:bd:8b:3d:f8:
                    7b:ce:72:8c:88:b7:b8:b4:49:c9:fe:33:25:1b:0f:
                    ac:7d:a9:62:cc:f2:75:58:d6:82:4b:b9:b4:a6:36:
                    ee:e8:13:63:75:24:f7:4f:3d:8b:34:4c:95:af:51:
                    bf:87:9a:a6:67:c9:5e:28:fc:53:35:7b:72:05:0d:
                    89:62:cd:86:3b:29:7c:8f:21:3b:ab:48:01:c5:29:
                    78:1f:e7:09:57:c4:f3:cd:ef:5e:98:cc:82:d9:78:
                    26:0d:81:60:92:0d:f6:f6:d0:c2:08:d2:16:d3:8d:
                    f6:18:7a:3f:64:bf:53:1c:af:4c:88:65:14:88:8f:
                    99:ff:43:db:c2:cb:8c:88:87:8c:7c:51:c2:3d:e9:
                    f3:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:58:49:28:8C:03:79:5C:A0:3E:7F:E4:AE:EA:6D:02:CB:A6:B7:46
            X509v3 Authority Key Identifier:
                keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/3CB359AEA6FF11F193185E15CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.165.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:b6:52:2a:c1:ba:c0:a3:7d:d7:9c:06:63:1d:1c:c5:ed:2d:
         6c:7c:66:52:d3:14:23:5d:40:e1:75:66:8c:82:60:52:df:f1:
         3a:da:ce:ca:d9:4d:bf:8e:b6:8b:6e:c9:97:18:b6:eb:5d:cc:
         64:ad:e3:68:4a:5c:6f:69:5f:77:c3:13:d9:71:41:f7:58:ed:
         54:b8:c1:65:64:78:a4:bc:7b:29:53:19:bc:74:7a:99:4a:f9:
         6c:52:35:06:c4:f1:42:b8:42:e2:bd:c6:03:59:cd:2a:fb:a9:
         78:5d:0a:e4:2f:38:a6:07:30:6b:5d:ad:46:1b:37:5a:41:a7:
         ec:53:84:8e:d1:2a:e3:8d:a7:bd:5a:44:26:8e:ac:e4:e3:f0:
         26:76:51:ca:76:de:c2:8e:fa:34:cd:b3:01:cd:f7:29:77:3c:
         31:81:ef:f0:32:ea:aa:c6:fc:57:9d:6e:b1:92:52:20:6c:7f:
         b8:89:94:ea:c8:10:5e:1b:e4:38:09:5d:fc:69:73:fe:3d:6c:
         91:7d:c9:30:fd:23:87:db:9d:88:0b:7a:3b:b9:16:0e:24:a8:
         32:09:55:4c:53:aa:a1:82:5a:a0:d2:31:e7:82:c5:09:bc:e5:
         4f:cd:38:03:db:0d:7c:a3:87:a3:ef:15:53:7d:ce:26:34:d4:
         6d:90:09:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----