Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/8C8FB168BE9011F18EC921BACE1D38B0.roa
File:                     8C8FB168BE9011F18EC921BACE1D38B0.roa (raw, json)
Hash identifier:          dajSqXLyf+PoYJBHaLaFlcLUjyYQxQAFB/XHFwke87Q=
Subject key identifier:   16:92:A0:B0:EF:EB:08:84:E5:EC:04:39:8B:CB:98:52:64:17:90:49
Certificate issuer:       /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial:       1A5C
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/8C8FB168BE9011F18EC921BACE1D38B0.roa
Signing time:             Fri 02 Oct 2026 18:39:07 +0000
ROA not before:           Fri 02 Oct 2026 18:39:03 +0000
ROA not after:            Mon 02 Oct 2028 18:39:03 +0000
asID:                     834
IP address blocks:        102.165.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 06 Oct 2026 01:19:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6748 (0x1a5c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
        Validity
            Not Before: Oct  2 18:39:03 2026 GMT
            Not After : Oct  2 18:39:03 2028 GMT
        Subject: CN=6abffa4b-9782
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:18:c1:35:ac:f7:a4:d5:b8:be:ea:6e:da:55:
                    d5:94:2d:a3:d0:7d:53:e8:1b:5e:33:9b:08:9c:7c:
                    88:7c:1b:68:74:08:7f:70:2b:dc:ad:8d:bf:35:f5:
                    c1:a4:ae:cf:36:58:fb:1b:06:64:1d:a3:88:64:9b:
                    62:95:91:16:90:0b:35:9e:14:6f:f6:e0:9e:5c:72:
                    e2:de:4f:48:c0:d4:b9:1a:b8:b1:75:4b:52:4d:6a:
                    5b:cd:2f:3e:54:15:eb:69:bc:f4:e3:30:ba:53:15:
                    5f:6d:fe:34:1a:62:1f:dc:4f:d9:4f:b0:48:18:f7:
                    4f:55:54:d3:54:98:b4:49:39:18:e4:09:ad:9c:b7:
                    85:c2:a1:71:b9:5c:a9:69:3f:36:e1:bf:56:e3:60:
                    e1:f6:bc:15:14:2f:fa:df:99:76:fd:b4:e2:b8:e5:
                    bd:98:8d:96:b7:4d:43:0c:e8:17:92:11:87:42:84:
                    4d:32:63:9f:81:98:0b:e8:f6:24:7d:f7:94:71:b5:
                    b6:39:85:1d:3f:d3:e9:65:94:cf:85:c2:d5:36:b6:
                    dc:c3:8a:76:19:93:91:a2:81:7c:0a:e8:97:2e:f0:
                    32:22:99:43:1e:3f:2a:ab:23:e3:a0:91:82:dc:b2:
                    f2:dd:6f:90:86:0a:1f:fc:56:f5:7c:06:a1:8c:3c:
                    6b:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:92:A0:B0:EF:EB:08:84:E5:EC:04:39:8B:CB:98:52:64:17:90:49
            X509v3 Authority Key Identifier:
                keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/8C8FB168BE9011F18EC921BACE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.165.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ce:19:ab:bd:da:23:0f:ed:31:8c:0b:72:da:e1:99:6c:54:8e:
         d3:cd:7e:d4:4a:f3:cd:54:d6:6c:1c:71:70:d3:d2:ff:e1:57:
         e7:31:ad:d3:00:38:64:d4:bc:47:75:9e:ff:12:0a:34:d5:15:
         b2:94:16:fa:58:23:08:4b:49:db:6f:91:ee:17:06:5f:6e:f9:
         0b:59:8f:01:77:01:87:1e:3c:72:51:20:90:f5:16:66:26:f6:
         91:5a:9c:58:1b:9f:f6:a9:ae:ce:f0:44:02:5b:a8:b4:18:92:
         bd:cd:56:65:76:5e:b3:78:57:e8:11:71:01:37:c2:a9:71:ee:
         58:e7:9a:b2:d0:ea:40:fe:09:11:07:ab:f2:ff:67:4a:a1:43:
         cd:e5:90:f6:1a:08:08:eb:6a:df:48:9a:9a:64:49:53:a0:2c:
         62:cf:1a:64:54:f0:6d:3b:eb:e5:f4:9b:d4:0b:9d:87:f7:1c:
         92:e9:12:32:9c:12:21:e3:80:c5:69:90:1a:57:f7:03:77:99:
         1b:ef:ea:2f:bf:1b:20:19:e5:be:69:c9:e7:c5:b6:fd:f1:98:
         f8:ee:7b:a8:72:9a:9e:76:30:46:00:b7:a5:09:25:e4:a5:5b:
         f1:b9:33:41:cb:77:9c:9b:b1:59:e7:75:97:3b:66:5a:31:03:
         88:ae:56:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----