Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/93F68240BD9811F1B80A58EFCE1D38B0.roa
File:                     93F68240BD9811F1B80A58EFCE1D38B0.roa (raw, json)
Hash identifier:          JavoDf3XBnlwS30QIvroMbblqC0P35Xg11Leszc3NEs=
Subject key identifier:   36:F4:A6:26:14:34:99:12:DC:6B:52:85:1F:45:81:E6:EA:04:E4:4D
Certificate issuer:       /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial:       1A4D
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/93F68240BD9811F1B80A58EFCE1D38B0.roa
Signing time:             Thu 01 Oct 2026 13:04:04 +0000
ROA not before:           Thu 01 Oct 2026 13:04:00 +0000
ROA not after:            Sun 01 Oct 2028 13:04:00 +0000
asID:                     834
IP address blocks:        102.129.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 05 Oct 2026 00:08:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6733 (0x1a4d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
        Validity
            Not Before: Oct  1 13:04:00 2026 GMT
            Not After : Oct  1 13:04:00 2028 GMT
        Subject: CN=6abe5a44-07d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e2:da:78:bb:cb:57:86:95:2f:7e:06:a8:31:
                    7d:7d:ff:3f:38:61:b2:b5:ab:13:8d:32:45:54:77:
                    93:66:83:bb:7e:4f:48:a4:6a:54:61:e4:c1:00:45:
                    e5:4c:13:96:94:68:b9:1c:36:38:53:7f:59:c7:50:
                    2c:2b:02:5d:d4:c2:4b:0f:c6:71:5c:df:c4:0e:e9:
                    b5:c4:24:57:ea:22:cd:af:d2:ab:34:72:f3:34:2a:
                    50:4a:06:5d:ed:9f:64:44:33:ba:9e:2c:27:aa:53:
                    0a:db:f6:4e:3d:91:a2:c6:e5:f6:75:62:ae:16:26:
                    00:09:ea:19:04:5f:cc:8c:36:a0:8b:15:e6:2a:b2:
                    6c:b5:72:6b:f0:b2:de:3f:6e:52:62:af:8b:81:d5:
                    85:82:6a:98:51:fa:2e:63:07:33:85:a6:90:fc:43:
                    cf:93:8c:92:b2:5e:28:61:d8:c8:4c:a8:71:93:e5:
                    fc:93:1f:d8:56:06:72:0a:d3:74:b2:3a:cb:3c:4b:
                    fc:94:5d:9c:9f:e1:4b:d8:40:3c:8d:4a:5c:62:80:
                    98:bf:47:ad:47:3e:39:2c:d6:18:78:a9:d5:49:52:
                    31:8f:8c:4d:28:5f:2a:76:69:1c:77:f1:ae:71:d6:
                    7c:f3:48:be:af:05:be:85:71:a0:60:28:14:11:f6:
                    68:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:F4:A6:26:14:34:99:12:DC:6B:52:85:1F:45:81:E6:EA:04:E4:4D
            X509v3 Authority Key Identifier:
                keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/93F68240BD9811F1B80A58EFCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.129.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:aa:47:ad:87:24:71:b1:0b:22:fb:d1:09:67:fb:4c:5d:e9:
         28:3e:95:46:af:ab:15:c3:e3:77:00:74:26:3d:8d:4a:71:b4:
         6b:8c:9c:86:64:a5:8d:27:6c:25:08:54:03:18:0b:3b:12:dd:
         f4:c3:68:ff:db:55:9d:8e:3e:8e:02:43:0a:bd:55:7e:41:81:
         dd:00:00:4c:0a:19:80:62:73:5d:ea:4c:51:1d:b8:31:a3:24:
         fc:86:a8:58:50:d0:6a:1c:49:a7:5b:52:d4:83:04:1a:49:bb:
         49:c6:a8:60:4b:6e:d6:d5:54:d3:35:24:ac:67:99:42:3f:45:
         df:2d:07:a0:2f:ed:53:b8:83:84:13:a0:8f:37:1e:a2:7c:5a:
         31:e1:9c:1b:ce:94:40:55:59:1a:af:f6:c3:eb:e0:af:cf:42:
         21:62:38:08:05:08:9d:9a:f4:99:71:bc:61:78:b7:fc:4c:7b:
         26:69:49:9a:da:00:a4:d7:87:46:b4:17:2c:22:81:64:32:80:
         7a:ff:f7:54:4d:38:cb:6b:cd:09:a9:7c:2f:5a:8a:a9:97:3e:
         eb:6d:4e:18:b2:b6:e7:0c:2d:da:c2:ce:9c:c2:d0:ed:c4:e5:
         de:d0:ad:30:ef:f1:20:e6:b0:2e:55:a9:cd:94:52:c6:af:22:
         9a:a3:d3:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----