Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/9E4267D4C70F11F1B6492AC6CE1D38B0.roa
File:                     9E4267D4C70F11F1B6492AC6CE1D38B0.roa (raw, json)
Hash identifier:          j9J8k6qcQmTKPCLc+wyQLZ6nx/3lFIa42lBLENjFNds=
Subject key identifier:   AA:72:50:70:BD:63:23:31:EA:8A:A6:A2:25:4E:F7:CB:21:C5:5A:F3
Certificate issuer:       /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial:       1A87
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/9E4267D4C70F11F1B6492AC6CE1D38B0.roa
Signing time:             Tue 13 Oct 2026 14:08:52 +0000
ROA not before:           Tue 13 Oct 2026 14:08:48 +0000
ROA not after:            Fri 13 Oct 2028 14:08:48 +0000
asID:                     212238
IP address blocks:        102.165.33.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 17 Oct 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6791 (0x1a87)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
        Validity
            Not Before: Oct 13 14:08:48 2026 GMT
            Not After : Oct 13 14:08:48 2028 GMT
        Subject: CN=6ace3b74-d388
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:8e:51:a4:28:e7:ef:be:94:ec:f5:4b:f4:58:
                    96:c0:28:bb:f1:36:6d:bd:f7:f8:ea:f9:c2:d1:ac:
                    53:94:71:58:30:db:c8:ba:59:60:2e:54:bd:2a:f3:
                    d6:6c:cb:df:32:f5:5d:a2:d0:32:1b:84:ee:d8:f4:
                    1f:6e:61:c7:ea:39:f2:fe:79:c1:59:b6:22:20:bc:
                    28:30:4c:ca:d9:a2:c0:5a:65:ac:d2:9d:b9:e2:0a:
                    92:01:9a:74:7c:f1:12:8d:20:c9:06:80:fe:05:3a:
                    55:8b:92:e3:16:58:48:9e:27:f1:aa:9b:47:80:46:
                    4d:a7:7e:a2:38:a2:fc:1f:8b:5b:60:b8:15:06:34:
                    e0:33:69:05:3a:bc:88:85:07:40:14:bf:73:6c:15:
                    0f:fd:d6:dd:2f:a8:89:a4:03:4f:f1:3a:93:52:08:
                    de:86:20:ff:30:44:bb:6b:fd:b8:04:c9:71:32:4c:
                    08:47:2b:78:63:fb:62:86:48:e8:2f:68:ed:00:4d:
                    73:39:cb:ae:fa:b4:6d:95:4e:93:b4:ed:96:1e:8a:
                    02:54:a7:eb:e8:35:43:a2:46:cd:4b:79:8b:b6:0d:
                    73:fe:78:41:18:fa:54:82:fc:7a:fa:e6:b5:d3:c2:
                    02:d0:ba:a8:d4:f2:8c:84:40:2f:f4:11:e5:46:cd:
                    66:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:72:50:70:BD:63:23:31:EA:8A:A6:A2:25:4E:F7:CB:21:C5:5A:F3
            X509v3 Authority Key Identifier:
                keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/9E4267D4C70F11F1B6492AC6CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.165.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:db:66:07:98:c3:3d:35:1d:54:a6:8d:31:27:44:fc:2c:91:
         96:ba:da:b2:3b:63:1f:d8:bb:eb:6a:45:9f:d2:37:46:eb:e8:
         b4:9e:0f:c5:95:9d:d5:a5:3a:4f:c5:fc:29:c5:57:17:9e:93:
         b6:78:d1:da:55:fe:4f:20:53:c3:5a:5c:49:7f:a6:5f:61:46:
         4e:48:af:82:48:98:32:0b:2c:d6:34:d3:8f:be:23:a1:0d:6c:
         c9:42:ed:79:19:3e:a0:c2:26:90:c4:94:8b:d6:0e:44:77:f7:
         b7:34:85:e6:7e:9c:c3:c0:7f:44:16:d9:39:dd:7e:40:94:fb:
         e0:87:b6:0c:97:00:3d:02:ef:54:c5:e1:72:9d:e0:42:c6:e6:
         b0:13:08:d8:18:ab:dd:f9:90:e0:d9:cd:9f:d9:3a:52:29:ee:
         4c:1d:20:d2:0a:4c:fa:99:3f:dc:fb:c6:38:be:15:1e:7e:07:
         0a:cc:90:57:91:e4:df:83:c7:c1:86:b6:e6:1c:a5:35:fa:42:
         70:0e:b5:c9:fa:cc:33:e8:82:98:87:57:bc:97:59:7b:90:08:
         8f:90:34:53:6c:1b:bd:2c:d3:29:2f:5d:07:40:66:78:e2:69:
         a8:25:f2:83:07:dd:30:5b:0a:06:6c:ce:dc:c0:02:37:f1:40:
         9c:b9:46:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----