Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/A2328022AC0C11F1840BCEBACE1D38B0.roa
File:                     A2328022AC0C11F1840BCEBACE1D38B0.roa (raw, json)
Hash identifier:          F1JrM8nMhoeFeTUbwFEVgdLtcipuS7zqmjTkNFrpSas=
Subject key identifier:   DC:01:5E:66:93:9E:EC:21:95:30:E4:91:14:D3:AA:4E:DA:B2:38:76
Certificate issuer:       /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial:       19F7
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/A2328022AC0C11F1840BCEBACE1D38B0.roa
Signing time:             Wed 09 Sep 2026 05:09:29 +0000
ROA not before:           Wed 09 Sep 2026 05:09:25 +0000
ROA not after:            Sat 09 Sep 2028 05:09:25 +0000
asID:                     834
IP address blocks:        102.129.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 11 Sep 2026 05:09:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6647 (0x19f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
        Validity
            Not Before: Sep  9 05:09:25 2026 GMT
            Not After : Sep  9 05:09:25 2028 GMT
        Subject: CN=6aa0ea09-6ad3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:19:8c:e3:a3:57:61:08:55:a1:8b:5e:18:37:
                    4f:2f:97:ae:72:4f:17:a2:2e:41:30:ab:5f:56:1f:
                    ff:2f:12:02:fd:43:44:f3:38:a1:7e:5d:cc:8c:f5:
                    54:96:f3:58:3e:41:49:7f:15:9b:21:89:29:2a:4d:
                    d9:12:a4:b2:55:41:91:62:bc:21:94:82:7f:d8:0e:
                    4a:65:04:d4:a6:62:06:ea:6b:bc:9e:66:e0:52:85:
                    27:6c:d1:87:fe:7f:23:9f:f5:07:d5:a7:a8:ba:57:
                    79:b5:cf:c9:26:96:af:bb:d4:b0:17:d0:b8:c3:44:
                    e2:57:54:60:81:19:71:b5:e3:0e:27:6a:dd:a2:65:
                    2d:0a:9b:b9:09:1f:3f:5e:86:15:64:a3:97:b4:4d:
                    52:7b:58:8c:6b:30:40:c8:ba:1e:9d:39:4a:a7:2a:
                    2e:09:03:18:71:87:d6:d3:d5:10:45:84:bb:b6:de:
                    2f:76:e3:9c:f2:d2:14:28:26:dc:ad:21:08:ce:e5:
                    df:47:cd:b8:dd:87:57:01:8f:f1:fe:ae:d9:7c:65:
                    16:a1:85:bf:2f:cc:79:6a:d6:77:14:a3:15:69:ca:
                    6e:a8:86:a8:37:6a:b7:63:89:52:ca:44:0c:92:7a:
                    66:48:7f:bd:7a:2d:00:77:cd:ef:03:52:df:20:5d:
                    41:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:01:5E:66:93:9E:EC:21:95:30:E4:91:14:D3:AA:4E:DA:B2:38:76
            X509v3 Authority Key Identifier:
                keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/A2328022AC0C11F1840BCEBACE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.129.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ca:5f:5b:16:07:78:ac:47:86:1f:3b:66:d5:a6:c9:72:1f:99:
         3a:51:47:c2:4f:5b:63:28:5c:1c:05:43:aa:7b:82:a4:01:28:
         cf:e7:40:94:68:e1:7b:fa:b5:3a:4c:f4:4c:62:16:0a:0f:93:
         da:23:88:9d:86:cc:99:b5:40:c8:28:87:5c:07:ab:76:4a:a7:
         60:8b:29:73:fb:de:19:9a:73:13:fb:23:7d:be:e3:c6:5c:84:
         0f:5b:9f:3a:2e:da:82:0c:97:6c:e5:7a:87:cb:05:0e:28:27:
         f6:ee:d6:d3:44:0d:1c:54:a8:4e:ee:1d:d1:45:45:5c:ff:7f:
         f2:e5:01:fc:82:5e:58:cf:8a:26:d8:59:83:4e:63:8b:6f:bf:
         8c:ad:ca:c8:9f:f1:54:db:c5:a7:33:3a:7d:f8:a0:6c:8a:79:
         06:aa:00:01:c7:f2:2d:53:af:3c:8f:87:fe:19:e0:9a:87:62:
         00:fa:ea:f8:d8:a4:af:f0:ef:9a:01:ba:8d:63:d0:71:01:4c:
         ad:b9:35:f8:af:bb:67:99:a6:98:47:02:83:4f:9a:e6:ff:e5:
         f1:03:dd:1a:c2:5e:38:8e:16:5d:b0:3a:be:43:03:b3:17:b3:
         86:b5:c4:9c:0c:bd:ef:30:9b:72:92:78:b7:fd:b9:87:d2:53:
         50:2b:5b:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----