Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/C2929EC0BE5811F1B3950ED6CE1D38B0.roa
File:                     C2929EC0BE5811F1B3950ED6CE1D38B0.roa (raw, json)
Hash identifier:          qEhyODHK9LUN2Id/cruTIrGc1efpaeJpajZT5DwH9oU=
Subject key identifier:   B7:12:8B:7F:3F:50:69:B7:E5:E1:4F:27:0C:F8:45:D2:EC:9E:C0:42
Certificate issuer:       /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial:       1A50
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/C2929EC0BE5811F1B3950ED6CE1D38B0.roa
Signing time:             Fri 02 Oct 2026 11:59:46 +0000
ROA not before:           Fri 02 Oct 2026 11:59:42 +0000
ROA not after:            Mon 02 Oct 2028 11:59:42 +0000
asID:                     834
IP address blocks:        102.129.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 06 Oct 2026 01:19:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6736 (0x1a50)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
        Validity
            Not Before: Oct  2 11:59:42 2026 GMT
            Not After : Oct  2 11:59:42 2028 GMT
        Subject: CN=6abf9cb2-3856
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:96:06:15:95:c1:51:79:5b:98:21:3e:94:40:
                    43:d4:09:9c:5e:ab:8a:6f:53:21:a9:d1:c8:e6:65:
                    82:3e:dd:37:23:bf:f3:85:69:a0:b3:92:9d:e3:9d:
                    1c:86:be:c3:f4:2d:5b:81:5e:47:b6:ab:38:ce:ec:
                    24:1d:95:f2:36:71:74:d2:6f:4e:34:91:0b:fb:dc:
                    2e:db:ef:40:37:17:57:e9:ba:6f:72:d4:12:bb:67:
                    6d:7a:37:13:46:30:9e:b6:d8:a6:cc:93:53:90:51:
                    c2:73:68:a8:cd:f0:05:69:ff:97:b7:4d:6a:09:46:
                    f0:f3:36:9a:99:3b:b8:35:45:17:c6:8a:83:a6:b4:
                    b1:34:45:79:0f:e1:52:e2:99:21:42:5d:d3:32:38:
                    20:66:fd:49:5a:36:50:df:8f:4f:d5:1e:c0:bc:12:
                    d0:f8:95:90:f2:ac:5b:5e:6d:ca:05:74:1e:a4:ef:
                    d6:90:aa:c0:78:38:70:ad:8e:2e:3e:4d:8f:f4:73:
                    f7:0e:bf:1d:b2:ab:cb:c4:f9:03:f7:fd:dc:20:4b:
                    b7:d5:3d:86:09:bb:44:ad:ec:99:94:a7:8a:eb:75:
                    93:bf:d5:ef:fb:9e:0d:84:00:3f:9f:d1:6b:f0:9f:
                    a2:c7:b5:e6:ff:54:1a:ce:e6:94:fc:dc:cc:36:37:
                    35:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:12:8B:7F:3F:50:69:B7:E5:E1:4F:27:0C:F8:45:D2:EC:9E:C0:42
            X509v3 Authority Key Identifier:
                keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/C2929EC0BE5811F1B3950ED6CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.129.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:0d:34:a6:b6:73:63:f7:7d:6a:0c:61:da:e9:4a:f0:7c:be:
         e0:32:05:7d:69:13:11:98:e3:f8:28:72:d3:b5:94:f1:cc:32:
         5c:c2:a0:31:c0:74:c5:53:99:05:a9:c0:fa:02:63:94:d4:98:
         17:9f:54:af:c0:4b:c9:d0:ea:ae:74:cd:3c:7f:f6:f2:a3:bf:
         87:b7:ae:6f:13:df:76:98:2e:3b:bb:d7:b5:26:cc:56:37:87:
         8e:c8:59:8c:70:5f:5f:fd:6d:90:dd:4b:5b:aa:7e:e9:13:55:
         22:3f:ce:2c:26:62:84:af:2a:2a:b2:69:51:ac:40:4d:1d:33:
         e7:a6:38:3b:69:61:f1:b9:5a:a4:dd:7d:bd:5d:0b:25:f3:0d:
         7c:97:0f:97:08:4e:e0:eb:71:46:11:ac:be:c4:92:f8:90:b2:
         5f:c6:d1:27:2a:83:ff:47:60:3a:d5:38:4e:7d:b4:95:70:2d:
         8d:74:09:ef:de:23:30:8c:40:27:ae:90:96:4e:a9:d4:f3:ab:
         df:5a:ad:2e:bc:3a:1f:c0:50:ee:35:ad:1e:e4:dc:18:de:65:
         a7:df:3b:f0:36:cb:ee:11:9c:80:54:c2:8f:41:65:4f:58:ee:
         83:f7:16:e5:c1:a8:50:0d:22:c9:da:4d:c1:c1:34:99:03:83:
         67:de:ca:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----