Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/E52EF348BE8F11F196F0A1B5CE1D38B0.roa
File:                     E52EF348BE8F11F196F0A1B5CE1D38B0.roa (raw, json)
Hash identifier:          riwxf3Iewju6dumShXNSZzUZD0av2o4M32tq1pNY2Dw=
Subject key identifier:   FA:3F:39:0A:82:82:3E:39:47:3D:0E:DA:1D:A6:CE:93:EF:E9:CC:AF
Certificate issuer:       /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial:       1A53
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/E52EF348BE8F11F196F0A1B5CE1D38B0.roa
Signing time:             Fri 02 Oct 2026 18:34:26 +0000
ROA not before:           Fri 02 Oct 2026 18:34:22 +0000
ROA not after:            Mon 02 Oct 2028 18:34:22 +0000
asID:                     834
IP address blocks:        102.129.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 05 Oct 2026 00:08:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6739 (0x1a53)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
        Validity
            Not Before: Oct  2 18:34:22 2026 GMT
            Not After : Oct  2 18:34:22 2028 GMT
        Subject: CN=6abff932-1758
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:8a:73:8f:2a:48:65:11:24:0b:7f:eb:66:08:
                    9e:f6:12:04:ac:6c:ac:ca:c6:14:07:16:fa:10:21:
                    5e:17:e5:a4:f6:a0:62:fc:fc:82:56:c7:0a:54:b0:
                    0d:16:c2:77:01:eb:36:f2:62:0f:f2:14:b2:91:67:
                    2b:83:ab:a1:da:83:b0:cc:04:aa:0a:1f:bc:b0:55:
                    02:ec:f6:e2:2d:6d:bc:e3:6a:ed:9a:01:26:01:08:
                    46:18:f3:90:f8:7e:69:d9:90:a9:cf:f6:77:7b:39:
                    fb:b3:a0:17:4b:c2:96:aa:e8:d9:68:5c:75:16:5d:
                    88:75:4f:f8:10:5f:69:b0:2a:11:84:c0:5b:a9:ca:
                    16:ea:f5:7f:f2:92:04:ae:89:0d:4e:e9:3c:cf:06:
                    46:15:5e:cf:a8:b0:c5:9c:63:06:a2:cf:21:de:aa:
                    9c:f3:92:ff:30:e9:f0:17:84:33:47:80:4a:4e:1b:
                    ae:d7:1e:68:06:7c:22:c8:27:65:d5:2d:5a:e3:a8:
                    f1:1d:66:e4:45:0e:27:41:b1:c1:a9:19:c8:59:7d:
                    e6:ed:8a:1e:a9:40:8f:51:c4:a6:1b:a3:7a:1a:d4:
                    0f:ba:f1:22:9c:5c:60:66:f3:bb:a8:7f:ee:5f:b2:
                    3b:fd:5d:4b:cb:5c:ed:8c:3f:b5:38:12:d9:21:98:
                    32:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:3F:39:0A:82:82:3E:39:47:3D:0E:DA:1D:A6:CE:93:EF:E9:CC:AF
            X509v3 Authority Key Identifier:
                keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/E52EF348BE8F11F196F0A1B5CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.129.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:e5:16:66:be:a3:4a:66:0c:58:74:b2:23:4a:93:ba:bd:d1:
         4f:cd:fa:21:7a:90:20:46:04:a0:54:5c:b9:81:bf:f2:9b:5a:
         b1:0b:fd:0c:f2:dd:bb:84:38:8f:0e:17:df:2b:d5:f6:f8:b2:
         94:22:12:e7:1a:0c:7f:2e:03:8a:08:96:2a:e3:36:5f:4a:1a:
         10:ae:c5:22:87:fe:d7:6e:f3:50:75:54:2b:f7:0f:2e:88:ce:
         c9:c8:9a:91:e5:6a:43:69:09:f9:f0:53:57:91:6e:29:e2:aa:
         6c:c3:c1:2a:51:8c:5b:7a:ed:3a:7a:73:dd:89:d9:a7:3f:7a:
         79:7a:c0:6f:ae:69:e8:aa:4b:06:db:a0:33:46:36:35:e4:67:
         d0:2c:1b:1e:c5:f1:7d:60:25:89:90:e3:78:32:f9:99:f2:fe:
         f0:df:fe:09:8b:b6:36:ea:d6:ee:46:25:56:13:eb:94:52:d3:
         0a:c7:50:cd:bc:eb:1e:c4:ae:6d:df:c5:9b:72:b7:ef:5f:43:
         6e:cb:59:04:77:b1:26:4f:fe:f8:e1:26:1c:06:80:ef:69:51:
         7e:77:b8:60:3c:71:49:28:cb:50:f8:87:28:93:b6:22:39:79:
         36:70:25:f1:af:5a:21:3b:cd:fd:59:c2:f5:dd:07:6a:5a:63:
         45:ae:20:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----