Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/E5F8C66CA6FE11F1B2518B14CF1D38B0.roa
File:                     E5F8C66CA6FE11F1B2518B14CF1D38B0.roa (raw, json)
Hash identifier:          BfpSeXtq51SwzdAgNDzhSGSnHhk0ipQWDyRPHpKQnkw=
Subject key identifier:   73:6E:63:86:91:45:4F:39:69:0D:27:8B:C5:05:25:49:4B:A8:BE:57
Certificate issuer:       /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial:       19E1
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/E5F8C66CA6FE11F1B2518B14CF1D38B0.roa
Signing time:             Wed 02 Sep 2026 18:48:34 +0000
ROA not before:           Wed 02 Sep 2026 18:48:30 +0000
ROA not after:            Sat 02 Sep 2028 18:48:30 +0000
asID:                     402265
IP address blocks:        102.129.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 05 Sep 2026 00:07:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6625 (0x19e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
        Validity
            Not Before: Sep  2 18:48:30 2026 GMT
            Not After : Sep  2 18:48:30 2028 GMT
        Subject: CN=6a986f82-f5a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f1:10:73:a7:de:cd:12:d0:9f:2d:36:da:4b:
                    e5:2f:4a:9f:d9:ae:29:62:97:67:22:71:45:13:08:
                    d3:f6:a6:cb:9e:45:d8:46:71:c7:c2:1f:0c:91:3b:
                    4e:f8:9e:77:94:b2:4d:2a:dd:92:17:9c:16:9c:cf:
                    6f:6a:44:1b:1b:1e:31:ed:1b:d7:6a:f2:ae:31:c8:
                    e3:b5:2f:11:7a:bc:81:73:19:a6:39:51:6b:8c:a9:
                    99:53:5b:ce:7e:33:5b:fd:4e:84:65:c2:1a:e7:c1:
                    f8:33:16:d6:ab:1a:3a:5b:44:3b:bd:b5:9f:96:57:
                    5a:4e:00:02:6a:69:fd:4a:84:c8:40:dd:41:cb:83:
                    5f:a3:1e:60:c5:9f:81:73:5b:94:af:b4:21:f5:b2:
                    04:72:01:91:46:8c:a9:94:77:a8:84:78:dc:17:3f:
                    b9:87:9b:a5:94:fa:60:a4:50:14:74:ec:01:03:ff:
                    ec:ab:1b:d0:e7:9b:1e:44:6a:e4:25:77:6f:80:eb:
                    69:f8:25:72:be:d2:21:4e:e0:d8:99:7d:0d:a7:d5:
                    41:92:f4:c2:b8:29:2e:3f:f4:cb:82:ee:10:99:d6:
                    02:86:a5:d8:ef:8c:4e:3a:f8:82:cb:aa:44:ae:91:
                    89:30:b0:d7:eb:68:2d:60:72:d8:db:86:95:42:c1:
                    41:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:6E:63:86:91:45:4F:39:69:0D:27:8B:C5:05:25:49:4B:A8:BE:57
            X509v3 Authority Key Identifier:
                keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/E5F8C66CA6FE11F1B2518B14CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.129.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         dc:62:b7:b5:69:1a:29:b2:22:d6:6a:d7:8c:8e:74:7a:b1:87:
         63:40:d8:5b:f9:aa:51:08:06:00:42:d6:c7:94:f3:af:8e:e0:
         98:c4:d1:cf:46:41:09:29:c6:e4:aa:30:ad:70:6b:18:72:d8:
         2c:bd:8d:17:40:2b:43:ff:33:1c:1b:1b:52:21:5b:0d:ea:5f:
         8d:a6:5a:26:0d:a4:81:0b:4d:84:8f:42:69:c6:c3:b8:92:10:
         8f:30:d2:a8:1f:d0:d0:9f:a5:ba:3c:a0:74:83:fc:49:37:12:
         a6:6f:33:a8:f5:46:1f:d0:cf:6d:64:cf:3c:74:14:43:19:fd:
         bc:01:0c:f0:cb:50:d1:5e:f8:3a:45:eb:d6:d3:da:6d:d7:be:
         21:f8:a5:5f:f5:51:15:82:7b:fd:a9:79:1e:dd:13:1b:68:2e:
         94:77:94:62:87:d3:43:d1:5f:9e:da:ee:43:93:59:fd:13:3c:
         19:b4:71:62:4f:a5:cd:a3:1c:fa:63:22:87:47:5f:b7:97:c5:
         d4:fa:22:53:5a:6c:bd:59:ca:02:8d:25:c2:5e:2a:c2:7d:28:
         1a:be:d1:31:39:07:e6:3d:24:60:8c:9a:4e:f2:85:1b:21:53:
         f3:ab:15:0b:70:45:ad:71:cf:f0:da:2b:5d:75:f4:28:b8:6e:
         17:e8:04:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----