Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/E6D718ECC70E11F197EAA5C1CE1D38B0.roa
File:                     E6D718ECC70E11F197EAA5C1CE1D38B0.roa (raw, json)
Hash identifier:          mnhZazmCKI8RJ4dVCYlm/iqxYxyq21Ytm9qV5pCULoM=
Subject key identifier:   84:D5:B3:3A:2B:0E:00:C9:47:C5:05:5F:E1:3F:D9:72:4C:12:89:9B
Certificate issuer:       /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial:       1A77
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/E6D718ECC70E11F197EAA5C1CE1D38B0.roa
Signing time:             Tue 13 Oct 2026 14:03:44 +0000
ROA not before:           Tue 13 Oct 2026 14:03:40 +0000
ROA not after:            Fri 13 Oct 2028 14:03:40 +0000
asID:                     212238
IP address blocks:        102.129.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 17 Oct 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6775 (0x1a77)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
        Validity
            Not Before: Oct 13 14:03:40 2026 GMT
            Not After : Oct 13 14:03:40 2028 GMT
        Subject: CN=6ace3a40-8e48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f3:d2:bc:92:89:55:77:df:67:22:cc:90:3a:
                    1b:68:ca:af:48:0e:8a:99:06:f6:bb:36:87:b3:b7:
                    b4:ba:c7:f0:49:3b:ad:fb:b2:7f:b1:3e:08:5b:6a:
                    5a:e7:28:29:70:09:1b:9b:ce:e2:5c:87:7d:1a:06:
                    56:36:d1:d4:df:79:b5:db:ae:c5:be:4f:39:55:f6:
                    3f:e4:0e:ce:2b:80:72:8a:be:67:47:24:1f:54:14:
                    a0:7d:20:19:d1:c2:23:5d:1c:bf:7d:95:f3:55:37:
                    cf:4e:ea:15:3a:7b:e2:c9:d7:8c:c2:3f:fe:e2:fb:
                    48:e6:1a:66:2c:70:3d:3a:83:f2:20:c9:72:ea:df:
                    59:22:04:06:74:2d:c6:0b:b5:94:0c:bd:ee:d2:e6:
                    1a:70:ff:7c:d9:2f:12:55:9f:f6:42:45:4c:1c:b6:
                    7b:92:59:76:ed:1c:78:d1:ec:0a:0d:33:7e:73:40:
                    e3:9a:eb:31:d6:5f:32:60:89:58:63:b2:be:76:3c:
                    01:f2:de:56:7d:dc:4e:42:ed:c6:63:39:8a:31:85:
                    86:b4:df:83:d4:ca:9d:00:dd:81:e6:2d:c6:9b:14:
                    45:c8:ab:c9:05:73:70:bc:cb:95:25:30:0b:28:18:
                    76:e7:ae:cb:39:e0:17:e6:dc:07:a4:a6:46:e0:67:
                    35:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:D5:B3:3A:2B:0E:00:C9:47:C5:05:5F:E1:3F:D9:72:4C:12:89:9B
            X509v3 Authority Key Identifier:
                keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/E6D718ECC70E11F197EAA5C1CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.129.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:86:3d:5b:1f:66:06:f1:2e:3e:84:13:0e:68:99:c2:7e:0f:
         53:96:09:68:0d:27:5d:e2:62:f0:7e:b2:0e:d6:42:16:03:83:
         f9:4d:68:14:41:78:02:b2:9c:51:79:e6:6f:00:b3:79:f4:a3:
         5b:53:1f:7b:65:8b:4b:b5:bf:04:4e:e4:d8:85:8d:14:7f:5e:
         f3:36:55:08:df:a1:03:35:a0:2b:3d:25:76:54:04:9f:12:63:
         a8:dd:ee:1b:82:80:75:58:44:07:8c:fd:01:31:c9:79:ef:11:
         b4:09:9e:28:a9:cf:3b:7f:98:2a:4e:12:66:b6:bd:92:b1:f1:
         f7:2e:55:83:2e:6e:80:76:1f:95:63:63:88:02:b3:94:13:72:
         c4:78:c9:11:8d:39:3c:ef:fb:9e:e4:5e:f9:15:e7:81:37:9f:
         a2:72:24:60:9f:df:b7:36:09:02:bd:e2:8f:2c:16:54:35:e9:
         83:30:16:e3:e4:79:ef:57:f6:06:c4:c4:f3:37:28:8e:53:f4:
         40:ab:3d:ce:71:47:0a:1a:75:cc:21:3f:dd:88:a5:0d:29:ef:
         ff:59:54:2a:7c:b8:af:3a:a9:d9:8d:fe:30:b7:5b:16:39:51:
         46:c5:dc:c5:9e:79:04:f1:b6:0c:da:09:b0:b4:d1:7d:a6:de:
         12:2c:68:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----