Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36C6E36/649470B09BA211F1BB3A7E0FCF1D38B0/0745CDAEB2D711F187AA27CBCE1D38B0.roa
File:                     0745CDAEB2D711F187AA27CBCE1D38B0.roa (raw, json)
Hash identifier:          DV4zcMkbFgzhtFkdO2oTjhaIbbAWHRM/lgDhjMjNUhc=
Subject key identifier:   E4:80:42:49:4B:35:0E:50:41:13:E7:EB:04:C6:27:B0:77:64:99:8C
Certificate issuer:       /CN=F36C6E36AF/serialNumber=6E2422C2A7E3DF07CCE0D1FD01D146DB5678D1DB
Certificate serial:       2E
Authority key identifier: 6E:24:22:C2:A7:E3:DF:07:CC:E0:D1:FD:01:D1:46:DB:56:78:D1:DB
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/biQiwqfj3wfM4NH9AdFG21Z40ds.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C6E36/649470B09BA211F1BB3A7E0FCF1D38B0/0745CDAEB2D711F187AA27CBCE1D38B0.roa
Signing time:             Thu 17 Sep 2026 20:33:24 +0000
ROA not before:           Thu 17 Sep 2026 20:33:20 +0000
ROA not after:            Wed 31 Dec 2036 20:33:20 +0000
asID:                     329792
IP address blocks:        2c0f:1320:2002::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C6E36/649470B09BA211F1BB3A7E0FCF1D38B0/biQiwqfj3wfM4NH9AdFG21Z40ds.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C6E36/649470B09BA211F1BB3A7E0FCF1D38B0/biQiwqfj3wfM4NH9AdFG21Z40ds.mft
                          rsync://rpki.afrinic.net/repository/afrinic/biQiwqfj3wfM4NH9AdFG21Z40ds.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 20 Sep 2026 00:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 46 (0x2e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C6E36AF, serialNumber=6E2422C2A7E3DF07CCE0D1FD01D146DB5678D1DB
        Validity
            Not Before: Sep 17 20:33:20 2026 GMT
            Not After : Dec 31 20:33:20 2036 GMT
        Subject: CN=6aac4e94-ba18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ef:64:01:bd:ee:8e:e7:1f:74:e7:83:6b:9e:
                    2a:10:6c:7a:95:13:92:73:0d:bc:4b:80:e9:3c:f1:
                    d3:ae:64:c2:8f:bd:bf:22:af:46:e5:ed:83:c7:52:
                    84:36:35:c7:de:4e:5a:33:ed:b9:87:d3:63:1a:ea:
                    cb:f9:ce:61:89:96:dc:8c:6b:2d:51:64:c5:04:ac:
                    63:4f:36:7a:3b:f3:1d:8f:c0:da:dd:77:4c:fa:04:
                    9d:23:39:dc:8d:43:15:8e:4d:9a:bb:54:03:7d:4d:
                    45:80:a5:bb:60:52:fb:2b:b0:5a:48:93:c9:6a:02:
                    a7:6d:a9:b9:ee:da:f2:8f:a9:ad:8a:db:eb:2c:6f:
                    e0:4c:c4:10:16:3c:c0:28:2d:91:cc:70:d3:f7:eb:
                    5c:ea:fd:55:01:6d:a8:2e:02:8f:92:e9:09:24:92:
                    dd:54:fa:d4:46:4e:f3:9a:d4:96:11:fa:95:79:b6:
                    0e:a4:0e:04:2f:43:cc:2d:27:7d:18:da:60:df:2f:
                    a4:19:81:95:2e:b0:ef:b8:73:51:94:8b:dc:49:5a:
                    4b:e8:69:0f:0d:64:6c:f1:ad:92:77:28:58:33:97:
                    76:64:f1:98:88:04:fb:b4:59:fe:b7:16:45:de:67:
                    42:39:de:a9:17:11:d0:f3:b2:e5:05:16:a9:35:ce:
                    28:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:80:42:49:4B:35:0E:50:41:13:E7:EB:04:C6:27:B0:77:64:99:8C
            X509v3 Authority Key Identifier:
                keyid:6E:24:22:C2:A7:E3:DF:07:CC:E0:D1:FD:01:D1:46:DB:56:78:D1:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C6E36/649470B09BA211F1BB3A7E0FCF1D38B0/biQiwqfj3wfM4NH9AdFG21Z40ds.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/biQiwqfj3wfM4NH9AdFG21Z40ds.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C6E36/649470B09BA211F1BB3A7E0FCF1D38B0/0745CDAEB2D711F187AA27CBCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:1320:2002::/48

    Signature Algorithm: sha256WithRSAEncryption
         06:38:88:6a:02:43:a5:4c:31:7a:6b:f0:8f:0f:36:b4:21:d0:
         60:7d:49:d6:fc:c6:89:f1:f2:e7:eb:7f:16:bb:54:92:b4:40:
         ed:b3:72:b8:d7:9f:6a:03:a0:4d:fa:5a:67:ca:24:d2:ca:72:
         d6:24:7c:0a:27:96:36:26:2f:a4:9b:71:65:de:70:45:b1:09:
         c0:8c:f5:b9:0e:b2:0d:94:42:01:d6:c5:91:1b:14:be:5b:c3:
         6a:87:11:ed:23:b2:3c:9a:ca:41:5c:fb:04:2f:77:a0:a0:03:
         8e:de:85:a7:ab:f1:b6:c3:db:d2:42:2e:06:94:79:cb:8b:7e:
         ab:65:60:71:3e:9a:f0:6b:b5:53:0f:a5:6e:15:ca:f9:3f:64:
         55:7e:66:65:a3:6b:cd:07:70:bf:e2:f7:ac:d9:4d:ec:8b:e4:
         86:f5:6d:79:76:e9:1f:da:0a:5a:f9:da:f8:3d:47:82:ee:4c:
         9d:5f:e5:9e:b8:62:9f:1f:09:c6:96:75:ec:8f:31:fa:78:76:
         35:cf:5c:57:2d:b3:3d:94:14:1c:08:c4:92:fe:22:a5:53:b5:
         0f:09:3b:ec:6b:aa:e7:20:07:24:18:c2:80:8d:8d:e5:81:33:
         79:61:12:45:45:ea:da:1e:47:1d:9f:6f:f8:17:4d:97:43:05:
         4f:f2:e4:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----