Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36C6E36/649470B09BA211F1BB3A7E0FCF1D38B0/6C7FD260B2D611F193C51DC7CE1D38B0.roa
File:                     6C7FD260B2D611F193C51DC7CE1D38B0.roa (raw, json)
Hash identifier:          +KcH4KSDhfgOgrPgucsOz0T5Y9dgTuxMI1/ms+27xx4=
Subject key identifier:   40:F7:11:AF:4D:DC:9D:04:5A:20:6E:D6:1D:FB:14:4B:B7:A1:8E:1C
Certificate issuer:       /CN=F36C6E36AF/serialNumber=6E2422C2A7E3DF07CCE0D1FD01D146DB5678D1DB
Certificate serial:       28
Authority key identifier: 6E:24:22:C2:A7:E3:DF:07:CC:E0:D1:FD:01:D1:46:DB:56:78:D1:DB
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/biQiwqfj3wfM4NH9AdFG21Z40ds.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C6E36/649470B09BA211F1BB3A7E0FCF1D38B0/6C7FD260B2D611F193C51DC7CE1D38B0.roa
Signing time:             Thu 17 Sep 2026 20:29:04 +0000
ROA not before:           Thu 17 Sep 2026 20:29:00 +0000
ROA not after:            Wed 31 Dec 2036 20:29:00 +0000
asID:                     329792
IP address blocks:        2c0f:1320:1000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C6E36/649470B09BA211F1BB3A7E0FCF1D38B0/biQiwqfj3wfM4NH9AdFG21Z40ds.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C6E36/649470B09BA211F1BB3A7E0FCF1D38B0/biQiwqfj3wfM4NH9AdFG21Z40ds.mft
                          rsync://rpki.afrinic.net/repository/afrinic/biQiwqfj3wfM4NH9AdFG21Z40ds.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 20 Sep 2026 00:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 40 (0x28)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C6E36AF, serialNumber=6E2422C2A7E3DF07CCE0D1FD01D146DB5678D1DB
        Validity
            Not Before: Sep 17 20:29:00 2026 GMT
            Not After : Dec 31 20:29:00 2036 GMT
        Subject: CN=6aac4d90-f8cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:74:2d:50:5f:82:bd:6b:74:d3:ce:81:c9:94:
                    36:3c:61:87:82:cc:5f:4e:19:ac:8e:3f:5b:f9:70:
                    26:ba:50:76:22:0a:cd:db:37:87:44:95:ba:73:ed:
                    16:9a:ae:80:6f:65:89:3d:12:a9:cb:f1:12:0e:69:
                    b1:30:92:a4:90:10:ad:1c:f5:4d:89:db:d3:2e:3b:
                    ff:50:73:e7:62:67:9a:1b:22:0b:9f:b4:86:e4:1c:
                    ba:e2:09:52:15:c2:14:a8:d8:0c:1c:a5:50:65:74:
                    9d:65:35:66:69:8e:9a:06:2b:cd:5b:e6:e8:b6:71:
                    51:0b:00:7c:8f:29:6b:ab:af:52:e0:1b:4d:83:2d:
                    7e:b7:6a:ab:a5:bf:e4:10:1c:df:44:0d:f7:e2:a1:
                    6b:2f:f7:09:3e:c4:f5:e8:c2:e8:01:e3:ba:c7:9e:
                    03:7c:7b:75:29:ba:59:2a:c7:97:4f:ba:a8:f1:fc:
                    71:a5:88:f2:f6:51:cc:83:84:5b:fa:ce:ff:97:80:
                    71:f5:ee:de:95:6e:18:dc:fb:3a:2c:59:c4:f5:88:
                    09:ee:73:0d:99:66:b0:f1:fd:17:e8:a4:78:22:19:
                    4c:16:1c:4a:73:de:89:ad:70:74:2a:1c:e9:6b:ab:
                    3e:60:35:cb:bd:1e:10:2a:1d:db:9d:6d:ce:de:6f:
                    92:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:F7:11:AF:4D:DC:9D:04:5A:20:6E:D6:1D:FB:14:4B:B7:A1:8E:1C
            X509v3 Authority Key Identifier:
                keyid:6E:24:22:C2:A7:E3:DF:07:CC:E0:D1:FD:01:D1:46:DB:56:78:D1:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C6E36/649470B09BA211F1BB3A7E0FCF1D38B0/biQiwqfj3wfM4NH9AdFG21Z40ds.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/biQiwqfj3wfM4NH9AdFG21Z40ds.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C6E36/649470B09BA211F1BB3A7E0FCF1D38B0/6C7FD260B2D611F193C51DC7CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:1320:1000::/40

    Signature Algorithm: sha256WithRSAEncryption
         4f:e0:ec:7b:ac:5e:6c:9f:da:a7:9f:5a:47:51:a9:39:9a:0b:
         9d:84:dc:25:d7:6a:1e:c6:1e:11:ea:8d:bc:d6:11:b4:55:8c:
         89:4c:26:e4:34:a3:5c:1e:88:b3:7e:06:9e:05:8e:3b:06:31:
         1e:ef:e3:52:01:ca:ff:ec:cc:37:70:18:36:dd:26:fd:0b:0a:
         de:79:ec:02:4d:2b:6c:2c:4d:31:4e:ea:81:5b:7d:7f:d7:df:
         47:63:0d:7c:4a:b9:9a:0a:c4:cc:60:04:0c:55:eb:a4:dc:39:
         fe:16:93:12:37:0b:67:df:9f:97:e9:1c:69:40:a1:bf:55:f7:
         b8:97:eb:aa:31:a8:73:22:09:35:d1:d9:7f:52:f1:61:b2:4f:
         64:85:be:fa:cb:72:93:c0:2c:30:43:67:5c:04:5c:45:bd:04:
         3d:aa:6b:be:e6:01:2b:66:6f:29:e8:91:28:9f:a1:42:26:47:
         65:f9:e9:f5:32:08:05:82:54:c7:3e:66:20:7d:af:0d:c8:5e:
         97:de:44:48:9e:b3:1e:6d:67:1d:3f:ae:9e:e9:12:e2:11:04:
         3b:ea:52:08:a7:8f:b4:08:2e:76:d4:51:88:29:9e:ce:c0:48:
         7a:ad:7e:31:3c:44:f8:69:32:cb:95:4b:05:3f:de:8d:15:11:
         eb:56:3a:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----