Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36CC8EB/CD40B1EAB0ED11ECA48318825A40D577/A0D8F85C8EFF11F1A65138F7CE1D38B0.roa
File:                     A0D8F85C8EFF11F1A65138F7CE1D38B0.roa (raw, json)
Hash identifier:          teptVHQ0uPHPGBYFMoadvyUXi00pXKRL48ZoHJLP0Cs=
Subject key identifier:   E5:A7:5B:04:2F:83:40:8F:09:E6:6F:B7:57:F8:BE:3F:85:33:C6:41
Certificate issuer:       /CN=F36CC8EBRI/serialNumber=E690FB656B8D7D0F0F676D9D127A32DF8D3A6D85
Certificate serial:       065D
Authority key identifier: E6:90:FB:65:6B:8D:7D:0F:0F:67:6D:9D:12:7A:32:DF:8D:3A:6D:85
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/5pD7ZWuNfQ8PZ22dEnoy3406bYU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36CC8EB/CD40B1EAB0ED11ECA48318825A40D577/A0D8F85C8EFF11F1A65138F7CE1D38B0.roa
Signing time:             Mon 03 Aug 2026 05:53:19 +0000
ROA not before:           Mon 03 Aug 2026 05:53:16 +0000
ROA not after:            Wed 31 Mar 2027 05:53:16 +0000
asID:                     29091
IP address blocks:        62.173.32.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36CC8EB/CD40B1EAB0ED11ECA48318825A40D577/5pD7ZWuNfQ8PZ22dEnoy3406bYU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36CC8EB/CD40B1EAB0ED11ECA48318825A40D577/5pD7ZWuNfQ8PZ22dEnoy3406bYU.mft
                          rsync://rpki.afrinic.net/repository/ripe/5pD7ZWuNfQ8PZ22dEnoy3406bYU.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 12 Sep 2026 00:45:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1629 (0x65d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36CC8EBRI, serialNumber=E690FB656B8D7D0F0F676D9D127A32DF8D3A6D85
        Validity
            Not Before: Aug  3 05:53:16 2026 GMT
            Not After : Mar 31 05:53:16 2027 GMT
        Subject: CN=6a702ccf-c017
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:17:cd:d8:ee:54:3e:b2:26:d6:89:44:0f:69:
                    74:d7:9c:c3:0e:4c:03:3b:82:6f:35:ff:c9:94:7a:
                    d9:b5:c8:56:f5:9b:f5:75:04:4a:85:9a:d5:cd:d1:
                    9b:fc:51:59:05:04:00:b8:7b:c9:45:11:ee:af:94:
                    6b:e0:7f:3f:0b:3d:8c:4f:7f:c3:72:2e:7c:f5:e1:
                    f7:11:be:7d:5b:35:a0:79:15:cc:15:84:5e:c3:cc:
                    8a:7b:2f:a5:b0:b5:d4:6b:e1:35:dd:d7:63:3c:84:
                    70:97:4e:07:03:a7:23:35:1a:a8:f4:b1:33:23:16:
                    37:ce:90:ee:29:c3:72:ae:54:8a:3f:84:8c:10:9a:
                    8b:ef:eb:1d:d5:fe:a9:cc:39:d1:bc:6b:aa:70:e5:
                    8f:d2:48:75:64:70:72:9f:11:ff:6c:de:31:46:7d:
                    e7:5d:39:97:10:59:ea:6c:88:31:85:97:b0:34:cb:
                    da:c6:92:b2:1a:31:8f:2c:08:07:42:c1:d2:24:7c:
                    88:87:29:bf:f2:8b:6a:55:92:49:7e:be:92:42:67:
                    d2:88:73:51:44:4e:f8:78:32:67:05:be:da:6e:58:
                    31:f0:21:6d:24:74:6b:36:66:45:53:e9:d5:11:96:
                    0f:d7:bb:c0:17:5a:06:f3:b1:17:ba:66:e5:e1:4d:
                    ac:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:A7:5B:04:2F:83:40:8F:09:E6:6F:B7:57:F8:BE:3F:85:33:C6:41
            X509v3 Authority Key Identifier:
                keyid:E6:90:FB:65:6B:8D:7D:0F:0F:67:6D:9D:12:7A:32:DF:8D:3A:6D:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36CC8EB/CD40B1EAB0ED11ECA48318825A40D577/5pD7ZWuNfQ8PZ22dEnoy3406bYU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/5pD7ZWuNfQ8PZ22dEnoy3406bYU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CC8EB/CD40B1EAB0ED11ECA48318825A40D577/A0D8F85C8EFF11F1A65138F7CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.173.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         51:66:83:70:55:68:1b:e4:11:14:e2:98:84:1e:f9:15:c7:5f:
         2e:5e:b5:62:9b:0a:88:51:f5:51:21:4b:c9:c4:c2:74:82:c1:
         c8:8e:00:aa:b4:b9:e8:44:f3:49:7b:17:4d:5f:b2:92:b1:fe:
         e3:9f:04:5a:68:e7:83:e1:8c:6d:b3:75:64:39:5c:72:7c:34:
         a2:6e:6f:24:e7:4a:c9:3f:c8:0b:7b:9f:c6:ea:9d:7e:ea:bb:
         c4:b4:e7:d1:bc:e2:2e:0a:9f:01:60:3f:86:98:08:67:ef:8d:
         ac:8b:29:cd:ae:81:16:9e:cc:e5:91:ec:30:d7:87:bd:b6:55:
         6e:63:6e:ea:c2:1c:aa:99:0b:0b:90:ff:26:8d:f0:39:6c:22:
         81:a8:99:43:23:b9:3a:88:24:1b:e7:38:f0:f5:0e:27:71:17:
         de:1e:0c:5a:bf:ed:03:28:63:95:20:c6:51:05:72:81:ad:bb:
         5b:bd:7e:aa:49:77:a4:63:9a:68:ff:7a:1c:e2:4c:bd:94:07:
         78:e3:e8:6a:88:1f:83:49:46:c8:bb:21:20:df:3a:33:e4:60:
         6c:f3:cf:89:69:26:c3:dd:fa:be:2b:71:c0:5c:eb:11:65:94:
         dc:24:a7:67:ce:3b:55:fa:fa:bf:3d:97:0c:af:f2:30:31:cd:
         1d:7e:ff:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----