Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36EA220/585D303CC16511F19640C4C1CE1D38B0/D7FAE8C6C16911F1AE6DCCDDCE1D38B0.roa
File:                     D7FAE8C6C16911F1AE6DCCDDCE1D38B0.roa (raw, json)
Hash identifier:          oF1QD/EnlryIIxrUvh7rJqBbz2N3toUNpal/yvqhuxs=
Subject key identifier:   9D:F1:59:0A:11:54:E2:53:C2:90:8A:BF:2A:E7:5A:9A:4F:A3:2E:A8
Certificate issuer:       /CN=F36EA220AF/serialNumber=5626C3A722F69B23A0CEAAB8BEAF6DB0AD24430F
Certificate serial:       02
Authority key identifier: 56:26:C3:A7:22:F6:9B:23:A0:CE:AA:B8:BE:AF:6D:B0:AD:24:43:0F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/VibDpyL2myOgzqq4vq9tsK0kQw8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36EA220/585D303CC16511F19640C4C1CE1D38B0/D7FAE8C6C16911F1AE6DCCDDCE1D38B0.roa
Signing time:             Tue 06 Oct 2026 09:39:37 +0000
ROA not before:           Tue 06 Oct 2026 09:39:33 +0000
ROA not after:            Mon 06 Oct 2031 09:39:33 +0000
asID:                     329687
IP address blocks:        102.203.160.0/22 maxlen: 24
                          2c0f:420::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36EA220/585D303CC16511F19640C4C1CE1D38B0/VibDpyL2myOgzqq4vq9tsK0kQw8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36EA220/585D303CC16511F19640C4C1CE1D38B0/VibDpyL2myOgzqq4vq9tsK0kQw8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/VibDpyL2myOgzqq4vq9tsK0kQw8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 00:08:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36EA220AF, serialNumber=5626C3A722F69B23A0CEAAB8BEAF6DB0AD24430F
        Validity
            Not Before: Oct  6 09:39:33 2026 GMT
            Not After : Oct  6 09:39:33 2031 GMT
        Subject: CN=6ac4c1d9-4619
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:cf:f2:b7:eb:ba:70:2b:6a:74:2c:8a:10:b4:
                    56:d5:82:f8:3c:c0:f5:4e:82:59:ee:35:93:2c:17:
                    41:3b:8d:d0:cf:e0:63:35:3a:da:ca:4b:f4:96:96:
                    7b:81:c7:56:21:5b:65:af:f3:96:34:0f:13:d0:87:
                    c5:99:2a:4d:30:d5:cb:ca:76:2e:ce:2d:98:b6:f8:
                    16:15:6c:52:0e:2b:f9:32:84:43:a9:86:b5:4b:35:
                    59:88:9d:b2:37:98:b5:81:6f:f1:83:19:76:4f:01:
                    e7:9b:29:c9:37:ea:cb:ee:0c:bc:9f:c7:0f:11:49:
                    13:d7:72:d6:eb:1e:3f:0e:e4:98:ec:55:30:ab:d1:
                    f9:ff:7a:04:1e:63:02:c4:b5:66:e9:bb:1a:3d:e8:
                    8d:c1:5d:92:13:1f:9a:84:9d:f6:92:fd:44:83:6b:
                    fe:1d:fb:07:58:95:a0:c6:0e:5e:e8:74:4c:c9:b6:
                    70:4e:3a:33:1a:79:2c:2d:72:bf:f6:d4:7d:5b:bb:
                    5e:c1:4a:2b:f8:74:3a:e6:f6:cc:b8:15:6e:95:91:
                    4c:12:a8:c6:2d:27:68:a4:28:56:37:32:d9:9d:1f:
                    70:9e:77:f4:d2:f7:61:fa:00:37:04:32:a4:7a:62:
                    0a:ee:86:30:4b:cd:90:8a:fe:30:ed:0b:39:2b:5e:
                    88:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:F1:59:0A:11:54:E2:53:C2:90:8A:BF:2A:E7:5A:9A:4F:A3:2E:A8
            X509v3 Authority Key Identifier:
                keyid:56:26:C3:A7:22:F6:9B:23:A0:CE:AA:B8:BE:AF:6D:B0:AD:24:43:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36EA220/585D303CC16511F19640C4C1CE1D38B0/VibDpyL2myOgzqq4vq9tsK0kQw8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/VibDpyL2myOgzqq4vq9tsK0kQw8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EA220/585D303CC16511F19640C4C1CE1D38B0/D7FAE8C6C16911F1AE6DCCDDCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.203.160.0/22
                IPv6:
                  2c0f:420::/32

    Signature Algorithm: sha256WithRSAEncryption
         1c:ba:97:50:58:17:80:27:6f:1a:87:65:f9:49:67:61:6a:b4:
         8e:f2:09:fa:7f:a6:ef:f8:6b:81:38:60:20:ca:95:4d:d9:f0:
         2e:8d:3b:23:bd:72:d2:58:b6:18:33:56:10:62:0b:70:fa:54:
         4d:aa:e5:b3:31:a0:13:91:1b:ff:7c:c3:24:83:0e:cd:f5:85:
         70:98:66:c5:3b:c4:b2:da:d8:80:fb:f2:7c:d7:32:b1:17:a7:
         b4:f4:29:8c:c2:22:1f:13:18:28:95:bb:cd:a9:42:a4:68:ea:
         69:0c:4d:45:1c:d2:93:f3:45:8f:d1:a0:4f:35:b7:99:a2:9b:
         fa:34:83:b2:0f:da:80:cc:38:fa:bb:e0:79:08:08:8d:32:6a:
         77:2a:50:20:c5:b9:fb:d9:0a:5e:b9:0a:4c:32:0d:57:94:77:
         2c:1d:88:2a:47:93:fd:6f:5d:58:b6:d7:08:a8:20:ac:e7:26:
         a8:b5:58:95:47:25:eb:df:98:50:ff:db:51:d0:2e:6c:ea:28:
         dd:42:08:f8:b0:78:33:dc:3c:1e:2e:99:a6:ac:3f:fc:20:7b:
         28:3f:22:96:ac:7f:9d:2d:5b:fb:9c:95:ec:c1:f5:bc:ae:f8:
         28:06:00:ae:df:1e:fd:c7:5a:fd:64:f4:35:e4:84:7b:ed:3b:
         ab:51:4e:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----