Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36EBDD7/67F004C6BE1D11EB8576B942F8AEA228/4A89567A8C1D11F1AB9D1ADECE1D38B0.roa
File:                     4A89567A8C1D11F1AB9D1ADECE1D38B0.roa (raw, json)
Hash identifier:          6g4aQgN1TAsXZFDrBz/ZcpObSajWXbfBbjAr9JqgHXc=
Subject key identifier:   AF:ED:E6:57:2B:31:B8:BB:29:1D:13:CD:99:CC:7C:32:75:78:4B:01
Certificate issuer:       /CN=F36EBDD7RI/serialNumber=972CFDAEEB126F6FCD4696A590F7018837AA5FF2
Certificate serial:       0798
Authority key identifier: 97:2C:FD:AE:EB:12:6F:6F:CD:46:96:A5:90:F7:01:88:37:AA:5F:F2
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/lyz9rusSb2_NRpalkPcBiDeqX_I.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36EBDD7/67F004C6BE1D11EB8576B942F8AEA228/4A89567A8C1D11F1AB9D1ADECE1D38B0.roa
Signing time:             Thu 30 Jul 2026 13:48:06 +0000
ROA not before:           Thu 30 Jul 2026 13:48:02 +0000
ROA not after:            Wed 30 Jul 2036 13:48:02 +0000
asID:                     37349
IP address blocks:        217.29.128.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36EBDD7/67F004C6BE1D11EB8576B942F8AEA228/lyz9rusSb2_NRpalkPcBiDeqX_I.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36EBDD7/67F004C6BE1D11EB8576B942F8AEA228/lyz9rusSb2_NRpalkPcBiDeqX_I.mft
                          rsync://rpki.afrinic.net/repository/ripe/lyz9rusSb2_NRpalkPcBiDeqX_I.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 12 Sep 2026 00:45:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1944 (0x798)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36EBDD7RI, serialNumber=972CFDAEEB126F6FCD4696A590F7018837AA5FF2
        Validity
            Not Before: Jul 30 13:48:02 2026 GMT
            Not After : Jul 30 13:48:02 2036 GMT
        Subject: CN=6a6b5616-8f4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ed:68:cd:cb:1d:38:c6:7b:c3:b4:09:6a:7e:
                    e8:f6:cb:81:ca:ff:af:83:9e:09:f1:1a:0d:c5:3b:
                    31:03:be:61:c5:0d:fa:ff:be:71:5f:d2:68:7d:16:
                    62:9c:2c:74:96:1e:7c:06:2c:ef:69:a8:4a:5e:58:
                    81:5d:96:8f:76:97:e6:36:72:ff:4f:20:67:b2:80:
                    97:85:9c:ad:b7:c4:e8:67:0c:88:93:74:04:81:75:
                    0b:50:87:a8:d4:66:b6:1b:35:a2:49:9c:5f:81:34:
                    65:1e:29:ca:22:a3:79:70:26:b6:6b:93:b6:64:bb:
                    b5:42:57:ce:fc:b4:8c:61:43:3f:59:24:44:73:83:
                    33:7e:64:16:6c:bb:7e:cb:af:91:32:c9:54:e5:43:
                    17:a5:3c:73:8d:68:db:3e:90:3f:8c:97:8a:db:94:
                    66:5e:5b:35:87:15:ad:8e:3f:b4:67:22:12:fe:34:
                    bd:db:45:f5:33:fa:b6:2a:f3:46:13:45:49:6d:10:
                    1f:8a:3d:97:63:ef:d8:f5:80:39:80:90:21:8b:88:
                    6d:6e:35:2a:99:d4:37:e8:9a:90:cf:df:4e:d3:7f:
                    e0:0f:9e:c9:fb:a1:2d:5f:50:4a:88:1f:c4:2b:e1:
                    c7:df:86:5b:f7:b8:8d:8d:b5:a3:a2:50:77:a4:fe:
                    aa:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:ED:E6:57:2B:31:B8:BB:29:1D:13:CD:99:CC:7C:32:75:78:4B:01
            X509v3 Authority Key Identifier:
                keyid:97:2C:FD:AE:EB:12:6F:6F:CD:46:96:A5:90:F7:01:88:37:AA:5F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36EBDD7/67F004C6BE1D11EB8576B942F8AEA228/lyz9rusSb2_NRpalkPcBiDeqX_I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/lyz9rusSb2_NRpalkPcBiDeqX_I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EBDD7/67F004C6BE1D11EB8576B942F8AEA228/4A89567A8C1D11F1AB9D1ADECE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  217.29.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         27:e8:b1:40:4f:db:b8:1b:ce:38:34:f8:c9:b0:8c:5f:3f:80:
         4f:cb:32:9b:d3:fa:12:f1:fb:54:88:18:9d:8d:ee:98:74:a3:
         bb:05:3c:e5:01:46:a5:80:06:89:30:40:84:3f:da:05:c7:68:
         53:65:63:a7:ec:6d:0c:52:4a:98:a4:7e:a5:8c:cb:8f:25:10:
         d0:f8:53:a3:c4:63:65:d4:d2:66:9f:74:25:6c:d2:db:73:9c:
         80:21:2e:42:c0:e6:84:bc:3f:fb:3f:08:e7:96:4b:ef:e2:b7:
         28:4e:d6:5e:2d:7c:bf:2b:0a:16:5e:cb:36:1c:f7:51:66:4b:
         49:4d:23:b6:48:f6:b3:b1:fc:3e:74:07:e1:26:f5:9e:5c:2d:
         7a:44:1c:bb:af:44:cd:c3:66:d9:22:a2:6b:72:5a:5a:5f:3d:
         94:85:db:52:ec:d9:c8:c6:a4:d3:3f:79:20:b2:15:ca:a4:7a:
         42:05:51:e2:a7:b5:6c:e8:69:7c:ae:f1:03:66:e4:70:bd:b2:
         be:24:d1:4a:d0:bb:5e:ca:3a:7d:42:ea:97:0d:2d:40:76:b3:
         9f:1a:ab:40:b0:8f:49:bb:d8:15:1d:07:c0:dd:a4:c9:bd:97:
         57:16:d8:e0:43:40:a0:a2:e3:fc:68:da:d3:91:fb:99:aa:9c:
         d7:0a:13:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----