Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/1E9B49149F9711F19432EEC7CE1D38B0.roa
File:                     1E9B49149F9711F19432EEC7CE1D38B0.roa (raw, json)
Hash identifier:          423oc5wMsXl0L9ZTq1G1yNiSD/6xYsvAeXUOalOhMmE=
Subject key identifier:   1E:88:59:C8:08:B1:CE:A5:0B:16:E9:23:0B:55:56:3C:A6:14:1B:FB
Certificate issuer:       /CN=F36EF7D0AF/serialNumber=3A553B6EF80BF922312F96B8DDC1F219A8C4121B
Certificate serial:       0596
Authority key identifier: 3A:55:3B:6E:F8:0B:F9:22:31:2F:96:B8:DD:C1:F2:19:A8:C4:12:1B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/1E9B49149F9711F19432EEC7CE1D38B0.roa
Signing time:             Mon 24 Aug 2026 08:38:03 +0000
ROA not before:           Mon 24 Aug 2026 08:37:59 +0000
ROA not after:            Fri 23 Aug 2030 08:37:59 +0000
asID:                     214234
IP address blocks:        102.211.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 06 Sep 2026 03:30:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1430 (0x596)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36EF7D0AF, serialNumber=3A553B6EF80BF922312F96B8DDC1F219A8C4121B
        Validity
            Not Before: Aug 24 08:37:59 2026 GMT
            Not After : Aug 23 08:37:59 2030 GMT
        Subject: CN=6a8c02eb-9ec8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b0:5a:13:1e:7f:71:da:3a:c5:0d:43:02:46:
                    8a:b6:26:f7:2b:0f:57:bd:be:3d:ac:cb:7c:06:0f:
                    21:fc:f2:4a:47:e8:1a:31:7c:71:b2:5e:0f:78:4d:
                    e9:05:57:e3:08:95:b2:54:7d:2c:74:bf:c4:6d:80:
                    2b:e8:b6:c3:0a:4f:e9:5e:b9:e9:04:d8:77:31:19:
                    54:bc:6d:28:62:25:ac:d7:dd:3c:ce:8f:0a:05:7d:
                    ca:f7:07:ea:1f:07:b0:db:12:c0:fb:a3:11:23:7d:
                    50:6b:d6:a2:30:25:91:34:7e:da:92:dc:ce:10:9a:
                    d6:c0:83:bd:c7:f6:04:19:e9:b0:72:47:0d:79:13:
                    78:91:83:93:6e:1a:72:68:0c:af:be:dd:9d:43:36:
                    50:ca:30:97:f2:cb:77:4b:e6:3d:17:e1:32:de:49:
                    49:f0:27:4c:ef:93:f4:34:79:f6:8a:7d:39:9a:ee:
                    97:8e:74:0e:19:27:a7:7a:15:6d:29:22:75:f9:55:
                    9e:47:a6:0d:55:2d:f7:85:3c:61:a0:86:cd:6f:7d:
                    67:de:34:e7:4a:e6:60:a9:c6:e6:e0:f2:95:f5:5c:
                    bd:cc:c6:6c:6e:7e:31:2d:fd:3d:be:4e:b2:2f:86:
                    cc:b0:20:2f:ab:95:74:42:66:59:4a:0f:4f:8f:7f:
                    77:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:88:59:C8:08:B1:CE:A5:0B:16:E9:23:0B:55:56:3C:A6:14:1B:FB
            X509v3 Authority Key Identifier:
                keyid:3A:55:3B:6E:F8:0B:F9:22:31:2F:96:B8:DD:C1:F2:19:A8:C4:12:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/1E9B49149F9711F19432EEC7CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.211.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:d5:59:51:b9:97:6d:d6:13:63:1d:a1:a2:e5:28:29:d7:cc:
         8f:7d:82:5c:3d:8c:22:47:3a:32:56:72:c0:0c:f8:eb:b3:6a:
         ac:62:f0:d5:d3:14:24:5f:fd:91:46:44:cc:dd:92:a2:0f:5d:
         af:10:9d:9b:6c:72:d5:dc:d3:30:bb:fe:d3:70:1e:fe:cd:50:
         a8:df:53:94:61:4b:5d:81:fb:a4:c2:e3:e3:7e:36:02:89:d6:
         b3:c7:1e:1d:0a:b6:5e:94:bf:c3:92:85:1c:31:3c:67:36:71:
         8b:f2:69:ad:0d:da:06:30:9d:77:e6:21:c5:b5:11:21:21:74:
         b8:be:ba:16:48:19:0f:bd:a2:82:8a:91:8f:c8:bb:d1:a7:2b:
         6f:54:ae:23:c7:40:79:b7:f0:69:bc:2a:6a:ae:4a:e4:f3:b6:
         a3:99:32:a2:df:da:18:3d:9e:68:31:69:1b:e6:c1:40:65:b2:
         df:3c:9a:65:72:98:ae:c9:78:b7:7d:35:64:ef:fd:ad:c4:e8:
         2d:e8:85:22:d8:19:1a:cc:45:fd:75:95:c6:11:0a:b3:3b:d6:
         87:1f:d2:19:4c:6f:87:df:da:49:7e:66:96:59:95:36:5e:ca:
         51:c0:a2:22:a9:f1:d0:9a:d8:2f:a1:a8:93:2f:14:85:26:b9:
         35:81:ea:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----