Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/BD523DF2CC5F11F1ADB4D3F5CE1D38B0.roa
File:                     BD523DF2CC5F11F1ADB4D3F5CE1D38B0.roa (raw, json)
Hash identifier:          m/UMlEc4mK0lVeDSrVat1WGaEW65n2kzxC1eJyeihJc=
Subject key identifier:   36:D0:C0:80:1A:0A:06:17:1A:0D:13:8B:2A:47:66:BB:38:61:55:87
Certificate issuer:       /CN=F36EF7D0AF/serialNumber=3A553B6EF80BF922312F96B8DDC1F219A8C4121B
Certificate serial:       05E1
Authority key identifier: 3A:55:3B:6E:F8:0B:F9:22:31:2F:96:B8:DD:C1:F2:19:A8:C4:12:1B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/BD523DF2CC5F11F1ADB4D3F5CE1D38B0.roa
Signing time:             Tue 20 Oct 2026 08:25:00 +0000
ROA not before:           Tue 20 Oct 2026 08:24:55 +0000
ROA not after:            Sun 13 Oct 2030 08:24:55 +0000
asID:                     203156
IP address blocks:        102.212.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 12 Nov 2026 03:24:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1505 (0x5e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36EF7D0AF, serialNumber=3A553B6EF80BF922312F96B8DDC1F219A8C4121B
        Validity
            Not Before: Oct 20 08:24:55 2026 GMT
            Not After : Oct 13 08:24:55 2030 GMT
        Subject: CN=6ad7255c-9cd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:92:21:74:86:aa:a7:60:38:8f:65:db:3c:99:
                    38:e0:8a:01:59:89:0c:09:3f:e9:64:f1:d4:f3:1d:
                    db:24:e6:23:cb:fd:35:8f:42:c6:28:b5:9f:09:5e:
                    a5:30:dd:f0:b0:18:b0:10:28:5f:6c:d4:71:1d:7b:
                    27:56:8d:88:1a:9b:c3:f3:94:c4:5e:98:20:fe:9e:
                    94:4c:ae:f7:43:99:86:8c:2f:d3:61:9e:10:88:45:
                    e9:03:42:a5:c0:9b:e7:0f:14:b7:bd:13:4c:ce:f2:
                    dd:9a:2e:85:e2:b4:c0:fd:da:cb:b6:c7:be:ed:8f:
                    ff:b5:db:90:7b:70:01:fe:77:d4:de:2c:f0:ed:eb:
                    06:dd:e4:d6:a7:ee:d6:4c:5e:1d:02:4e:f7:d2:57:
                    9f:95:73:48:ff:00:73:84:b7:c9:3a:a3:a5:54:f6:
                    cc:29:ef:cf:67:c3:8d:34:70:2f:d9:9d:37:00:c6:
                    aa:91:b5:15:e1:9f:72:00:78:6b:57:b9:94:4d:49:
                    eb:42:5d:e5:bc:c9:a6:12:67:e9:4a:fe:4e:92:4b:
                    a1:10:62:42:bc:3d:f9:d1:6c:b9:29:c6:52:ce:94:
                    52:e3:59:ec:cb:ce:73:cb:46:86:53:a3:41:94:18:
                    6f:e3:4b:45:44:4a:e9:c5:0e:59:b9:52:64:31:5c:
                    c7:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:D0:C0:80:1A:0A:06:17:1A:0D:13:8B:2A:47:66:BB:38:61:55:87
            X509v3 Authority Key Identifier:
                keyid:3A:55:3B:6E:F8:0B:F9:22:31:2F:96:B8:DD:C1:F2:19:A8:C4:12:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/BD523DF2CC5F11F1ADB4D3F5CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.212.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:6a:ae:44:fb:a5:8c:30:ee:6b:7d:ce:da:64:9b:b3:ed:6b:
         42:92:a7:8a:e1:be:82:b5:ca:97:e9:6b:2f:e1:6f:98:11:e3:
         00:61:a0:13:ca:a4:33:06:de:77:69:10:1d:e1:e0:c4:68:e6:
         0b:39:f1:58:c3:97:19:9a:cc:87:82:f2:6e:93:1e:65:78:ed:
         83:2e:0b:d0:87:0d:c7:7d:6c:ce:f8:61:5a:cb:91:f8:3d:9a:
         7f:e7:0d:b6:77:69:ea:fc:34:d9:c4:c8:b9:45:30:7f:e0:1d:
         88:c8:9b:39:ce:db:72:3b:87:00:ee:44:fe:df:a7:fc:5a:d7:
         65:8e:f5:fe:f4:31:36:77:cf:75:f3:f2:28:e1:83:bb:e9:38:
         f4:f8:57:00:c4:c7:49:84:a8:fc:b1:79:23:7b:73:08:87:30:
         8c:87:e3:e9:01:9a:ad:a4:39:70:a9:c7:a8:53:d3:4b:d5:0d:
         2d:3f:51:9b:6e:8b:29:eb:29:55:ab:cc:d3:35:ee:72:43:bd:
         86:84:5b:4f:4d:ca:a5:ee:d6:df:53:49:6a:f0:ea:98:2f:7b:
         f4:54:58:65:c0:91:82:45:74:90:03:f6:cd:8d:d8:87:3c:a6:
         b3:2b:65:ae:f1:87:d6:6f:59:b0:8e:b0:2d:bb:d0:ca:ac:cd:
         b7:07:4a:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----