Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/90FCB8B86B9411F081FD9B9BDAE4EC9C.roa
File:                     90FCB8B86B9411F081FD9B9BDAE4EC9C.roa (raw, json)
Hash identifier:          vUAbMNqPUClCaFKVVzlORFxrNoGQZA9TeqanOnR7WP4=
Subject key identifier:   5F:8D:A7:D3:CE:A8:1B:DF:8A:A5:31:63:80:B2:24:F6:2F:21:E3:8C
Certificate issuer:       /CN=F36F0628AF/serialNumber=8605D7599A0402F70EC2F258D6C16BD2E4E8D1FE
Certificate serial:       065A
Authority key identifier: 86:05:D7:59:9A:04:02:F7:0E:C2:F2:58:D6:C1:6B:D2:E4:E8:D1:FE
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/hgXXWZoEAvcOwvJY1sFr0uTo0f4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/90FCB8B86B9411F081FD9B9BDAE4EC9C.roa
Signing time:             Mon 28 Jul 2025 09:23:48 +0000
ROA not before:           Mon 28 Jul 2025 09:23:43 +0000
ROA not after:            Mon 29 Sep 2025 09:23:43 +0000
asID:                     209854
IP address blocks:        196.44.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/hgXXWZoEAvcOwvJY1sFr0uTo0f4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/hgXXWZoEAvcOwvJY1sFr0uTo0f4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/hgXXWZoEAvcOwvJY1sFr0uTo0f4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 03 Aug 2025 00:07:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1626 (0x65a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F0628AF, serialNumber=8605D7599A0402F70EC2F258D6C16BD2E4E8D1FE
        Validity
            Not Before: Jul 28 09:23:43 2025 GMT
            Not After : Sep 29 09:23:43 2025 GMT
        Subject: CN=688741a4-d728
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:a7:70:92:e9:43:a7:ed:46:09:b6:e5:f3:b5:
                    91:89:09:3a:e2:fd:b2:56:c9:88:dd:19:e0:91:a1:
                    d2:91:f2:2b:f3:af:f5:be:af:96:99:43:bc:42:9d:
                    a2:dd:ca:84:6c:fc:76:73:f9:cf:4d:6e:9e:6f:ee:
                    8a:55:88:cf:f8:0e:63:2a:cd:2e:c0:e6:3f:68:cc:
                    1b:d6:df:c9:1a:6c:54:f6:ae:ad:3f:0b:ec:8b:fe:
                    b1:c9:1e:d6:2f:0f:29:d6:ea:49:86:6e:f6:c8:4e:
                    90:e4:03:32:98:d9:d1:f3:5b:e9:8e:09:2f:2f:ed:
                    04:b8:fb:b4:fd:3f:96:0e:73:a0:5e:c6:77:f0:89:
                    85:4a:c1:58:1e:2f:9f:88:18:30:18:fe:a5:b8:c2:
                    f2:03:2e:65:ea:b8:41:65:94:74:83:34:c5:cf:35:
                    9c:8d:c5:e7:01:bf:95:18:fc:ba:ff:f3:2d:cb:3a:
                    ce:22:24:ed:5c:19:4a:62:e8:1f:05:78:cc:f1:8c:
                    18:ff:27:d7:18:bc:fd:4e:2a:b6:b2:bf:c6:89:97:
                    d9:2b:f6:3a:02:7c:fc:c5:2e:30:d9:88:18:64:f2:
                    fa:a4:7a:3d:0a:25:b0:76:a6:e1:82:46:c0:72:11:
                    ce:15:e4:00:01:c6:d4:2c:cd:ea:b7:12:63:d7:32:
                    42:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:8D:A7:D3:CE:A8:1B:DF:8A:A5:31:63:80:B2:24:F6:2F:21:E3:8C
            X509v3 Authority Key Identifier:
                keyid:86:05:D7:59:9A:04:02:F7:0E:C2:F2:58:D6:C1:6B:D2:E4:E8:D1:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/hgXXWZoEAvcOwvJY1sFr0uTo0f4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hgXXWZoEAvcOwvJY1sFr0uTo0f4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/90FCB8B86B9411F081FD9B9BDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.44.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:f6:38:93:a3:7a:97:c9:40:a6:3a:70:03:43:59:c6:2b:fb:
         db:f6:89:f4:6b:c3:d3:a3:54:a0:b6:ec:48:59:42:78:d1:27:
         00:9b:ae:c7:0c:b0:37:0c:e6:bd:e7:82:25:ea:c9:2d:31:fd:
         93:0a:85:5a:c4:33:66:e7:40:a9:58:db:48:f2:0f:e9:31:89:
         ce:70:01:27:e7:1e:71:74:ac:bc:98:a6:ab:39:e0:6a:6d:98:
         d1:f7:71:91:09:c3:9b:38:82:4f:38:ac:dd:9e:b2:b5:43:27:
         50:2a:37:c3:f5:37:e8:3b:9a:97:f6:48:29:c8:b6:1d:73:17:
         b6:9b:f8:f9:31:ed:e0:1a:52:94:a1:84:28:08:1e:3d:49:2f:
         72:c8:91:89:86:b7:41:9e:c2:58:be:26:7e:f0:7a:0a:ad:3a:
         30:4b:dd:07:78:dc:1e:e2:db:00:24:5a:59:a2:84:4c:34:2b:
         b8:b6:23:f0:18:e9:bd:7b:97:0d:43:24:87:00:12:2b:54:e3:
         c7:43:10:57:3b:b1:01:b8:6c:57:67:b9:18:70:b2:79:27:f5:
         22:ef:2c:a9:8f:33:3e:cf:c4:0f:99:62:6e:9d:f7:6c:00:35:
         67:42:f9:7c:3d:21:13:e0:ea:c7:df:25:1f:3c:47:68:92:c0:
         28:15:ac:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 1 18:11:18 2025 by rpki-client