Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36F8F86/43159886192911EFA70CC06E017001B1/07A832D8C66311F1998657DBCE1D38B0.roa
File:                     07A832D8C66311F1998657DBCE1D38B0.roa (raw, json)
Hash identifier:          GqHRZJj9nlcUGaTV4w7v3LO/ekOGpkkHbCfSfbD+gbE=
Subject key identifier:   A1:FF:86:22:29:FB:62:E6:28:05:85:46:12:09:41:4F:3B:A3:F2:61
Certificate issuer:       /CN=F36F8F86AF/serialNumber=B1BA3D7C7D8ECD511FDA4BF0EC29F6A99B2C31BB
Certificate serial:       038B
Authority key identifier: B1:BA:3D:7C:7D:8E:CD:51:1F:DA:4B:F0:EC:29:F6:A9:9B:2C:31:BB
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/sbo9fH2OzVEf2kvw7Cn2qZssMbs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F8F86/43159886192911EFA70CC06E017001B1/07A832D8C66311F1998657DBCE1D38B0.roa
Signing time:             Mon 12 Oct 2026 17:33:26 +0000
ROA not before:           Mon 12 Oct 2026 17:33:21 +0000
ROA not after:            Fri 12 Oct 2029 17:33:21 +0000
asID:                     37381
IP address blocks:        102.223.28.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F8F86/43159886192911EFA70CC06E017001B1/sbo9fH2OzVEf2kvw7Cn2qZssMbs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F8F86/43159886192911EFA70CC06E017001B1/sbo9fH2OzVEf2kvw7Cn2qZssMbs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/sbo9fH2OzVEf2kvw7Cn2qZssMbs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 28 Oct 2026 04:13:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 907 (0x38b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F8F86AF, serialNumber=B1BA3D7C7D8ECD511FDA4BF0EC29F6A99B2C31BB
        Validity
            Not Before: Oct 12 17:33:21 2026 GMT
            Not After : Oct 12 17:33:21 2029 GMT
        Subject: CN=6acd19e6-d7c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a6:27:ba:44:03:6f:c1:ea:18:fb:25:26:85:
                    2b:aa:24:14:72:84:b6:4b:e8:fb:f0:6b:ff:38:3c:
                    03:1d:e9:44:3b:ad:7b:49:33:f0:a0:4d:13:e4:94:
                    b2:84:71:37:5b:7e:80:ca:54:a9:e7:3a:65:f5:1b:
                    46:3f:78:bc:31:8c:ad:83:ac:26:29:f5:50:d5:d6:
                    43:ff:49:7a:79:d5:88:ae:fa:1f:e6:84:be:c8:89:
                    33:b2:10:9a:96:bf:b2:36:ce:e6:39:59:85:90:df:
                    f6:16:59:8e:91:f1:b9:b2:7d:29:7a:13:7f:b6:6a:
                    70:10:5d:b8:4c:a5:ea:15:e4:2a:ce:e1:27:0a:09:
                    4c:4a:16:09:cb:a9:0d:68:b8:46:7a:a3:4f:11:0a:
                    b7:d2:f9:1a:53:58:8f:e0:7c:22:1e:11:5e:64:e9:
                    68:bc:e1:2d:20:db:2f:cf:f5:38:31:52:12:ce:35:
                    d6:3b:ff:99:50:6a:37:b5:78:8b:ec:37:b3:14:4d:
                    be:45:17:7e:5a:f6:3d:53:ee:cd:d7:a6:fd:c4:28:
                    56:24:53:af:84:38:a2:bb:5b:57:04:cf:59:7a:80:
                    17:a7:e8:00:cf:c0:4d:c3:79:d0:34:d6:67:1a:3d:
                    41:8a:4d:e1:2c:16:a0:10:e6:3f:19:df:5a:63:cc:
                    80:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:FF:86:22:29:FB:62:E6:28:05:85:46:12:09:41:4F:3B:A3:F2:61
            X509v3 Authority Key Identifier:
                keyid:B1:BA:3D:7C:7D:8E:CD:51:1F:DA:4B:F0:EC:29:F6:A9:9B:2C:31:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8F86/43159886192911EFA70CC06E017001B1/sbo9fH2OzVEf2kvw7Cn2qZssMbs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/sbo9fH2OzVEf2kvw7Cn2qZssMbs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8F86/43159886192911EFA70CC06E017001B1/07A832D8C66311F1998657DBCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.223.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         39:2a:b1:13:0b:8e:b0:50:8c:36:7f:b8:81:de:c2:9f:15:82:
         c0:49:a1:83:71:f6:66:bc:be:4a:d7:0b:36:e3:09:1e:60:98:
         26:d3:82:b4:5c:ee:37:1a:61:23:f3:67:f8:1e:f1:71:2e:e0:
         42:d3:a7:61:a8:6a:88:a4:e3:30:76:98:24:c7:3e:cc:c8:6f:
         c3:c7:8a:08:1b:53:20:60:65:bd:ca:52:97:15:36:29:98:86:
         db:ef:92:a0:bc:57:4d:45:2c:2b:61:64:75:48:84:ae:5d:81:
         a7:22:f6:44:96:2f:b9:8b:87:56:d1:a1:aa:b1:a0:30:70:6b:
         d8:ab:6c:42:fe:49:9d:9d:ce:d1:d2:6c:fb:c9:85:ab:f0:38:
         d4:ec:e5:43:da:0b:2f:86:a1:a6:2c:7b:1c:1a:49:f0:97:4e:
         fc:9b:5f:db:eb:e7:80:f6:28:41:2f:ea:7a:b3:aa:ec:94:ec:
         6f:c9:8c:e3:b0:25:ba:b9:50:21:d6:8a:ac:f3:6c:f6:21:d8:
         fd:ba:da:f3:06:a1:de:20:d3:15:6c:65:0d:98:69:06:11:f5:
         61:03:73:8f:ca:89:25:61:6f:8a:22:9e:b6:21:90:12:07:bb:
         a8:b0:f7:a2:1f:2a:ef:1d:2d:e4:f9:f5:21:73:66:aa:15:ec:
         45:38:94:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----