Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36F8F86/43159886192911EFA70CC06E017001B1/CC8AE11EC66211F1AA55E6DACE1D38B0.roa
File:                     CC8AE11EC66211F1AA55E6DACE1D38B0.roa (raw, json)
Hash identifier:          U/BXV1smgAuk4Y5SiuUONT8CKXnCj96zQqSqsksJu1g=
Subject key identifier:   40:0D:2A:CA:D5:F8:12:44:C2:A6:D7:0F:85:8B:6D:A4:04:E4:F0:52
Certificate issuer:       /CN=F36F8F86AF/serialNumber=B1BA3D7C7D8ECD511FDA4BF0EC29F6A99B2C31BB
Certificate serial:       0389
Authority key identifier: B1:BA:3D:7C:7D:8E:CD:51:1F:DA:4B:F0:EC:29:F6:A9:9B:2C:31:BB
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/sbo9fH2OzVEf2kvw7Cn2qZssMbs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F8F86/43159886192911EFA70CC06E017001B1/CC8AE11EC66211F1AA55E6DACE1D38B0.roa
Signing time:             Mon 12 Oct 2026 17:31:47 +0000
ROA not before:           Mon 12 Oct 2026 17:31:42 +0000
ROA not after:            Fri 12 Oct 2029 17:31:42 +0000
asID:                     37381
IP address blocks:        197.159.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F8F86/43159886192911EFA70CC06E017001B1/sbo9fH2OzVEf2kvw7Cn2qZssMbs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F8F86/43159886192911EFA70CC06E017001B1/sbo9fH2OzVEf2kvw7Cn2qZssMbs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/sbo9fH2OzVEf2kvw7Cn2qZssMbs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 28 Oct 2026 04:13:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 905 (0x389)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F8F86AF, serialNumber=B1BA3D7C7D8ECD511FDA4BF0EC29F6A99B2C31BB
        Validity
            Not Before: Oct 12 17:31:42 2026 GMT
            Not After : Oct 12 17:31:42 2029 GMT
        Subject: CN=6acd1983-01fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:02:53:0c:5e:85:02:03:e8:37:af:fc:bc:ac:
                    45:47:54:85:78:13:32:ec:94:85:45:50:59:aa:60:
                    71:6a:50:32:da:6f:ef:36:31:fe:17:49:10:eb:56:
                    e6:19:17:19:46:b4:88:e2:8a:8c:da:f6:38:c0:62:
                    48:5b:e1:0a:9b:09:a5:ca:d9:7e:66:76:d4:a4:2c:
                    3a:74:8f:11:c3:cf:df:35:88:29:b9:0c:77:09:26:
                    ac:49:59:34:a6:bb:4e:1a:78:eb:5d:8f:ad:ca:2c:
                    ee:b4:e3:ad:45:8d:46:05:d2:79:d3:33:ed:79:f5:
                    72:67:28:a5:93:f7:fc:77:0b:51:13:ab:7e:4f:42:
                    16:23:5b:55:36:b2:d5:5a:ff:69:b0:1f:1b:47:d8:
                    09:f6:87:4b:cc:00:62:3f:39:7f:e6:e8:3b:9c:2d:
                    ae:1b:97:89:18:14:78:0d:69:49:1b:b0:e4:2c:eb:
                    d0:59:0e:92:4e:7c:06:d9:76:63:f2:38:c1:0a:4c:
                    e1:17:a9:9e:e8:ef:2e:cc:04:f8:27:a4:ff:a9:8e:
                    1c:57:b7:13:b1:aa:59:ee:b7:36:fe:b5:44:fd:9d:
                    8c:cc:98:80:32:c2:68:38:7a:4c:91:97:61:e6:54:
                    6a:28:e7:a4:6c:9d:a4:05:b1:48:5e:ef:8f:fe:71:
                    0e:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:0D:2A:CA:D5:F8:12:44:C2:A6:D7:0F:85:8B:6D:A4:04:E4:F0:52
            X509v3 Authority Key Identifier:
                keyid:B1:BA:3D:7C:7D:8E:CD:51:1F:DA:4B:F0:EC:29:F6:A9:9B:2C:31:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8F86/43159886192911EFA70CC06E017001B1/sbo9fH2OzVEf2kvw7Cn2qZssMbs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/sbo9fH2OzVEf2kvw7Cn2qZssMbs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8F86/43159886192911EFA70CC06E017001B1/CC8AE11EC66211F1AA55E6DACE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  197.159.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         59:57:3d:e0:68:06:9d:0f:45:17:13:ea:3d:80:70:66:05:15:
         f8:ca:31:b2:63:23:10:c5:ef:d4:70:c5:1d:86:ac:fe:4d:f9:
         f4:e2:7a:00:4f:45:6f:57:26:50:2b:46:20:ba:99:d3:6b:53:
         5c:01:3c:70:a8:91:2f:e9:09:06:60:92:97:d7:ab:fc:11:7b:
         95:fb:3f:39:bb:4a:2b:f6:77:1e:30:78:69:58:87:83:bb:84:
         bd:b3:13:7b:01:48:d9:9b:59:17:63:4f:e0:ec:7a:05:6b:92:
         f4:59:b4:59:88:c6:3b:15:2b:30:6e:f8:cb:aa:f3:92:de:1e:
         59:be:15:a3:3e:30:a6:9a:03:97:3b:85:e4:69:61:40:75:c1:
         7c:4e:2f:19:39:cc:7c:31:28:ff:b2:f5:a5:4f:5d:33:3a:5f:
         59:5a:bc:53:a8:ff:d6:15:98:2e:f2:51:96:8b:60:f9:84:e8:
         7f:5d:6f:26:7b:20:12:60:87:7e:d3:1f:66:62:c4:63:fa:ce:
         05:5d:b8:69:46:d1:6d:77:08:2a:52:ea:79:f1:93:03:4d:83:
         d8:1b:f6:6c:69:ee:18:c0:a4:ff:16:f6:a2:eb:f5:df:dc:2c:
         23:32:d0:af:04:8f:4b:33:28:65:11:65:c4:70:c1:bf:45:b0:
         70:65:cc:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----