Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/71406F96923B11F1BD0AEF0ECF1D38B0.roa
File:                     71406F96923B11F1BD0AEF0ECF1D38B0.roa (raw, json)
Hash identifier:          aJKmexwk9g7/tt4TvBJiKjQ/5D0B14m62pVo3Y6EYQk=
Subject key identifier:   BF:45:49:DD:A2:5A:67:A8:3B:E3:B4:86:6E:FC:A4:18:A5:EA:D8:78
Certificate issuer:       /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial:       11C5
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/71406F96923B11F1BD0AEF0ECF1D38B0.roa
Signing time:             Fri 07 Aug 2026 08:39:03 +0000
ROA not before:           Fri 07 Aug 2026 08:38:59 +0000
ROA not after:            Thu 07 Dec 2028 08:38:59 +0000
asID:                     207990
IP address blocks:        161.123.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.mft
                          rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 12 Sep 2026 00:26:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4549 (0x11c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA15DAR, serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
        Validity
            Not Before: Aug  7 08:38:59 2026 GMT
            Not After : Dec  7 08:38:59 2028 GMT
        Subject: CN=6a7599a7-ade9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:da:8a:6a:0b:b7:40:45:7a:0a:61:7e:d4:77:
                    19:3e:a0:c0:6f:f5:69:9b:30:ef:96:bf:ba:2b:08:
                    4c:e7:b8:83:87:54:86:0d:4b:aa:73:ce:2d:70:49:
                    b9:eb:f6:57:76:0b:57:d5:12:e0:8b:d9:41:c0:b2:
                    34:6e:d6:62:bb:8c:92:2d:3e:6d:e7:e9:c2:ef:b0:
                    97:bd:cf:8b:b5:19:2d:28:e3:8c:38:9c:cf:dc:e4:
                    4c:12:29:db:be:40:ea:60:0f:dc:1b:60:4a:14:6c:
                    6c:00:07:60:b1:f5:99:b2:06:7d:24:59:6a:71:be:
                    96:5b:53:9b:5c:b0:33:aa:7f:58:f4:61:ac:c8:86:
                    c5:ea:b1:d1:a0:fa:87:dd:66:e1:fe:60:f3:6f:d7:
                    a4:6a:58:12:4c:4c:60:c2:98:f4:a3:88:af:fc:ac:
                    86:8c:b3:0d:90:97:b1:c7:18:a5:96:e1:a5:5c:83:
                    23:2c:74:91:1f:00:f1:4f:4d:3f:1d:7b:ff:3a:a4:
                    c8:a8:53:20:3d:8e:87:d7:a3:36:77:44:41:3c:b9:
                    41:6f:b1:7b:a4:c4:96:a4:f6:c9:a4:c9:2d:f3:44:
                    57:97:54:d3:ea:e8:11:55:7d:c2:12:31:28:28:13:
                    8c:3a:3a:77:5d:8d:20:19:27:d3:40:9f:92:ab:87:
                    92:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:45:49:DD:A2:5A:67:A8:3B:E3:B4:86:6E:FC:A4:18:A5:EA:D8:78
            X509v3 Authority Key Identifier:
                keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/71406F96923B11F1BD0AEF0ECF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.123.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:9f:d6:22:e7:3e:7b:07:62:0f:c9:60:f0:4c:cc:9e:fe:19:
         46:4e:cb:db:f8:f2:eb:61:3f:e8:01:ce:d7:0c:31:31:85:73:
         c0:1f:98:68:4e:2f:c2:1c:16:8a:ed:0b:f4:17:22:cf:72:00:
         30:c1:5d:7a:14:7c:03:ba:95:9a:36:9b:e9:d2:27:55:72:40:
         4d:78:41:9e:46:35:8c:e3:fc:98:4b:31:cf:1f:3a:e6:58:90:
         50:cf:e6:2c:ea:59:5b:75:ae:6e:1c:e6:5c:d2:94:50:8c:f3:
         d2:02:5f:5e:9f:05:83:85:cb:95:1f:fd:68:11:6d:27:c3:70:
         73:a0:97:f4:74:f7:cc:9d:c1:1b:57:af:16:d3:27:48:38:11:
         d6:49:f7:b3:03:9c:ea:85:9d:6b:1c:15:a5:2f:01:97:d0:85:
         b0:1e:f2:aa:97:11:36:79:92:3e:eb:3c:a2:6d:15:bb:22:67:
         85:b7:8f:59:bb:cf:9b:5c:32:d6:00:06:a1:44:e0:0a:0c:26:
         39:5f:5f:b2:b5:e1:45:c3:1b:76:57:b0:db:4c:07:bc:a4:1e:
         6e:d3:35:5c:54:91:5b:56:9d:2b:bd:22:0e:c4:0a:f6:84:e1:
         2f:52:82:b6:a2:46:2a:f3:71:77:b2:23:b8:a6:73:12:86:22:
         70:22:d7:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----