Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/C306AD7E90F411F198CACCCBCE1D38B0.roa
File:                     C306AD7E90F411F198CACCCBCE1D38B0.roa (raw, json)
Hash identifier:          Pr19ojlPjTO0lkjuqQ/76YVUI5iSg5QaoLptkKCZniw=
Subject key identifier:   06:3A:87:B8:EF:23:7E:8B:E5:F9:35:30:91:FE:39:FA:42:32:8D:B9
Certificate issuer:       /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial:       118A
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/C306AD7E90F411F198CACCCBCE1D38B0.roa
Signing time:             Wed 05 Aug 2026 17:40:35 +0000
ROA not before:           Wed 05 Aug 2026 17:40:31 +0000
ROA not after:            Mon 06 Nov 2028 17:40:31 +0000
asID:                     207990
IP address blocks:        161.123.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.mft
                          rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 12 Sep 2026 00:26:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4490 (0x118a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA15DAR, serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
        Validity
            Not Before: Aug  5 17:40:31 2026 GMT
            Not After : Nov  6 17:40:31 2028 GMT
        Subject: CN=6a737593-7402
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:37:c5:3d:94:9a:53:40:f2:28:29:53:c4:8f:
                    f4:18:ec:b9:d0:02:fa:53:ba:9d:f5:ed:90:63:f3:
                    45:53:db:ff:49:bd:9d:15:74:5d:14:74:5b:36:fa:
                    98:c3:e8:9a:09:93:0a:97:5f:a5:10:20:57:b0:cc:
                    39:84:a2:eb:3f:84:cf:5d:4c:9c:cf:5c:4a:99:56:
                    45:20:05:e3:c4:ea:aa:b7:d8:d2:d9:12:76:04:cc:
                    3b:9a:be:3a:d8:13:24:08:c0:85:48:05:f8:df:2d:
                    e4:f6:a6:c4:f5:21:d0:64:36:f5:a6:8a:61:27:cc:
                    f4:d4:fa:f5:5b:43:be:70:b2:d4:11:40:47:0d:a7:
                    93:45:9d:51:6c:29:2f:b1:ff:a3:2a:e7:a2:c1:85:
                    34:bd:cf:ae:08:59:c4:11:a4:31:25:29:cd:f6:09:
                    1f:48:db:95:9c:21:64:d8:f8:f7:fd:10:a8:8d:b4:
                    81:fe:ae:fd:87:c2:8e:1a:7a:35:38:49:2d:88:ad:
                    c4:95:70:61:84:ab:01:36:66:a6:28:ff:0e:c6:38:
                    c2:89:b4:3e:9c:84:57:74:ce:ae:7a:20:89:1a:d2:
                    b0:69:f8:f3:83:15:70:b5:61:fb:f2:3a:29:3a:d9:
                    58:52:e4:2e:68:94:7a:9c:5a:df:1e:2a:ee:82:35:
                    36:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:3A:87:B8:EF:23:7E:8B:E5:F9:35:30:91:FE:39:FA:42:32:8D:B9
            X509v3 Authority Key Identifier:
                keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/C306AD7E90F411F198CACCCBCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.123.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:16:44:7f:38:fe:63:1c:42:f7:40:5b:d9:8a:29:0c:15:83:
         3d:3c:43:06:12:ac:6e:aa:92:e6:33:05:5f:30:a6:92:2b:3f:
         79:e7:e4:14:c3:56:e4:c9:a2:32:ca:5a:fb:10:12:3c:88:6f:
         66:55:ab:15:d1:fe:87:78:fd:2e:37:53:c8:5a:d7:50:92:19:
         2c:05:94:dd:ca:73:4b:c6:b4:01:1e:c1:8a:41:16:c0:e6:9d:
         94:28:ce:e5:34:e8:67:17:ad:b1:e5:ed:4f:91:b8:01:2b:50:
         76:fd:63:44:2d:4b:c2:bb:02:f1:b9:3c:50:a1:b0:f1:18:79:
         7f:fe:61:22:7f:10:75:ff:cf:1f:49:e8:06:5a:95:b4:44:29:
         03:64:de:e5:75:f2:48:8d:13:26:2d:e5:b1:ce:44:a9:05:fc:
         47:bb:2b:2a:35:bd:ac:a9:77:85:85:71:9e:26:85:78:d4:08:
         7b:bd:9e:25:3b:58:cd:a3:c3:03:fb:be:c3:1c:ff:a9:9e:fc:
         77:9f:2e:34:35:d3:53:f1:0d:fa:aa:a1:a4:c4:09:78:a9:b8:
         31:6b:d8:28:96:51:ad:64:87:21:80:17:4b:07:d0:b3:91:50:
         9f:13:90:57:7c:32:c2:e5:ec:25:13:88:ac:ef:be:d0:39:1f:
         f0:fb:9b:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----