Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36FC6C8/D37D2DA070E311EF84610147762E951A/7516F74AC14B11F1A2A8431ACF1D38B0.roa
File:                     7516F74AC14B11F1A2A8431ACF1D38B0.roa (raw, json)
Hash identifier:          DcCQHmmR5s7ehDblHveFTvAtXymdTkIqKwgGUTTJNZ0=
Subject key identifier:   EC:CC:05:14:10:47:FC:D7:28:71:43:FE:89:14:EB:A3:5D:E2:1F:7E
Certificate issuer:       /CN=F36FC6C8AF/serialNumber=2511BAD4078D4672ACF4324299218CE4855D039D
Certificate serial:       0334
Authority key identifier: 25:11:BA:D4:07:8D:46:72:AC:F4:32:42:99:21:8C:E4:85:5D:03:9D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JRG61AeNRnKs9DJCmSGM5IVdA50.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FC6C8/D37D2DA070E311EF84610147762E951A/7516F74AC14B11F1A2A8431ACF1D38B0.roa
Signing time:             Tue 06 Oct 2026 06:02:06 +0000
ROA not before:           Tue 06 Oct 2026 06:02:02 +0000
ROA not after:            Wed 06 Oct 2027 06:02:02 +0000
asID:                     329474
IP address blocks:        102.132.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FC6C8/D37D2DA070E311EF84610147762E951A/JRG61AeNRnKs9DJCmSGM5IVdA50.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FC6C8/D37D2DA070E311EF84610147762E951A/JRG61AeNRnKs9DJCmSGM5IVdA50.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JRG61AeNRnKs9DJCmSGM5IVdA50.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 29 Oct 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 820 (0x334)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FC6C8AF, serialNumber=2511BAD4078D4672ACF4324299218CE4855D039D
        Validity
            Not Before: Oct  6 06:02:02 2026 GMT
            Not After : Oct  6 06:02:02 2027 GMT
        Subject: CN=6ac48ede-d336
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:2a:14:4c:d2:50:73:8d:0c:54:33:93:3e:dd:
                    e3:35:61:24:65:e3:0d:2a:a6:ba:d8:0b:82:87:b4:
                    da:8b:b9:b9:81:3c:a0:86:ea:31:29:57:3a:6c:83:
                    55:ca:26:94:48:b1:09:5b:39:d9:ec:21:0d:bb:24:
                    7d:29:93:29:be:ad:5b:72:90:d7:da:bc:11:03:4a:
                    90:b6:0f:da:7a:74:57:43:d5:70:cc:6c:3c:71:e5:
                    08:aa:8e:17:66:37:35:e5:b0:02:c5:40:53:9e:70:
                    9c:3d:85:bd:08:82:6f:80:93:f8:41:28:03:93:3e:
                    3d:d9:59:fb:8e:05:f2:68:67:4d:e3:2c:cb:47:7e:
                    7d:ee:aa:e5:53:67:28:1c:c5:ae:db:5a:75:bd:da:
                    ba:2f:8d:f4:8b:d8:62:0e:06:98:0f:b7:b2:09:7d:
                    0c:0f:84:80:2d:be:b5:c8:93:d8:a6:2a:63:a4:e7:
                    e6:ae:70:5b:c9:92:12:62:d9:f1:15:c8:37:54:13:
                    3e:09:49:a8:06:c6:ff:92:a1:da:18:91:0c:a8:c3:
                    a9:b5:ae:5e:13:fd:ed:1b:ce:a7:8c:90:8f:3a:a9:
                    83:1d:5d:21:a1:35:c9:12:24:7b:c3:4f:96:3f:47:
                    f9:3f:0f:66:2e:6d:76:f6:88:0c:bc:c2:80:aa:70:
                    64:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:CC:05:14:10:47:FC:D7:28:71:43:FE:89:14:EB:A3:5D:E2:1F:7E
            X509v3 Authority Key Identifier:
                keyid:25:11:BA:D4:07:8D:46:72:AC:F4:32:42:99:21:8C:E4:85:5D:03:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FC6C8/D37D2DA070E311EF84610147762E951A/JRG61AeNRnKs9DJCmSGM5IVdA50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JRG61AeNRnKs9DJCmSGM5IVdA50.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FC6C8/D37D2DA070E311EF84610147762E951A/7516F74AC14B11F1A2A8431ACF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.132.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:49:ed:03:e1:a8:82:f5:d5:fa:b7:f1:46:a0:c2:8d:18:65:
         cb:86:ea:5f:7e:59:e5:8c:e9:d3:7a:47:a4:d1:fb:c7:d5:b0:
         0d:af:8b:db:8e:4b:54:ac:64:0b:a4:13:be:50:80:e9:5c:d9:
         ec:5b:c1:1a:af:bf:b3:75:e4:2b:0a:60:29:48:dc:c3:b2:05:
         0b:bc:07:3f:54:4b:69:a6:6f:28:9b:c0:c2:c2:84:d6:0b:02:
         2d:31:71:8b:c5:bf:7d:3a:11:8f:e4:8e:7b:3f:65:e2:71:4f:
         46:51:cb:93:ac:e0:8b:3e:a7:eb:4a:2c:21:a3:47:7e:1f:b2:
         40:ee:36:e6:10:9b:72:f6:ce:bd:ff:d0:fc:01:45:48:76:ad:
         76:28:3c:d4:9c:d4:ec:a3:53:ad:e0:c6:20:b3:1c:d8:88:6f:
         10:61:0d:af:ac:0a:a6:0d:aa:d5:1b:33:f7:d1:e3:3a:3a:0e:
         44:29:bd:dd:5a:01:10:be:75:97:52:8b:7c:90:6d:ef:c2:89:
         d3:ad:f0:c6:44:21:f0:8a:ce:04:46:e6:0c:9e:5b:f3:be:d9:
         79:c6:20:16:22:05:4e:a1:d6:aa:9d:d2:89:86:d0:3a:1e:a9:
         69:f7:10:69:c1:22:67:41:3d:7f:68:02:c8:b7:ae:6e:f6:c5:
         60:5a:b5:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----