Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3676EFD/073E2BB8C6F411F193F62E16CF1D38B0/EDBC0690C6F511F1BE1DABA2CE1D38B0.roa
File:                     EDBC0690C6F511F1BE1DABA2CE1D38B0.roa (raw, json)
Hash identifier:          9/cjEgiSt4hS0Qr9erlMMYmJUQaWshlUxxjZfjH3IJE=
Subject key identifier:   A7:45:40:04:6A:76:AF:E1:FD:DD:5A:58:F9:E3:D3:FB:E0:FF:14:0F
Certificate issuer:       /CN=F3676EFDAF/serialNumber=EE2AC3DA3D8A0A4C66A1114D7FC0D45AFD820E0A
Certificate serial:       02
Authority key identifier: EE:2A:C3:DA:3D:8A:0A:4C:66:A1:11:4D:7F:C0:D4:5A:FD:82:0E:0A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/7irD2j2KCkxmoRFNf8DUWv2CDgo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3676EFD/073E2BB8C6F411F193F62E16CF1D38B0/EDBC0690C6F511F1BE1DABA2CE1D38B0.roa
Signing time:             Tue 13 Oct 2026 11:04:59 +0000
ROA not before:           Tue 13 Oct 2026 11:04:54 +0000
ROA not after:            Fri 31 Oct 2036 11:04:54 +0000
asID:                     329220
IP address blocks:        102.213.28.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3676EFD/073E2BB8C6F411F193F62E16CF1D38B0/7irD2j2KCkxmoRFNf8DUWv2CDgo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3676EFD/073E2BB8C6F411F193F62E16CF1D38B0/7irD2j2KCkxmoRFNf8DUWv2CDgo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/7irD2j2KCkxmoRFNf8DUWv2CDgo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 05 Nov 2026 06:03:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3676EFDAF, serialNumber=EE2AC3DA3D8A0A4C66A1114D7FC0D45AFD820E0A
        Validity
            Not Before: Oct 13 11:04:54 2026 GMT
            Not After : Oct 31 11:04:54 2036 GMT
        Subject: CN=6ace105a-5ff6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:bf:ff:ac:cc:83:2a:7e:3f:f8:48:11:31:57:
                    5d:c6:5d:69:df:bc:96:df:5e:74:bd:19:fc:10:49:
                    7d:cb:88:27:5b:c4:9f:68:b9:ef:0b:92:6d:4b:fb:
                    46:d8:bc:7b:bd:52:51:91:2e:d1:5b:97:03:da:5b:
                    c6:a7:36:07:e8:15:8f:f3:91:a6:e0:86:8a:3f:52:
                    12:ab:52:f3:56:fb:01:19:f0:48:f9:aa:66:e0:74:
                    7b:32:4a:cb:a6:35:14:a6:48:43:2b:24:59:64:eb:
                    3d:d9:06:cf:2c:2e:8d:99:fd:61:dc:67:dc:ee:c4:
                    24:2e:6e:19:fc:da:4f:08:58:82:6e:ff:ee:ff:21:
                    99:6f:d5:f6:6d:c1:f0:ed:ad:15:2d:72:1b:0e:a0:
                    89:43:b9:87:65:22:b3:11:ce:6b:e3:6c:bb:ad:7d:
                    55:f1:16:0b:ff:2b:b5:60:4c:1f:b7:4e:ec:03:a6:
                    7a:2c:89:3f:63:16:2f:0f:3b:52:56:13:03:19:05:
                    67:99:65:f4:6e:ea:4c:94:c4:e8:98:ff:d9:30:f3:
                    08:bf:2a:00:2f:74:a6:a1:bf:c6:c2:b4:6f:5c:56:
                    cb:7c:e4:02:0c:39:61:ef:66:36:b8:49:53:e3:5d:
                    29:08:7d:89:bb:1c:19:97:a2:57:5b:77:8c:a8:95:
                    5f:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:45:40:04:6A:76:AF:E1:FD:DD:5A:58:F9:E3:D3:FB:E0:FF:14:0F
            X509v3 Authority Key Identifier:
                keyid:EE:2A:C3:DA:3D:8A:0A:4C:66:A1:11:4D:7F:C0:D4:5A:FD:82:0E:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3676EFD/073E2BB8C6F411F193F62E16CF1D38B0/7irD2j2KCkxmoRFNf8DUWv2CDgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/7irD2j2KCkxmoRFNf8DUWv2CDgo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3676EFD/073E2BB8C6F411F193F62E16CF1D38B0/EDBC0690C6F511F1BE1DABA2CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.213.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9c:8f:7f:02:79:09:0f:f4:e1:fe:2b:aa:fa:e5:4c:42:92:6b:
         60:cf:cc:61:a3:91:b7:fc:a5:6b:8e:03:cf:07:67:b1:4a:f3:
         6c:6b:d3:3c:a0:aa:b4:68:77:97:db:ee:e5:7e:d8:70:cd:d7:
         86:fb:31:c6:47:71:dc:a8:cf:71:5f:38:38:92:cd:b6:56:56:
         4f:e9:f3:86:9f:ea:ec:a0:65:34:ef:2b:72:50:a6:8b:fd:1b:
         5e:9a:0e:c1:99:79:d8:83:46:3c:50:4f:35:eb:0f:2c:2a:50:
         1a:e9:c3:6e:7f:36:fa:62:3b:72:28:1f:bf:0b:f8:a8:fc:54:
         87:3f:3e:4d:f2:d1:dd:ff:70:44:bd:4d:3c:fd:7c:33:6b:c5:
         83:70:60:65:37:4d:8a:5e:cf:f8:30:2a:63:dc:c0:85:d5:d8:
         af:30:db:e1:38:18:a7:41:a1:aa:4c:94:08:24:22:32:b7:fd:
         ba:80:46:5d:cf:37:68:d0:4a:39:49:9f:55:5e:5b:e7:9d:1b:
         fe:41:23:38:30:24:3e:de:37:43:fe:35:02:12:6e:d1:3d:c5:
         48:60:30:4c:67:50:b9:70:cb:70:18:2a:ab:fd:33:4a:6f:07:
         19:1d:42:6c:92:07:f1:df:dc:f8:62:4b:83:6f:a6:6f:1a:83:
         e6:64:69:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----