Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3612066/B4E9F56EB1D511F1A3129AC0CE1D38B0/3226718CB1D711F189148CCACE1D38B0.roa
File:                     3226718CB1D711F189148CCACE1D38B0.roa (raw, json)
Hash identifier:          nJ64FS+WCksILj46Guscx9vgjK0V1m37yzo+54WTWTM=
Subject key identifier:   5C:ED:09:B3:03:B8:37:EF:AC:30:4C:78:7F:EA:14:F0:89:34:A7:64
Certificate issuer:       /CN=F3612066AF/serialNumber=456D1C9C1A7E01B63BFCB6F8BC8BC199761260B2
Certificate serial:       02
Authority key identifier: 45:6D:1C:9C:1A:7E:01:B6:3B:FC:B6:F8:BC:8B:C1:99:76:12:60:B2
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/RW0cnBp-AbY7_Lb4vIvBmXYSYLI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3612066/B4E9F56EB1D511F1A3129AC0CE1D38B0/3226718CB1D711F189148CCACE1D38B0.roa
Signing time:             Wed 16 Sep 2026 14:02:05 +0000
ROA not before:           Wed 16 Sep 2026 14:02:01 +0000
ROA not after:            Mon 16 Sep 2030 14:02:01 +0000
asID:                     329610
IP address blocks:        102.204.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3612066/B4E9F56EB1D511F1A3129AC0CE1D38B0/RW0cnBp-AbY7_Lb4vIvBmXYSYLI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3612066/B4E9F56EB1D511F1A3129AC0CE1D38B0/RW0cnBp-AbY7_Lb4vIvBmXYSYLI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/RW0cnBp-AbY7_Lb4vIvBmXYSYLI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 20 Sep 2026 00:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3612066AF, serialNumber=456D1C9C1A7E01B63BFCB6F8BC8BC199761260B2
        Validity
            Not Before: Sep 16 14:02:01 2026 GMT
            Not After : Sep 16 14:02:01 2030 GMT
        Subject: CN=6aaaa15c-bba7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:de:ca:21:29:73:3a:30:8e:d1:bb:81:73:0b:
                    83:fc:09:62:da:5a:14:c6:1f:d7:52:c9:1a:7f:ca:
                    60:c1:3d:e8:2e:e7:98:97:91:35:14:71:e4:ac:5f:
                    1c:ae:21:8c:ba:60:16:d1:d7:4a:c7:b5:68:b9:d2:
                    dd:ff:cc:d4:4b:11:b7:dc:dd:a0:df:ec:f3:80:26:
                    48:79:82:96:c3:ba:07:c4:89:89:6e:1a:7d:3a:1b:
                    ed:d0:ee:09:11:21:ba:e6:91:9d:1f:d8:31:53:d7:
                    43:45:e3:29:ce:ee:df:2c:a5:60:f3:ca:ff:b5:13:
                    80:76:6c:7c:a8:d0:f2:fb:4b:65:28:51:21:f5:28:
                    67:53:76:40:a8:39:55:6c:bf:1e:0f:a7:f9:ef:00:
                    b9:bc:ea:bc:4d:82:17:a4:5c:1f:cc:00:3c:b4:ab:
                    7e:fb:eb:53:fa:b2:4c:2a:c6:bd:0b:3e:db:67:b9:
                    34:89:b4:bf:ec:67:75:4b:e3:c6:22:4e:dd:39:f0:
                    f4:51:d9:21:c5:01:8e:68:b3:e8:0b:1a:ef:6c:a0:
                    ea:16:c6:95:1b:b2:cb:88:f9:ee:12:06:b3:09:3a:
                    90:44:40:21:a6:cf:aa:9d:8f:8d:18:59:8b:49:11:
                    12:35:1c:11:cd:1e:40:f7:2e:29:f1:07:90:ee:6a:
                    2f:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:ED:09:B3:03:B8:37:EF:AC:30:4C:78:7F:EA:14:F0:89:34:A7:64
            X509v3 Authority Key Identifier:
                keyid:45:6D:1C:9C:1A:7E:01:B6:3B:FC:B6:F8:BC:8B:C1:99:76:12:60:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3612066/B4E9F56EB1D511F1A3129AC0CE1D38B0/RW0cnBp-AbY7_Lb4vIvBmXYSYLI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/RW0cnBp-AbY7_Lb4vIvBmXYSYLI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3612066/B4E9F56EB1D511F1A3129AC0CE1D38B0/3226718CB1D711F189148CCACE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.204.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:0d:38:c9:7b:de:6c:85:46:a7:06:be:86:8f:0b:17:f0:2c:
         ae:cc:2f:40:af:d4:b8:1f:38:a8:2c:1a:6c:8e:f5:a4:80:6f:
         1f:33:fe:86:94:2e:03:a0:4b:99:a4:6d:20:95:b8:19:86:a9:
         a4:08:41:e9:16:b4:71:0f:ca:82:66:b1:cd:e0:22:61:ee:08:
         ab:5d:59:9c:94:79:7e:d1:a7:8c:f5:79:26:d9:ea:a0:ff:87:
         a8:d0:63:e5:b4:be:18:51:3e:ea:28:9c:53:73:e2:87:58:5e:
         d2:7a:54:7d:3e:ae:97:36:53:ca:1c:45:71:c2:b8:5b:14:12:
         9f:61:ea:fe:0e:0d:8c:c3:1f:98:84:1f:e2:21:74:14:27:c8:
         9c:dc:5a:34:25:da:2c:99:35:24:d1:fa:76:37:c1:c1:63:04:
         97:51:c4:8e:93:8a:7c:07:b2:bc:b0:6c:1a:75:57:a8:66:0c:
         99:0b:26:f7:e9:fe:62:55:71:5a:08:d4:88:fe:b4:ac:0b:0d:
         ed:2a:c8:98:37:81:12:f4:62:6f:ed:07:a4:9a:ff:c9:52:e7:
         c2:03:c3:5d:0f:0e:b3:cb:b2:ae:c9:a0:fc:f2:d6:4e:16:09:
         06:df:26:e4:82:f6:32:de:12:8b:5b:d2:38:ee:b6:da:69:f9:
         0d:5d:69:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----