Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3628DDE/BF78233A369E11E9A7D5E220F8AEA228/86A30800B0DE11F1BCFD8EEDCE1D38B0.roa
File:                     86A30800B0DE11F1BCFD8EEDCE1D38B0.roa (raw, json)
Hash identifier:          C0T/vA48xNWnd3+iRMQmrJv+PCXqT16VLz0/ESUXyhU=
Subject key identifier:   DD:F3:F8:DF:B3:2A:1F:A0:6B:E3:21:6C:E0:ED:C1:67:B0:4D:28:96
Certificate issuer:       /CN=F3628DDEAF/serialNumber=42B58CEEAA2C12E8F2DC98D644C20CF81CE1CE05
Certificate serial:       0B16
Authority key identifier: 42:B5:8C:EE:AA:2C:12:E8:F2:DC:98:D6:44:C2:0C:F8:1C:E1:CE:05
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/QrWM7qosEujy3JjWRMIM-BzhzgU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3628DDE/BF78233A369E11E9A7D5E220F8AEA228/86A30800B0DE11F1BCFD8EEDCE1D38B0.roa
Signing time:             Tue 15 Sep 2026 08:22:02 +0000
ROA not before:           Tue 15 Sep 2026 08:21:58 +0000
ROA not after:            Mon 15 Sep 2036 08:21:58 +0000
asID:                     36924
IP address blocks:        102.201.56.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3628DDE/BF78233A369E11E9A7D5E220F8AEA228/QrWM7qosEujy3JjWRMIM-BzhzgU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3628DDE/BF78233A369E11E9A7D5E220F8AEA228/QrWM7qosEujy3JjWRMIM-BzhzgU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/QrWM7qosEujy3JjWRMIM-BzhzgU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 20 Sep 2026 00:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2838 (0xb16)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3628DDEAF, serialNumber=42B58CEEAA2C12E8F2DC98D644C20CF81CE1CE05
        Validity
            Not Before: Sep 15 08:21:58 2026 GMT
            Not After : Sep 15 08:21:58 2036 GMT
        Subject: CN=6aa9002a-0e25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:46:33:b1:9b:70:bc:93:99:e9:96:5f:90:9a:
                    f3:2d:52:0a:b8:f9:79:b7:84:77:00:0a:53:b2:ab:
                    35:4f:e4:87:bf:b6:d7:df:a3:ae:fe:62:a1:bb:30:
                    b7:5d:02:6f:a8:48:7c:ab:bd:ea:97:b6:ef:77:b6:
                    fa:5b:f9:aa:1b:2f:7d:ce:47:cc:20:2a:30:e2:74:
                    65:9d:e5:c8:7d:02:7d:07:7f:5d:a7:4e:6b:ec:fa:
                    2a:5f:9b:6f:99:b3:1b:0d:92:a5:f6:57:28:48:06:
                    dd:d8:bd:34:74:8f:66:cf:09:f4:fe:e1:2b:3f:4d:
                    71:0c:ad:15:54:40:aa:8a:3f:88:19:45:39:62:d2:
                    7b:60:8c:87:46:95:bb:b0:51:ce:d1:eb:5c:0f:c9:
                    25:a8:dc:00:d2:7f:2f:87:7b:64:2e:9d:d3:7e:85:
                    6d:4f:7c:bc:2a:e0:ea:ba:84:17:75:ca:cd:bd:63:
                    ad:a8:f4:19:1b:8d:9c:a9:88:e1:e9:ed:22:40:c8:
                    b0:7e:59:8f:3b:cf:5c:c9:45:91:52:d7:c0:58:8f:
                    b5:09:75:7f:a7:dd:86:e6:65:74:41:7c:fa:93:8d:
                    03:a4:f6:3e:90:0f:4a:f7:20:5d:fb:c0:91:5b:9d:
                    3f:d9:e9:37:c7:62:cd:36:80:b7:7d:31:4b:b6:f9:
                    65:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:F3:F8:DF:B3:2A:1F:A0:6B:E3:21:6C:E0:ED:C1:67:B0:4D:28:96
            X509v3 Authority Key Identifier:
                keyid:42:B5:8C:EE:AA:2C:12:E8:F2:DC:98:D6:44:C2:0C:F8:1C:E1:CE:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3628DDE/BF78233A369E11E9A7D5E220F8AEA228/QrWM7qosEujy3JjWRMIM-BzhzgU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QrWM7qosEujy3JjWRMIM-BzhzgU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3628DDE/BF78233A369E11E9A7D5E220F8AEA228/86A30800B0DE11F1BCFD8EEDCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.201.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4c:b0:0d:c4:46:22:e7:f1:2f:fb:45:18:d2:73:5f:7a:05:f9:
         86:5d:be:32:2d:8b:d1:00:90:ae:03:13:18:59:89:7e:44:2d:
         9a:bc:6a:74:88:a1:58:02:f1:92:bf:5a:e5:3a:c9:31:8d:34:
         02:b0:86:b5:6a:d5:3a:91:f5:a0:3c:03:7b:d7:9f:75:81:fa:
         8d:f9:90:e7:7e:bc:f0:10:e3:a6:c7:08:0a:bd:3c:3d:3a:cb:
         16:8b:dc:53:c7:54:5f:c3:61:5a:07:05:17:d5:7e:1a:a9:f4:
         68:9e:08:3d:40:02:6b:53:d7:ee:b6:11:86:15:dd:88:a7:41:
         50:59:85:6d:b2:6b:a8:4d:24:ec:e6:8b:36:ad:22:f1:f0:27:
         34:5a:cb:d4:e8:3c:14:69:27:14:3d:ad:c2:7c:a0:db:ba:5a:
         e1:5f:bf:d4:32:b7:fc:5c:e4:8a:96:af:1a:be:29:e3:7d:8d:
         0a:8e:44:cf:dc:57:d4:44:8a:8e:01:fb:cc:55:5d:82:0a:9b:
         c1:47:ef:51:aa:96:39:7a:d4:d0:06:91:14:9b:a1:53:86:86:
         05:30:cc:15:d3:69:4d:29:c8:74:2a:bd:22:96:31:46:ed:27:
         8a:cc:6d:8a:4e:9d:4e:b5:53:59:42:b1:d1:bc:15:2d:8d:4f:
         4e:9f:50:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----