Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3629889/7F429AB2BE7111F1AC83F6F3CE1D38B0/1F3F0A00BE7211F1B78D5FF8CE1D38B0.roa
File:                     1F3F0A00BE7211F1B78D5FF8CE1D38B0.roa (raw, json)
Hash identifier:          xFI9yUGp0VKnLx8f/SF0LaNcUrg/V+in6O8XfzWQzvE=
Subject key identifier:   93:E8:F9:31:B8:E2:5B:1F:4A:CA:27:A5:8A:82:43:6A:FC:05:B9:DB
Certificate issuer:       /CN=F3629889AF/serialNumber=8E2445BFF00193750B3BFA48A8A6A270B00E3CC5
Certificate serial:       02
Authority key identifier: 8E:24:45:BF:F0:01:93:75:0B:3B:FA:48:A8:A6:A2:70:B0:0E:3C:C5
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/jiRFv_ABk3ULO_pIqKaicLAOPMU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3629889/7F429AB2BE7111F1AC83F6F3CE1D38B0/1F3F0A00BE7211F1B78D5FF8CE1D38B0.roa
Signing time:             Fri 02 Oct 2026 15:01:19 +0000
ROA not before:           Fri 02 Oct 2026 15:01:15 +0000
ROA not after:            Thu 02 Oct 2036 15:01:15 +0000
asID:                     329109
IP address blocks:        102.216.238.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3629889/7F429AB2BE7111F1AC83F6F3CE1D38B0/jiRFv_ABk3ULO_pIqKaicLAOPMU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3629889/7F429AB2BE7111F1AC83F6F3CE1D38B0/jiRFv_ABk3ULO_pIqKaicLAOPMU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/jiRFv_ABk3ULO_pIqKaicLAOPMU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 05:58:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3629889AF, serialNumber=8E2445BFF00193750B3BFA48A8A6A270B00E3CC5
        Validity
            Not Before: Oct  2 15:01:15 2026 GMT
            Not After : Oct  2 15:01:15 2036 GMT
        Subject: CN=6abfc73f-fbc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:46:05:9e:68:22:4c:38:d4:0c:42:b3:ad:c1:
                    7e:b3:b0:0f:3f:ee:ce:25:d8:52:54:b9:34:96:2d:
                    9e:7d:7f:5b:c7:f8:0d:ba:f5:aa:2a:1a:72:25:fd:
                    8c:3f:2e:81:67:e5:6a:c7:9f:4b:93:f4:cd:c9:58:
                    5b:98:be:bb:ef:e3:36:9e:59:e9:87:f9:67:fa:b8:
                    d3:ab:3a:a0:43:1c:f0:fb:b9:a3:e2:b3:0d:8d:20:
                    80:0d:c7:7b:72:29:20:5d:09:31:28:74:31:bb:fd:
                    84:da:7e:81:f0:d4:7e:7e:13:da:78:c0:df:7d:2b:
                    15:3c:f4:9b:03:4e:7f:be:97:b8:28:4d:45:8c:e2:
                    05:e1:dd:33:90:3d:86:94:bb:a7:4d:cf:a4:26:e4:
                    83:c6:14:7c:67:ff:6a:03:b8:87:f5:8b:84:a8:84:
                    c8:74:00:9f:c9:f9:20:f4:dd:5e:da:a8:6f:b0:17:
                    42:c0:38:ed:01:39:e5:70:08:c1:ae:a9:08:d3:5f:
                    4e:17:c2:24:82:bd:dd:81:e5:1d:3e:ae:14:0e:db:
                    81:b1:bf:84:81:13:4d:23:c8:6b:5b:21:2a:e1:30:
                    e4:12:ca:01:42:38:48:ff:bb:a0:76:71:49:af:86:
                    16:2d:78:60:39:02:90:cb:83:f2:34:e5:4f:f5:06:
                    72:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:E8:F9:31:B8:E2:5B:1F:4A:CA:27:A5:8A:82:43:6A:FC:05:B9:DB
            X509v3 Authority Key Identifier:
                keyid:8E:24:45:BF:F0:01:93:75:0B:3B:FA:48:A8:A6:A2:70:B0:0E:3C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3629889/7F429AB2BE7111F1AC83F6F3CE1D38B0/jiRFv_ABk3ULO_pIqKaicLAOPMU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/jiRFv_ABk3ULO_pIqKaicLAOPMU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3629889/7F429AB2BE7111F1AC83F6F3CE1D38B0/1F3F0A00BE7211F1B78D5FF8CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.216.238.0/23

    Signature Algorithm: sha256WithRSAEncryption
         26:10:8f:34:db:72:d8:0a:61:1c:37:8a:a5:47:3f:02:81:c6:
         ad:5f:34:93:f6:98:57:42:f2:c9:55:b4:ac:b7:92:a3:4e:fc:
         01:b6:c6:50:5f:d4:2b:1b:7b:71:47:10:88:50:aa:22:21:d3:
         5f:ab:f7:91:33:15:56:2a:e0:65:e8:b8:2f:d2:f1:f2:2f:4c:
         d8:99:6f:ad:28:fa:22:0b:e9:8c:62:84:01:6f:f6:c0:fc:87:
         6f:fe:31:92:75:50:c8:7d:d5:72:00:7a:78:83:41:be:44:15:
         36:ed:0d:e4:b1:12:b5:40:ac:35:2e:75:d6:1a:45:d5:dc:98:
         09:c4:dd:b7:91:3b:e1:4e:ee:5b:65:68:d1:86:71:9b:c3:5f:
         eb:70:d7:35:17:f2:d6:43:ca:bd:43:85:1d:be:f7:17:4c:64:
         e7:9d:9f:dd:84:fa:4d:d3:02:cd:25:71:82:5c:16:f5:b6:aa:
         69:5b:55:7c:ac:b7:48:04:e6:67:76:ca:0f:45:ac:b0:10:b5:
         b1:48:3e:a7:52:95:71:f9:c9:42:b3:37:61:cf:43:cb:b2:55:
         96:cd:4c:4e:d9:63:17:26:6e:1d:d9:53:dd:9d:85:9e:c5:6f:
         2e:51:ef:ab:f1:07:9e:dd:f4:3d:8e:5d:41:74:a6:93:1d:9a:
         3c:55:a3:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----