Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F362AEDF/C5AD13C8B75611F182A48A1BCF1D38B0/3D973C18B75911F190FE8FACCE1D38B0.roa
File:                     3D973C18B75911F190FE8FACCE1D38B0.roa (raw, json)
Hash identifier:          zRMNBBlDa8FKzDxgX7XPCSVqHDBLcFHvrrlFOoPZZIw=
Subject key identifier:   8F:D6:3E:A4:36:52:C4:E2:B5:14:5F:E7:B5:50:3C:91:EC:D7:D6:B0
Certificate issuer:       /CN=F362AEDFAF/serialNumber=690A018B43E4EB217A0C0A4B76632763CA620627
Certificate serial:       03
Authority key identifier: 69:0A:01:8B:43:E4:EB:21:7A:0C:0A:4B:76:63:27:63:CA:62:06:27
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/aQoBi0Pk6yF6DApLdmMnY8piBic.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362AEDF/C5AD13C8B75611F182A48A1BCF1D38B0/3D973C18B75911F190FE8FACCE1D38B0.roa
Signing time:             Wed 23 Sep 2026 14:15:34 +0000
ROA not before:           Wed 23 Sep 2026 14:15:29 +0000
ROA not after:            Mon 27 Sep 2032 14:15:29 +0000
asID:                     329795
IP address blocks:        102.201.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362AEDF/C5AD13C8B75611F182A48A1BCF1D38B0/aQoBi0Pk6yF6DApLdmMnY8piBic.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362AEDF/C5AD13C8B75611F182A48A1BCF1D38B0/aQoBi0Pk6yF6DApLdmMnY8piBic.mft
                          rsync://rpki.afrinic.net/repository/afrinic/aQoBi0Pk6yF6DApLdmMnY8piBic.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 26 Oct 2026 00:07:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362AEDFAF, serialNumber=690A018B43E4EB217A0C0A4B76632763CA620627
        Validity
            Not Before: Sep 23 14:15:29 2026 GMT
            Not After : Sep 27 14:15:29 2032 GMT
        Subject: CN=6ab3df06-e85b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:5b:92:c9:64:09:49:de:f6:36:53:8d:c8:dd:
                    9b:34:46:32:f0:7e:91:6a:7c:fd:59:6e:22:16:ae:
                    25:ef:f7:e8:aa:61:03:01:3a:f8:db:a3:72:29:af:
                    84:1c:a8:7d:d2:bc:2c:da:95:ed:f3:ce:7d:37:e7:
                    f2:d2:a0:a9:6a:0f:6c:c9:7f:fd:83:1a:f7:e4:47:
                    35:c7:f5:76:7d:a8:2e:53:7d:82:0f:09:61:7c:40:
                    49:61:46:04:99:2a:25:ac:86:23:cf:23:71:60:7f:
                    fb:ae:8a:b1:eb:f4:85:2a:f3:9c:dd:93:71:3f:95:
                    9b:e9:6a:fd:54:65:ed:f4:9f:3c:a4:4f:b4:3b:05:
                    1e:ec:55:e3:e7:c4:ce:56:7c:d8:59:ac:17:41:54:
                    7b:8a:a1:c3:b8:a5:81:22:4f:32:f5:29:a8:87:a4:
                    04:d7:2f:1a:84:ac:61:66:7a:75:64:a8:24:02:af:
                    ee:97:22:b1:0b:e3:cf:53:8b:a6:40:e4:a0:ee:11:
                    f9:a7:d5:49:91:3b:9e:e9:e4:f1:74:e7:b7:13:30:
                    10:5e:88:d8:98:43:88:f5:08:97:a9:d0:4e:19:f5:
                    c6:e7:09:15:47:1f:64:a4:16:07:b9:9b:93:45:e7:
                    c5:97:e2:1b:ab:2f:b1:fd:a9:34:c2:09:fc:9a:95:
                    3c:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:D6:3E:A4:36:52:C4:E2:B5:14:5F:E7:B5:50:3C:91:EC:D7:D6:B0
            X509v3 Authority Key Identifier:
                keyid:69:0A:01:8B:43:E4:EB:21:7A:0C:0A:4B:76:63:27:63:CA:62:06:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362AEDF/C5AD13C8B75611F182A48A1BCF1D38B0/aQoBi0Pk6yF6DApLdmMnY8piBic.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/aQoBi0Pk6yF6DApLdmMnY8piBic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362AEDF/C5AD13C8B75611F182A48A1BCF1D38B0/3D973C18B75911F190FE8FACCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.201.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:d8:67:a1:59:67:28:59:0a:aa:8e:ae:90:32:5a:75:5f:b0:
         c2:88:87:c8:09:f9:89:f5:b7:7f:2b:37:1b:da:c5:0a:38:d9:
         4e:38:35:7b:9b:b6:b8:db:bb:fb:f8:4e:cf:76:fa:f6:f8:b2:
         51:f5:1e:c9:9d:2a:53:e7:1e:e3:ad:a6:5f:b6:29:ef:a4:85:
         c1:9a:dc:9d:80:57:49:87:04:bb:b2:b3:d0:82:76:74:cd:b8:
         b7:3a:ec:6e:e9:82:50:7f:71:ed:7c:aa:7d:94:50:54:ab:6d:
         03:8f:4b:69:fd:66:5c:5e:1c:04:e8:72:49:8f:45:81:fa:98:
         3b:90:0f:19:63:bf:66:93:c8:c4:0e:46:98:97:2c:83:91:83:
         c4:9d:15:87:e4:1f:66:04:7b:90:1f:3c:5a:43:62:80:9f:8c:
         2e:65:57:fa:0a:f9:aa:f3:a1:a4:0c:1b:d2:bb:e1:ec:6f:4f:
         bc:5e:00:6b:78:1d:86:ba:07:27:44:f2:9c:13:6f:93:1d:c3:
         a6:dd:27:a7:97:52:8c:b9:4c:2e:13:2c:d0:cd:47:e2:09:84:
         d8:0c:4e:31:01:cd:f0:c6:10:83:d7:b8:74:a9:4d:25:65:8f:
         30:ba:f9:d9:5c:76:64:56:de:3c:0e:0b:ee:48:04:61:e4:ee:
         fd:9a:0b:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----