Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F363339C/87DC0D5AADDE11F1BDEDCCBFCE1D38B0/F13CB088ADDE11F18017FDC1CE1D38B0.roa
File:                     F13CB088ADDE11F18017FDC1CE1D38B0.roa (raw, json)
Hash identifier:          tain45EE/gMV2dgtm+eu5mXzz/PAqUymSj013QdOZbg=
Subject key identifier:   FD:D5:1B:FB:03:BF:C2:A4:4F:5E:65:54:4E:F8:03:9A:A6:F8:B3:F4
Certificate issuer:       /CN=F363339CAF/serialNumber=80343206817CBCFD8972991BD8183D34CEE92EE8
Certificate serial:       02
Authority key identifier: 80:34:32:06:81:7C:BC:FD:89:72:99:1B:D8:18:3D:34:CE:E9:2E:E8
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/gDQyBoF8vP2Jcpkb2Bg9NM7pLug.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363339C/87DC0D5AADDE11F1BDEDCCBFCE1D38B0/F13CB088ADDE11F18017FDC1CE1D38B0.roa
Signing time:             Fri 11 Sep 2026 12:47:27 +0000
ROA not before:           Fri 11 Sep 2026 12:47:23 +0000
ROA not after:            Mon 03 Nov 2036 12:47:23 +0000
asID:                     329808
IP address blocks:        102.201.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363339C/87DC0D5AADDE11F1BDEDCCBFCE1D38B0/gDQyBoF8vP2Jcpkb2Bg9NM7pLug.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363339C/87DC0D5AADDE11F1BDEDCCBFCE1D38B0/gDQyBoF8vP2Jcpkb2Bg9NM7pLug.mft
                          rsync://rpki.afrinic.net/repository/afrinic/gDQyBoF8vP2Jcpkb2Bg9NM7pLug.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 20 Sep 2026 00:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363339CAF, serialNumber=80343206817CBCFD8972991BD8183D34CEE92EE8
        Validity
            Not Before: Sep 11 12:47:23 2026 GMT
            Not After : Nov  3 12:47:23 2036 GMT
        Subject: CN=6aa3f85f-7be9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ec:da:4a:8f:c0:99:02:12:5e:bc:d0:8d:60:
                    bc:c1:c1:0a:15:ae:cb:f2:40:5a:c3:e0:07:4e:3c:
                    e5:14:15:53:f9:cc:95:7d:2b:31:8e:15:76:ef:4a:
                    74:8c:3c:1f:fa:00:9d:16:f2:49:8d:ea:05:26:a1:
                    3e:74:75:e5:6a:47:41:7a:66:4d:a6:2d:cf:6b:78:
                    c8:4f:ae:c6:37:0b:cb:15:14:73:d2:d3:58:c4:6a:
                    15:35:56:a6:87:ff:80:88:d7:a0:58:73:97:09:02:
                    8b:ba:a7:a6:25:08:3f:5b:06:13:e8:2f:9b:b8:44:
                    5f:47:77:af:5f:d3:d0:aa:62:04:15:67:a2:79:a2:
                    7e:71:d7:25:9a:af:4f:df:b7:20:e8:27:d9:a6:ae:
                    96:57:77:a4:4d:85:35:30:bb:d8:2a:45:77:05:ff:
                    cb:f6:ca:2c:71:a2:42:38:04:84:0e:c1:73:68:eb:
                    2e:77:e6:6c:50:35:87:e0:52:45:05:bb:47:23:d2:
                    af:3a:98:22:9b:96:8e:7d:83:12:f4:8f:1b:63:3f:
                    ad:14:b2:8e:c4:5a:f2:e0:c3:c6:7c:60:b1:4c:57:
                    56:b5:89:fe:91:d1:9b:89:55:dc:61:ad:97:d5:c2:
                    36:27:72:a7:3a:56:63:6e:1f:3a:1c:8e:6d:85:ca:
                    0d:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:D5:1B:FB:03:BF:C2:A4:4F:5E:65:54:4E:F8:03:9A:A6:F8:B3:F4
            X509v3 Authority Key Identifier:
                keyid:80:34:32:06:81:7C:BC:FD:89:72:99:1B:D8:18:3D:34:CE:E9:2E:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363339C/87DC0D5AADDE11F1BDEDCCBFCE1D38B0/gDQyBoF8vP2Jcpkb2Bg9NM7pLug.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gDQyBoF8vP2Jcpkb2Bg9NM7pLug.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363339C/87DC0D5AADDE11F1BDEDCCBFCE1D38B0/F13CB088ADDE11F18017FDC1CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.201.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:e6:e4:f3:2a:c0:db:f2:e6:74:9b:5c:09:eb:a7:06:49:ad:
         1a:59:b8:67:3e:7f:29:4e:2b:f0:d4:11:c7:9e:16:d6:bf:a5:
         89:51:34:e3:dd:28:ba:49:39:3c:2e:d3:96:90:f6:d6:4a:92:
         ed:f8:2d:1b:f6:5f:02:8e:59:93:0c:8c:c6:5c:93:74:97:30:
         86:6b:c0:97:ca:52:b5:ec:6f:9e:ea:c8:89:7e:8c:e0:bd:56:
         eb:21:cc:c6:03:e5:90:42:ba:c5:64:69:13:23:54:e2:66:e0:
         e0:c1:cb:f4:b3:99:b0:a0:0f:07:59:78:c8:6b:f8:ca:66:fd:
         4e:52:31:7d:b1:25:f4:95:19:98:d5:b8:d7:14:85:79:ec:fd:
         46:de:87:bf:f8:af:12:f3:3b:9c:ad:19:87:35:17:75:e2:a9:
         c0:b4:bc:f4:72:97:d0:80:ae:a9:9c:62:ab:64:30:d6:84:b9:
         ce:38:03:ea:1e:50:9b:ff:a2:d9:6f:a0:d0:b6:05:26:c0:5f:
         e9:1e:71:b1:da:99:21:ee:5d:47:40:10:1c:43:03:21:38:04:
         37:e0:87:83:5a:c2:0e:9b:3a:49:88:b9:b8:25:69:06:a4:48:
         85:70:dd:29:8e:82:0b:81:5f:1a:21:f7:d3:7b:41:78:72:2f:
         fb:47:f7:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----