Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36390A1/2C13266AACEA11F18BFF4DF9CE1D38B0/A1C41AE0ACEA11F19D2210FDCE1D38B0.roa
File:                     A1C41AE0ACEA11F19D2210FDCE1D38B0.roa (raw, json)
Hash identifier:          bkucK1k4IWmUgSBEcjON7FnH1EnBozN3akOLZzVakCc=
Subject key identifier:   8D:11:65:5A:5B:CE:0C:94:D1:B6:A0:29:41:64:44:04:54:7D:37:64
Certificate issuer:       /CN=F36390A1AF/serialNumber=C7D268BC66E16C71DCE10387F41E7670C1C862BD
Certificate serial:       02
Authority key identifier: C7:D2:68:BC:66:E1:6C:71:DC:E1:03:87:F4:1E:76:70:C1:C8:62:BD
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/x9JovGbhbHHc4QOH9B52cMHIYr0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36390A1/2C13266AACEA11F18BFF4DF9CE1D38B0/A1C41AE0ACEA11F19D2210FDCE1D38B0.roa
Signing time:             Thu 10 Sep 2026 07:38:36 +0000
ROA not before:           Thu 10 Sep 2026 07:38:32 +0000
ROA not after:            Tue 09 Sep 2036 07:38:32 +0000
asID:                     329491
IP address blocks:        102.202.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36390A1/2C13266AACEA11F18BFF4DF9CE1D38B0/x9JovGbhbHHc4QOH9B52cMHIYr0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36390A1/2C13266AACEA11F18BFF4DF9CE1D38B0/x9JovGbhbHHc4QOH9B52cMHIYr0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/x9JovGbhbHHc4QOH9B52cMHIYr0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 20 Sep 2026 00:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36390A1AF, serialNumber=C7D268BC66E16C71DCE10387F41E7670C1C862BD
        Validity
            Not Before: Sep 10 07:38:32 2026 GMT
            Not After : Sep  9 07:38:32 2036 GMT
        Subject: CN=6aa25e7c-c436
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:6a:80:8c:f8:22:6d:95:b2:57:e5:ec:fa:af:
                    6c:08:0d:bf:cf:13:1b:34:53:8d:87:d7:d1:bc:47:
                    97:9d:d8:86:77:9c:a1:1b:c5:f8:f2:4e:ea:ed:68:
                    fc:2c:aa:ea:ab:1d:c2:1b:8b:40:db:dd:82:55:e6:
                    06:32:3e:c1:25:fc:60:98:57:c3:87:e3:40:44:e5:
                    1f:ad:fb:bc:89:84:1e:a1:8a:84:fb:0e:ca:f0:84:
                    0c:b0:e2:65:a0:b4:22:7f:30:6b:d3:58:34:93:31:
                    76:dd:e1:03:38:ab:79:c9:d7:83:84:f1:da:d8:24:
                    cd:9b:2f:01:2d:b1:0b:c1:cc:ba:37:60:94:55:90:
                    b0:59:78:9b:d1:fa:da:18:88:3b:3b:c8:89:33:fd:
                    ce:fe:e7:7d:7c:56:ee:84:e6:01:55:0f:ae:b6:86:
                    a1:6b:28:ab:71:bb:d0:0f:c8:18:28:37:25:a7:c7:
                    1d:e3:ba:7f:8c:79:8e:ed:12:ed:bd:a0:5a:82:1f:
                    85:62:a2:38:fd:65:be:5b:16:e7:34:64:f5:91:a0:
                    d2:67:aa:bb:c1:56:23:45:f9:ee:a5:e8:7e:9a:0a:
                    07:72:54:96:7e:21:22:15:f5:9e:29:24:4e:a7:8b:
                    1d:56:32:9a:f3:84:f5:ed:d0:b6:c6:8c:d8:65:64:
                    42:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:11:65:5A:5B:CE:0C:94:D1:B6:A0:29:41:64:44:04:54:7D:37:64
            X509v3 Authority Key Identifier:
                keyid:C7:D2:68:BC:66:E1:6C:71:DC:E1:03:87:F4:1E:76:70:C1:C8:62:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36390A1/2C13266AACEA11F18BFF4DF9CE1D38B0/x9JovGbhbHHc4QOH9B52cMHIYr0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/x9JovGbhbHHc4QOH9B52cMHIYr0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36390A1/2C13266AACEA11F18BFF4DF9CE1D38B0/A1C41AE0ACEA11F19D2210FDCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.202.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:04:62:e5:5b:63:21:68:a2:53:10:31:c1:9f:84:33:f8:04:
         1b:5f:10:5f:ec:0a:c5:f0:71:88:17:cf:21:ae:2d:57:f7:48:
         cf:d0:36:2f:93:a4:63:03:c9:43:1c:ba:bc:11:50:0a:85:4b:
         41:10:2d:eb:ea:38:48:57:ae:34:3a:a2:94:65:65:da:41:bf:
         46:f7:64:bd:2a:96:2d:31:68:7c:76:0e:e1:5b:df:9c:21:f6:
         4e:32:13:a6:22:22:fd:6e:92:fb:2c:9c:60:3a:5e:bc:a6:4e:
         5b:86:bd:a1:cb:24:0f:8e:aa:d4:a7:7d:50:8f:0e:c6:cd:34:
         9b:a5:02:12:3d:3b:ac:39:ee:0a:bd:3b:8a:42:87:62:31:db:
         cd:a9:90:dd:22:a6:8b:e4:ab:c3:05:d6:1e:e0:30:a1:32:59:
         6f:4d:9c:f7:c8:5a:61:7f:fe:6e:a5:41:71:d6:23:4b:a7:58:
         f9:a0:75:54:f5:13:56:76:17:09:f7:b9:da:42:d7:22:ba:b5:
         c9:bf:db:8a:81:88:77:0b:ce:f2:dd:2f:22:0c:91:be:42:da:
         0a:b7:67:84:8b:5f:93:bc:69:13:10:10:da:df:ea:c7:0b:80:
         b7:cf:6c:11:0e:dd:51:60:18:b6:d8:4f:21:35:4b:25:87:1a:
         ab:eb:4f:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----