Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F363FC87/DEFC83209B0611F1B94272DCCE1D38B0/05A0B69E9B0811F1A0808FE3CE1D38B0.roa
File:                     05A0B69E9B0811F1A0808FE3CE1D38B0.roa (raw, json)
Hash identifier:          pasTsat2fXh6YiGvMvYT8AvkfmPYbd9JwrzF0OlGv9U=
Subject key identifier:   BE:39:CB:0E:69:AF:CA:12:52:13:6D:84:01:8E:AB:F3:52:C1:5D:B7
Certificate issuer:       /CN=F363FC87AF/serialNumber=D92DC1940F3AC4500261FAA588AE524F04BDDB8E
Certificate serial:       02
Authority key identifier: D9:2D:C1:94:0F:3A:C4:50:02:61:FA:A5:88:AE:52:4F:04:BD:DB:8E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/2S3BlA86xFACYfqliK5STwS9244.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363FC87/DEFC83209B0611F1B94272DCCE1D38B0/05A0B69E9B0811F1A0808FE3CE1D38B0.roa
Signing time:             Tue 18 Aug 2026 13:23:38 +0000
ROA not before:           Tue 18 Aug 2026 13:23:34 +0000
ROA not after:            Thu 28 Aug 2036 13:23:34 +0000
asID:                     329415
IP address blocks:        102.203.208.0/22 maxlen: 24
                          102.203.209.0/24 maxlen: 24
                          102.203.210.0/24 maxlen: 24
                          102.203.211.0/24 maxlen: 24
                          102.209.108.0/22 maxlen: 24
                          102.209.109.0/24 maxlen: 24
                          102.209.110.0/24 maxlen: 24
                          102.209.111.0/24 maxlen: 24
                          2c0f:7140::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363FC87/DEFC83209B0611F1B94272DCCE1D38B0/2S3BlA86xFACYfqliK5STwS9244.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363FC87/DEFC83209B0611F1B94272DCCE1D38B0/2S3BlA86xFACYfqliK5STwS9244.mft
                          rsync://rpki.afrinic.net/repository/afrinic/2S3BlA86xFACYfqliK5STwS9244.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 05:49:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363FC87AF, serialNumber=D92DC1940F3AC4500261FAA588AE524F04BDDB8E
        Validity
            Not Before: Aug 18 13:23:34 2026 GMT
            Not After : Aug 28 13:23:34 2036 GMT
        Subject: CN=6a845cda-4633
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:4e:40:4c:eb:9d:e5:68:8c:30:ac:7c:24:50:
                    54:b5:b9:36:0a:ed:b1:c2:5e:f6:e6:79:86:c8:5e:
                    74:25:05:db:26:0e:23:3c:66:d1:f4:ba:f7:e1:26:
                    c0:87:fe:71:3e:96:52:d2:8b:37:cb:03:25:b4:d0:
                    9d:11:44:ab:e0:5b:48:4c:cb:7e:ac:2d:21:ff:72:
                    de:da:2c:89:c8:8d:8c:e8:1b:99:8c:2c:7a:11:f6:
                    3c:57:28:43:e7:1f:63:01:c8:62:6e:32:af:65:e2:
                    5c:7b:b5:1c:a3:91:38:e9:55:73:7a:3b:24:7a:26:
                    3b:11:75:0c:9c:6b:97:31:c0:72:b1:43:cd:77:89:
                    36:1b:4b:43:f1:e0:c1:62:30:6a:c1:fa:01:28:58:
                    e5:e0:cb:e9:5a:c5:77:c6:17:76:54:c5:03:17:92:
                    f7:f6:d0:02:c9:d2:28:7c:d5:90:0c:eb:03:87:fb:
                    7e:55:63:45:37:27:91:d4:e1:a2:e7:2a:7d:e7:5b:
                    2a:6d:c7:4c:f6:ee:87:33:b4:71:a6:05:d2:30:42:
                    0b:a3:5e:4b:b5:e3:6b:0d:9f:ad:08:97:a7:58:b6:
                    73:04:d0:be:13:cd:cb:1d:30:97:93:7a:d6:20:ff:
                    37:98:87:77:42:cd:1e:2c:9e:db:01:25:30:c4:17:
                    e9:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:39:CB:0E:69:AF:CA:12:52:13:6D:84:01:8E:AB:F3:52:C1:5D:B7
            X509v3 Authority Key Identifier:
                keyid:D9:2D:C1:94:0F:3A:C4:50:02:61:FA:A5:88:AE:52:4F:04:BD:DB:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363FC87/DEFC83209B0611F1B94272DCCE1D38B0/2S3BlA86xFACYfqliK5STwS9244.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2S3BlA86xFACYfqliK5STwS9244.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363FC87/DEFC83209B0611F1B94272DCCE1D38B0/05A0B69E9B0811F1A0808FE3CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.203.208.0/22
                  102.209.108.0/22
                IPv6:
                  2c0f:7140::/32

    Signature Algorithm: sha256WithRSAEncryption
         59:4e:83:38:63:56:94:8b:f9:9d:0a:b0:45:11:8d:90:84:aa:
         89:05:d8:38:1e:de:5d:11:4b:ed:6c:27:14:b0:1a:17:c8:7b:
         89:9b:a2:ff:91:1f:49:5c:62:02:45:0c:a8:d6:e2:3e:85:a3:
         4c:58:af:0b:48:12:77:95:34:0c:81:65:38:44:31:d2:d3:c1:
         c5:fc:f8:2a:f1:45:2a:ba:70:40:2d:b5:f0:d3:3d:cd:ad:14:
         11:46:17:0c:44:4e:f3:2e:87:df:c9:6a:53:12:7b:b1:46:f8:
         42:10:7b:23:95:b6:56:b8:d9:41:23:29:51:6a:3d:74:65:26:
         d4:af:cb:d4:87:a6:1f:37:26:14:61:4a:f1:35:e9:9f:b4:24:
         05:bb:8d:4b:2f:9e:78:30:7f:e2:6e:bd:9d:67:33:e7:33:8d:
         11:a4:9d:ff:9e:3a:96:79:df:0c:99:60:5b:37:05:70:bc:4e:
         48:98:67:fe:87:c7:c2:7f:1b:6a:94:20:5a:b7:25:ba:a3:18:
         78:2e:61:4a:7a:ba:60:ce:af:a1:12:74:1d:11:2e:98:77:8c:
         c9:d2:d1:bf:45:fa:c0:eb:0b:d7:0a:8c:58:15:11:a4:ab:a2:
         75:03:d7:51:dc:74:24:41:19:23:c5:85:71:25:2c:9a:d7:f2:
         a4:42:6f:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----