Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3655DF0/B70B4B5494CF11F199F198A8CE1D38B0/B2DD966094D711F1B577ECD4CE1D38B0.roa
File:                     B2DD966094D711F1B577ECD4CE1D38B0.roa (raw, json)
Hash identifier:          gMWCBqKn+1mGnPLNY0688GoAzfso8FSk//fc3bwqGJA=
Subject key identifier:   B3:20:8E:2E:14:2B:84:14:29:CA:FC:31:6E:84:51:D3:43:75:B4:D6
Certificate issuer:       /CN=F3655DF0AF/serialNumber=13AA2F705F4E0FD368447CF287813B56812D56D4
Certificate serial:       04
Authority key identifier: 13:AA:2F:70:5F:4E:0F:D3:68:44:7C:F2:87:81:3B:56:81:2D:56:D4
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/E6ovcF9OD9NoRHzyh4E7VoEtVtQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3655DF0/B70B4B5494CF11F199F198A8CE1D38B0/B2DD966094D711F1B577ECD4CE1D38B0.roa
Signing time:             Mon 10 Aug 2026 16:22:37 +0000
ROA not before:           Mon 10 Aug 2026 16:22:33 +0000
ROA not after:            Sat 31 Aug 2030 16:22:33 +0000
asID:                     329757
IP address blocks:        102.202.68.0/24 maxlen: 24
                          102.202.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3655DF0/B70B4B5494CF11F199F198A8CE1D38B0/E6ovcF9OD9NoRHzyh4E7VoEtVtQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3655DF0/B70B4B5494CF11F199F198A8CE1D38B0/E6ovcF9OD9NoRHzyh4E7VoEtVtQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/E6ovcF9OD9NoRHzyh4E7VoEtVtQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 20 Sep 2026 00:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3655DF0AF, serialNumber=13AA2F705F4E0FD368447CF287813B56812D56D4
        Validity
            Not Before: Aug 10 16:22:33 2026 GMT
            Not After : Aug 31 16:22:33 2030 GMT
        Subject: CN=6a79facd-87eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:94:2a:9b:d4:ab:c4:05:ba:d4:23:40:83:b0:
                    f9:40:f2:29:dc:7d:44:b1:15:05:86:c2:24:b7:12:
                    6b:5f:b1:03:0b:5c:bc:2d:b3:05:0e:88:13:85:36:
                    a2:97:97:ab:24:c2:00:85:e5:37:14:b9:ac:99:4d:
                    34:60:e1:07:06:c4:15:91:85:7f:ae:17:61:21:eb:
                    c6:52:df:40:7c:c8:8a:b3:08:47:09:3b:34:8f:ad:
                    3d:c9:9e:aa:c0:1f:1a:3a:b6:47:1c:0a:7b:ec:10:
                    aa:ad:be:42:e5:b1:fa:7a:49:31:da:fb:f8:ee:36:
                    1f:4d:a1:43:92:a8:f6:19:0c:ec:ea:8f:57:1c:c0:
                    00:45:29:15:9f:a2:c4:40:a5:1e:25:e5:04:7b:27:
                    d8:f6:84:b7:dc:6b:e6:16:26:32:42:5f:07:b5:0c:
                    c0:e8:a6:1f:e6:ec:8b:21:66:49:7b:dc:b9:5d:86:
                    20:ae:3b:e6:80:dd:86:4d:a4:10:b2:9e:5b:5e:56:
                    61:5a:60:ba:5f:e1:59:b3:52:6d:d6:ec:ec:df:9b:
                    83:27:7b:3e:d4:1e:b3:e0:ec:1b:20:25:2b:ad:1e:
                    d1:7c:20:45:14:63:0b:92:52:36:16:e1:d3:c9:6c:
                    23:b3:da:5f:a0:37:14:35:22:28:e4:45:51:ee:59:
                    b8:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:20:8E:2E:14:2B:84:14:29:CA:FC:31:6E:84:51:D3:43:75:B4:D6
            X509v3 Authority Key Identifier:
                keyid:13:AA:2F:70:5F:4E:0F:D3:68:44:7C:F2:87:81:3B:56:81:2D:56:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3655DF0/B70B4B5494CF11F199F198A8CE1D38B0/E6ovcF9OD9NoRHzyh4E7VoEtVtQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/E6ovcF9OD9NoRHzyh4E7VoEtVtQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3655DF0/B70B4B5494CF11F199F198A8CE1D38B0/B2DD966094D711F1B577ECD4CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.202.68.0/23

    Signature Algorithm: sha256WithRSAEncryption
         18:57:97:70:26:b5:8b:5a:63:81:f2:e5:8d:99:f4:bc:d1:50:
         38:61:bb:04:81:a6:f6:79:a2:41:65:90:53:59:86:9e:0e:f0:
         70:23:82:ab:a5:08:84:25:bf:66:92:c6:75:be:c4:a6:e6:ac:
         a5:cc:9c:6b:78:0c:59:0f:f6:5a:4b:f2:04:bb:e5:bf:ae:7d:
         62:ad:aa:0d:bf:27:21:b8:e0:2c:85:d6:be:7d:cc:da:9e:57:
         e6:63:b9:b2:5d:b1:9c:67:4b:93:0f:69:09:5d:dc:81:e9:07:
         ad:3f:f5:9a:3f:0a:02:36:59:91:84:ff:ab:81:e4:80:4b:a5:
         33:5d:b1:0d:08:89:18:2b:39:1b:f6:b8:53:5c:2a:ea:c5:14:
         08:78:05:c2:e1:6b:e2:45:1e:65:70:13:2f:f9:d6:33:5b:35:
         b8:dd:bd:7a:17:6c:83:7e:70:ba:7e:b1:0c:f4:d3:d4:3f:fa:
         5e:0e:74:ac:2b:df:b2:96:bb:f6:7f:83:16:99:44:5e:11:84:
         db:77:6a:09:c5:f5:3b:90:2a:ba:5a:2c:28:f9:91:77:0d:2f:
         38:16:6c:96:9c:f4:c0:e7:91:64:cd:b8:5e:f1:a1:5a:de:d6:
         ec:22:1c:47:ab:e2:2b:c8:fe:d2:76:8a:ba:57:7d:93:0e:b1:
         81:6f:37:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----