Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F365E09B/96DCE8F4BFB011F1BC3D631BCF1D38B0/C71EF05CBFB511F1A5E716C4CE1D38B0.roa
File:                     C71EF05CBFB511F1A5E716C4CE1D38B0.roa (raw, json)
Hash identifier:          2Enb3h8sPL3KeOyACfoGa8aoGm1VoiS0Tv/OamL1mjM=
Subject key identifier:   DB:FC:F2:01:C2:59:14:61:99:58:05:9B:EF:84:A6:4C:60:C0:2C:19
Certificate issuer:       /CN=F365E09BAF/serialNumber=F1DB2051323DBA03062755345D84376FA6E48A6D
Certificate serial:       02
Authority key identifier: F1:DB:20:51:32:3D:BA:03:06:27:55:34:5D:84:37:6F:A6:E4:8A:6D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/8dsgUTI9ugMGJ1U0XYQ3b6bkim0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365E09B/96DCE8F4BFB011F1BC3D631BCF1D38B0/C71EF05CBFB511F1A5E716C4CE1D38B0.roa
Signing time:             Sun 04 Oct 2026 05:38:08 +0000
ROA not before:           Sun 04 Oct 2026 05:38:04 +0000
ROA not after:            Mon 04 Oct 2032 05:38:04 +0000
asID:                     328469
IP address blocks:        102.214.168.0/24 maxlen: 24
                          102.214.169.0/24 maxlen: 24
                          102.214.170.0/24 maxlen: 24
                          102.214.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365E09B/96DCE8F4BFB011F1BC3D631BCF1D38B0/8dsgUTI9ugMGJ1U0XYQ3b6bkim0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365E09B/96DCE8F4BFB011F1BC3D631BCF1D38B0/8dsgUTI9ugMGJ1U0XYQ3b6bkim0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/8dsgUTI9ugMGJ1U0XYQ3b6bkim0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 28 Oct 2026 05:52:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365E09BAF, serialNumber=F1DB2051323DBA03062755345D84376FA6E48A6D
        Validity
            Not Before: Oct  4 05:38:04 2026 GMT
            Not After : Oct  4 05:38:04 2032 GMT
        Subject: CN=6ac1e640-7f7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:77:66:a1:62:d1:e6:69:dc:db:9d:14:ad:3f:
                    e4:75:f1:50:ba:3a:3e:a3:f0:82:66:64:36:12:e7:
                    df:9e:34:dd:89:fa:7b:8a:a8:10:2c:98:77:fb:fd:
                    e4:ac:11:c4:ad:0d:6d:a3:32:cb:c7:0b:e2:4b:b8:
                    ee:13:6e:c7:5f:45:24:60:d6:98:33:df:d5:24:5c:
                    ec:4d:f6:bf:0e:74:08:3d:e0:2f:e5:e7:50:82:69:
                    29:a2:14:dd:67:4a:8c:a6:13:a0:b7:b0:10:9f:22:
                    9a:bf:73:00:60:9c:50:b0:29:73:4a:9b:f2:da:2a:
                    9a:e7:b9:23:46:3e:4c:fb:13:3e:49:47:cb:b9:e8:
                    4f:13:d9:6f:de:b7:ea:44:f2:ac:68:e1:46:4c:69:
                    3f:e2:4c:c8:be:c7:23:63:78:0e:7e:36:e2:9c:87:
                    d6:e4:c6:ea:29:8c:08:79:40:54:4d:7f:fd:65:02:
                    c2:81:29:32:df:c9:f1:f4:5c:75:84:9f:9a:f1:06:
                    b7:12:b8:09:cb:ff:2e:68:93:5a:cc:03:7f:fc:a2:
                    55:2b:8e:9e:3e:76:3c:4b:b1:38:ab:b7:af:69:0a:
                    34:d2:1a:2a:7f:f1:ef:3a:67:54:67:8d:70:6c:c9:
                    23:b0:e3:2e:d4:75:10:ba:4b:b2:c6:b8:59:a2:e7:
                    87:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:FC:F2:01:C2:59:14:61:99:58:05:9B:EF:84:A6:4C:60:C0:2C:19
            X509v3 Authority Key Identifier:
                keyid:F1:DB:20:51:32:3D:BA:03:06:27:55:34:5D:84:37:6F:A6:E4:8A:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365E09B/96DCE8F4BFB011F1BC3D631BCF1D38B0/8dsgUTI9ugMGJ1U0XYQ3b6bkim0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/8dsgUTI9ugMGJ1U0XYQ3b6bkim0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365E09B/96DCE8F4BFB011F1BC3D631BCF1D38B0/C71EF05CBFB511F1A5E716C4CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.214.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8e:36:5a:03:62:97:9b:86:fa:1a:c7:1a:e8:27:90:80:96:fe:
         66:e8:97:cd:3a:90:e5:b6:b0:62:37:b4:cf:a4:0a:ef:92:9c:
         95:ec:52:60:9d:ac:96:00:c2:3b:4f:1c:bc:b3:2e:ad:b1:5a:
         81:56:c2:98:cd:dc:75:c3:b3:31:2a:fd:ee:3c:95:f1:b0:3a:
         af:2e:b9:32:0d:db:30:31:75:5b:9e:02:9f:59:c6:36:79:89:
         44:32:dd:20:38:0d:b0:ad:a5:c0:e7:f1:c0:68:38:5b:f0:6c:
         b5:99:6f:d9:43:88:ce:1c:52:0f:62:9f:27:ca:1c:1a:ab:18:
         b1:26:bb:14:f1:b9:78:4c:c5:e7:c7:e1:cb:ea:43:74:14:54:
         94:c8:d3:ad:6c:60:72:72:1c:2d:ef:05:9c:b5:80:c5:e7:bd:
         1b:a9:45:5d:19:cd:34:77:65:46:4d:32:c5:1b:f0:b3:ac:ef:
         74:ca:66:eb:69:f1:e4:c8:12:60:e6:50:0d:af:cb:08:5d:de:
         a2:27:69:e3:f2:e9:0d:c0:25:d7:8d:5e:ca:42:ed:52:1c:34:
         9c:09:81:90:3c:5e:2c:6a:ac:e0:bc:b0:7d:b0:1f:e7:ca:4b:
         c3:40:38:d5:8c:e7:01:7e:e3:e2:12:9e:4f:24:39:45:8e:1a:
         30:35:e1:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----