Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F365FBDA/E376CAF6C0CB11F1A3540ED1CE1D38B0/5259FFB4C0CD11F18916D2D9CE1D38B0.roa
File:                     5259FFB4C0CD11F18916D2D9CE1D38B0.roa (raw, json)
Hash identifier:          5GXyiPx8Eam5hEPYM2dPvwpkSccBg70ZkqFPOFrpJsM=
Subject key identifier:   7A:3E:CD:08:03:20:75:A7:2F:07:3F:B9:71:14:EC:D2:E7:C3:53:09
Certificate issuer:       /CN=F365FBDAAF/serialNumber=FFB9222E44BBB3E624D9BF885506DC5E993D11D8
Certificate serial:       02
Authority key identifier: FF:B9:22:2E:44:BB:B3:E6:24:D9:BF:88:55:06:DC:5E:99:3D:11:D8
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/_7kiLkS7s-Yk2b-IVQbcXpk9Edg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365FBDA/E376CAF6C0CB11F1A3540ED1CE1D38B0/5259FFB4C0CD11F18916D2D9CE1D38B0.roa
Signing time:             Mon 05 Oct 2026 14:59:11 +0000
ROA not before:           Mon 05 Oct 2026 14:59:07 +0000
ROA not after:            Wed 31 Oct 2040 14:59:07 +0000
asID:                     327945
IP address blocks:        102.206.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365FBDA/E376CAF6C0CB11F1A3540ED1CE1D38B0/_7kiLkS7s-Yk2b-IVQbcXpk9Edg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365FBDA/E376CAF6C0CB11F1A3540ED1CE1D38B0/_7kiLkS7s-Yk2b-IVQbcXpk9Edg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/_7kiLkS7s-Yk2b-IVQbcXpk9Edg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 26 Oct 2026 00:07:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365FBDAAF, serialNumber=FFB9222E44BBB3E624D9BF885506DC5E993D11D8
        Validity
            Not Before: Oct  5 14:59:07 2026 GMT
            Not After : Oct 31 14:59:07 2040 GMT
        Subject: CN=6ac3bb3f-7b47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:fe:33:20:de:ea:52:07:f7:bf:06:48:48:ec:
                    6a:b9:59:41:2a:56:93:28:ba:52:79:dc:54:89:7d:
                    ec:06:ae:ab:07:0e:73:00:a3:b6:ad:84:1e:a6:fd:
                    94:96:3b:77:f2:f1:a2:08:a5:f4:8b:eb:e3:a1:0e:
                    51:f8:d3:99:b5:67:c5:bd:84:b2:f0:df:87:22:4d:
                    81:7f:f9:87:07:47:f6:3e:6e:6f:d1:d5:a5:fe:88:
                    98:a8:14:28:8a:c8:48:25:85:50:71:e9:45:46:cb:
                    85:50:f2:9a:28:c5:6f:df:a5:43:f1:09:86:17:56:
                    e4:f7:4d:b5:d6:05:af:5d:1e:b1:2a:fa:91:9f:cb:
                    bf:37:47:04:2c:03:a1:77:ab:d5:39:54:11:ef:1a:
                    86:9a:8a:64:21:c3:e5:5a:95:c8:c1:e5:a4:52:5a:
                    49:e5:59:3b:2d:e6:e2:60:15:ed:9f:95:2b:19:33:
                    19:c1:4b:14:b1:19:13:8c:d7:45:97:1a:f9:77:55:
                    34:1e:95:dd:19:f8:43:7b:e1:1a:0b:9a:3f:19:ca:
                    60:84:88:7a:fc:1a:fb:30:a4:47:29:6f:b2:7a:69:
                    79:1f:c0:75:82:87:1a:84:67:5a:77:91:76:d4:2b:
                    e2:9a:8d:5c:d0:b9:8a:13:50:05:9d:23:24:92:33:
                    ac:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:3E:CD:08:03:20:75:A7:2F:07:3F:B9:71:14:EC:D2:E7:C3:53:09
            X509v3 Authority Key Identifier:
                keyid:FF:B9:22:2E:44:BB:B3:E6:24:D9:BF:88:55:06:DC:5E:99:3D:11:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365FBDA/E376CAF6C0CB11F1A3540ED1CE1D38B0/_7kiLkS7s-Yk2b-IVQbcXpk9Edg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_7kiLkS7s-Yk2b-IVQbcXpk9Edg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365FBDA/E376CAF6C0CB11F1A3540ED1CE1D38B0/5259FFB4C0CD11F18916D2D9CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.206.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:dc:50:b7:8d:6e:db:3e:33:e8:82:1a:5d:b5:0b:f8:2f:00:
         95:18:98:2f:1a:92:18:76:75:84:98:81:17:41:78:95:38:e8:
         40:8a:11:46:70:a0:4e:c0:09:57:43:91:fe:d3:83:e9:80:da:
         44:b4:c6:b9:6d:56:ec:cf:58:78:ef:cf:a3:01:93:4a:c9:e4:
         a8:5c:bd:54:c6:09:ac:1e:85:2a:02:00:8d:fd:25:9d:fc:b3:
         80:21:2b:19:5b:0e:e6:0d:18:f0:bc:f0:4f:9d:92:d1:e2:77:
         67:51:72:ae:a8:66:37:5d:bd:44:25:83:86:f9:30:fc:5a:82:
         c3:ed:e9:49:98:67:0a:23:b3:ee:9e:1c:fd:fd:de:2f:c2:ce:
         64:25:b3:b9:be:9c:25:ce:ae:99:ff:3a:52:aa:17:87:e2:1d:
         ce:8a:2c:fe:5d:95:e3:f6:c0:1b:7e:88:f7:80:9e:a7:a5:02:
         b4:5b:f8:b1:53:05:12:44:06:96:3d:6f:1f:e6:34:93:e3:af:
         60:e6:ca:5a:f6:c6:1a:a1:a1:61:42:a6:64:8e:59:99:a0:00:
         90:b8:1d:ae:9d:0f:d0:72:15:cd:29:c3:0f:67:32:bb:2e:38:
         6c:e6:2c:1e:ce:8d:59:44:55:13:83:17:69:d0:c4:4a:e8:bc:
         2f:a8:db:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----