Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3662814/602BD4A8B26A11F1AE9DAAC9CE1D38B0/5949038AB26B11F19A18B0CFCE1D38B0.roa
File:                     5949038AB26B11F19A18B0CFCE1D38B0.roa (raw, json)
Hash identifier:          4wF/KDgf7C5li7PZu5exkfWouR3YO66W2nCBdpnhstw=
Subject key identifier:   2C:78:53:76:F2:9F:01:87:55:D4:50:2A:4B:ED:4D:EF:AA:81:E8:73
Certificate issuer:       /CN=F3662814AF/serialNumber=5D4DDBEA655D5AD19E5F96EC67DB3BFFDB7C5E71
Certificate serial:       02
Authority key identifier: 5D:4D:DB:EA:65:5D:5A:D1:9E:5F:96:EC:67:DB:3B:FF:DB:7C:5E:71
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/XU3b6mVdWtGeX5bsZ9s7_9t8XnE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3662814/602BD4A8B26A11F1AE9DAAC9CE1D38B0/5949038AB26B11F19A18B0CFCE1D38B0.roa
Signing time:             Thu 17 Sep 2026 07:42:36 +0000
ROA not before:           Thu 17 Sep 2026 07:42:32 +0000
ROA not after:            Tue 17 Sep 2030 07:42:32 +0000
asID:                     329812
IP address blocks:        102.201.40.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3662814/602BD4A8B26A11F1AE9DAAC9CE1D38B0/XU3b6mVdWtGeX5bsZ9s7_9t8XnE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3662814/602BD4A8B26A11F1AE9DAAC9CE1D38B0/XU3b6mVdWtGeX5bsZ9s7_9t8XnE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/XU3b6mVdWtGeX5bsZ9s7_9t8XnE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 20 Sep 2026 00:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3662814AF, serialNumber=5D4DDBEA655D5AD19E5F96EC67DB3BFFDB7C5E71
        Validity
            Not Before: Sep 17 07:42:32 2026 GMT
            Not After : Sep 17 07:42:32 2030 GMT
        Subject: CN=6aab99ec-fd3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:32:95:5b:49:6c:2d:c1:c3:af:e6:c3:40:a3:
                    a2:a2:90:89:6f:db:85:02:21:fc:23:e0:b8:ad:63:
                    1b:36:c8:32:5e:87:0e:7e:5e:87:9c:37:ec:a6:74:
                    fa:1f:91:7f:a7:eb:0d:94:ad:62:26:4b:02:2c:d7:
                    fc:dc:9f:a6:a3:13:7e:48:50:bd:a7:a4:6e:1e:0d:
                    57:b5:d4:f8:c3:a1:f9:ad:f7:f2:5e:85:07:0c:d0:
                    dd:90:06:a4:ef:c0:14:2f:e3:33:7b:6f:29:d6:e2:
                    f0:81:6a:57:9d:f2:25:f5:33:87:42:30:96:f3:25:
                    9e:c2:43:96:9a:82:4f:88:45:cf:fd:13:6e:2e:fc:
                    ed:ca:65:51:61:36:70:e5:7a:03:19:53:41:d4:d5:
                    03:11:2a:48:34:89:76:aa:7f:c0:ca:4e:a6:a1:cb:
                    b8:0e:33:4e:5b:d6:05:ed:02:63:bc:c8:86:d4:1f:
                    b1:52:43:e3:4e:7a:d3:57:da:61:60:0d:99:55:42:
                    c2:36:4f:05:00:3f:25:5d:4d:af:fc:4c:ca:98:e0:
                    f5:d3:83:6d:97:54:a5:69:3c:6a:d3:b9:e1:21:69:
                    03:16:70:12:5e:dd:e5:40:0e:1d:d7:71:0c:02:b1:
                    0c:68:04:fe:ea:d4:65:48:1f:e5:c3:80:b0:2f:a5:
                    e1:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:78:53:76:F2:9F:01:87:55:D4:50:2A:4B:ED:4D:EF:AA:81:E8:73
            X509v3 Authority Key Identifier:
                keyid:5D:4D:DB:EA:65:5D:5A:D1:9E:5F:96:EC:67:DB:3B:FF:DB:7C:5E:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3662814/602BD4A8B26A11F1AE9DAAC9CE1D38B0/XU3b6mVdWtGeX5bsZ9s7_9t8XnE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XU3b6mVdWtGeX5bsZ9s7_9t8XnE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3662814/602BD4A8B26A11F1AE9DAAC9CE1D38B0/5949038AB26B11F19A18B0CFCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.201.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         35:29:75:4a:ab:29:72:34:14:cc:66:fc:a6:08:3e:f8:df:41:
         61:39:e1:11:91:e2:82:35:8a:d5:b6:58:4a:ce:60:83:be:b9:
         cf:d1:96:75:86:3f:d8:b1:7b:3d:32:dc:36:bc:23:c5:68:21:
         0b:f1:2e:f8:5f:f2:fa:17:c7:00:60:4c:3a:36:7d:8a:d0:4e:
         33:c0:01:00:d7:32:8e:54:09:ce:f9:05:ad:c6:d9:8f:5d:50:
         b1:9e:88:28:11:e3:48:74:4c:bc:5f:bd:c1:ac:10:39:8a:4e:
         3b:0b:e9:55:d6:22:58:44:24:94:6a:cd:77:3d:3f:67:ea:cf:
         d8:48:70:ee:b1:88:58:b2:8e:99:9c:8a:af:92:ce:59:da:9b:
         20:35:af:8e:49:2f:53:fa:7f:d8:cb:f0:5e:ee:84:d0:0a:20:
         27:8f:72:43:8a:92:12:5f:ee:e5:22:fe:73:42:37:f2:ae:e5:
         64:b7:c0:5a:5d:05:73:72:8b:61:0c:b3:b3:96:31:ec:80:16:
         c7:df:8b:f3:22:05:26:2c:6c:ec:88:19:56:b2:37:fb:68:e3:
         22:9d:95:86:11:80:7e:99:ed:01:08:e2:4f:e9:a3:f6:5d:00:
         53:66:d4:b8:74:65:ab:16:4d:6e:ff:f7:45:b4:29:02:e3:d7:
         30:9a:36:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----