Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3662DAB/048F88108F3211EDB0EEF1B7F1222468/C2145D3E8D7611F19180D9A4CE1D38B0.roa
File:                     C2145D3E8D7611F19180D9A4CE1D38B0.roa (raw, json)
Hash identifier:          V/VBmgwF523cWFsoJg1xtw+zTBRqg7p5L16jWC/SF8U=
Subject key identifier:   AB:9C:82:A8:9E:3D:AA:D0:CB:7C:96:08:5E:63:EC:94:C0:1A:AD:89
Certificate issuer:       /CN=F3662DABAF/serialNumber=5CA389FB8051D2412BA5DF801D89B2CACE57259C
Certificate serial:       0542
Authority key identifier: 5C:A3:89:FB:80:51:D2:41:2B:A5:DF:80:1D:89:B2:CA:CE:57:25:9C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/XKOJ-4BR0kErpd-AHYmyys5XJZw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3662DAB/048F88108F3211EDB0EEF1B7F1222468/C2145D3E8D7611F19180D9A4CE1D38B0.roa
Signing time:             Sat 01 Aug 2026 07:01:03 +0000
ROA not before:           Sat 01 Aug 2026 07:00:59 +0000
ROA not after:            Mon 31 Jan 2033 07:00:59 +0000
asID:                     328073
IP address blocks:        102.218.196.0/22 maxlen: 24
                          102.218.197.0/24 maxlen: 24
                          102.218.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3662DAB/048F88108F3211EDB0EEF1B7F1222468/XKOJ-4BR0kErpd-AHYmyys5XJZw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3662DAB/048F88108F3211EDB0EEF1B7F1222468/XKOJ-4BR0kErpd-AHYmyys5XJZw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/XKOJ-4BR0kErpd-AHYmyys5XJZw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 13 Sep 2026 03:07:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1346 (0x542)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3662DABAF, serialNumber=5CA389FB8051D2412BA5DF801D89B2CACE57259C
        Validity
            Not Before: Aug  1 07:00:59 2026 GMT
            Not After : Jan 31 07:00:59 2033 GMT
        Subject: CN=6a6d99af-2b4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:e8:28:89:9f:0e:2e:90:49:3e:62:05:bd:2c:
                    98:fb:31:ad:8d:cb:64:ce:9f:af:8a:9c:08:c9:8c:
                    62:ed:9d:01:ff:66:f7:6d:de:eb:b5:cc:01:ed:f8:
                    50:09:96:48:e9:33:a8:08:05:31:5a:80:c6:8c:f7:
                    58:7b:08:19:ed:7a:39:98:b2:ec:7d:29:9c:4f:44:
                    17:16:64:64:ee:9e:68:a1:9b:f4:53:13:52:33:27:
                    3f:96:25:b5:12:fe:47:38:0c:95:21:1b:ef:90:43:
                    d2:a2:b9:70:4a:d4:df:d5:28:cc:d4:a0:09:0a:9c:
                    9c:e2:d3:50:47:70:86:ae:1e:91:3d:ed:c3:f5:a0:
                    b1:c9:74:33:5b:7b:38:61:c7:28:27:01:46:36:4e:
                    ab:21:c1:e1:fb:23:9e:3a:fd:35:17:34:c6:1a:cd:
                    f5:c6:81:95:4d:94:dc:4c:a4:36:3c:90:95:64:f5:
                    46:2b:98:e0:27:ed:bf:87:08:91:e7:7c:2a:04:25:
                    fd:38:d7:44:07:dc:53:6c:c4:ca:39:62:db:2a:64:
                    f9:37:6b:33:fa:ac:1a:af:dd:2f:e7:95:4a:f4:a9:
                    e5:3e:1c:ab:20:dc:a8:9c:3e:ff:0b:5c:3b:1b:10:
                    8f:47:35:df:6a:f4:35:68:01:56:79:1d:4c:52:54:
                    a2:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:9C:82:A8:9E:3D:AA:D0:CB:7C:96:08:5E:63:EC:94:C0:1A:AD:89
            X509v3 Authority Key Identifier:
                keyid:5C:A3:89:FB:80:51:D2:41:2B:A5:DF:80:1D:89:B2:CA:CE:57:25:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3662DAB/048F88108F3211EDB0EEF1B7F1222468/XKOJ-4BR0kErpd-AHYmyys5XJZw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XKOJ-4BR0kErpd-AHYmyys5XJZw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3662DAB/048F88108F3211EDB0EEF1B7F1222468/C2145D3E8D7611F19180D9A4CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.218.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b8:46:1d:5d:ec:5a:80:3e:ea:c7:f2:54:53:7e:93:77:02:1f:
         e5:a5:fb:11:1e:8c:80:a0:ae:31:e9:82:67:1d:34:65:39:fd:
         19:82:a0:73:a8:1f:d1:ae:c8:02:4c:17:9f:c4:02:2c:de:41:
         5f:19:8e:03:ca:4e:5d:95:f9:9d:74:b4:fe:3d:cf:30:c5:eb:
         02:79:06:d0:5d:a8:97:1e:ec:70:f4:9a:db:26:3d:c3:a8:69:
         30:ff:e9:6d:d5:07:08:f3:f8:77:d9:9d:b2:4d:ad:4a:6e:66:
         0a:55:13:96:c6:ee:7d:13:f8:68:a2:5a:c0:22:ce:3c:e8:cb:
         19:f2:44:99:cb:17:ba:dd:12:b4:ad:b9:f2:7b:04:a8:fa:8f:
         e3:26:c7:f9:33:cb:3a:cc:11:69:30:34:38:b1:38:da:40:62:
         8d:1a:ee:37:3e:51:1d:fa:6f:5f:93:63:ce:40:e8:a2:e5:b4:
         33:d3:df:fb:bc:63:63:94:c7:51:fc:37:1f:ef:73:07:5a:f8:
         e5:df:79:2b:e7:0d:2e:d0:cc:5e:67:19:eb:ba:d1:51:d8:e0:
         36:6b:b3:2a:55:90:b4:bd:02:0d:37:c8:98:a2:9e:10:b7:eb:
         c1:6f:3d:ba:e2:85:85:31:b7:04:f6:0f:a7:40:55:37:84:36:
         84:b6:40:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----