Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3678120/2065EDE6ABE311F1BCFBDDACCE1D38B0/F2AD0818ABE611F191B005C1CE1D38B0.roa
File:                     F2AD0818ABE611F191B005C1CE1D38B0.roa (raw, json)
Hash identifier:          8dZYLt8eP39M8BLG9aZ5YDmDaOwnDTF/lzL80thb30g=
Subject key identifier:   86:77:B5:4C:D4:56:59:60:A4:3A:68:37:1B:48:40:F9:71:93:D3:A7
Certificate issuer:       /CN=F3678120AF/serialNumber=9433F1D5AFF2A4A3A484039CB04312FA4622D09F
Certificate serial:       04
Authority key identifier: 94:33:F1:D5:AF:F2:A4:A3:A4:84:03:9C:B0:43:12:FA:46:22:D0:9F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/lDPx1a_ypKOkhAOcsEMS-kYi0J8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3678120/2065EDE6ABE311F1BCFBDDACCE1D38B0/F2AD0818ABE611F191B005C1CE1D38B0.roa
Signing time:             Wed 09 Sep 2026 00:39:43 +0000
ROA not before:           Wed 09 Sep 2026 00:00:39 +0000
ROA not after:            Sun 16 Sep 2029 00:00:39 +0000
asID:                     29606
IP address blocks:        102.202.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3678120/2065EDE6ABE311F1BCFBDDACCE1D38B0/lDPx1a_ypKOkhAOcsEMS-kYi0J8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3678120/2065EDE6ABE311F1BCFBDDACCE1D38B0/lDPx1a_ypKOkhAOcsEMS-kYi0J8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/lDPx1a_ypKOkhAOcsEMS-kYi0J8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 20 Sep 2026 00:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3678120AF, serialNumber=9433F1D5AFF2A4A3A484039CB04312FA4622D09F
        Validity
            Not Before: Sep  9 00:00:39 2026 GMT
            Not After : Sep 16 00:00:39 2029 GMT
        Subject: CN=6aa0aacf-2a6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e4:9b:94:fe:22:6f:7d:ca:bc:0c:6a:60:f3:
                    65:be:28:a7:6e:fb:c6:20:af:c7:e7:c7:6d:9f:4c:
                    86:dc:96:cb:75:b1:e0:1a:52:67:08:08:15:39:05:
                    08:dc:8d:03:5a:06:ae:3f:e2:d5:99:b9:fb:6b:2d:
                    dd:39:0d:4b:a9:74:20:ef:c1:57:77:64:bd:0a:74:
                    a5:e6:f9:26:cd:52:5d:75:ec:ac:b8:cd:5e:ea:29:
                    8a:ad:c0:b3:20:7d:08:09:7a:a4:bb:ed:64:f6:04:
                    da:a8:7f:de:1e:f2:1a:4e:de:e7:2a:d9:23:e5:25:
                    4c:13:0f:29:d2:11:b9:3b:e1:e0:f6:ff:2e:79:01:
                    44:e4:ac:2b:45:a7:17:9a:e6:75:1c:70:c0:66:06:
                    8f:51:ea:03:82:94:43:c5:c3:60:4d:8d:40:1b:00:
                    0e:b0:1e:cd:87:a2:c9:00:92:db:05:29:13:8a:32:
                    8f:24:fc:eb:bc:bb:7e:96:88:de:69:db:b2:ea:b7:
                    5c:7e:fa:a9:f5:44:28:82:e4:35:e5:6d:f6:94:8c:
                    0e:ed:12:1c:8c:ca:15:91:41:33:ee:92:f9:87:32:
                    bc:9a:9b:55:40:fc:fc:f7:9e:6a:05:5d:56:89:ae:
                    53:53:9d:b0:b8:19:29:83:75:59:ef:25:ec:40:20:
                    c0:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:77:B5:4C:D4:56:59:60:A4:3A:68:37:1B:48:40:F9:71:93:D3:A7
            X509v3 Authority Key Identifier:
                keyid:94:33:F1:D5:AF:F2:A4:A3:A4:84:03:9C:B0:43:12:FA:46:22:D0:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3678120/2065EDE6ABE311F1BCFBDDACCE1D38B0/lDPx1a_ypKOkhAOcsEMS-kYi0J8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lDPx1a_ypKOkhAOcsEMS-kYi0J8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3678120/2065EDE6ABE311F1BCFBDDACCE1D38B0/F2AD0818ABE611F191B005C1CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.202.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c0:45:e0:ad:6d:10:fc:f8:46:62:0c:c3:b8:24:1d:c5:4f:e8:
         63:d4:61:f1:5b:e8:ce:1e:d0:ff:e7:d5:63:78:f8:44:67:e4:
         5d:9f:18:e6:92:4c:73:c8:24:bb:4d:5c:b9:45:33:12:0a:1f:
         4f:a0:62:45:78:fd:f8:d7:b8:eb:de:96:96:af:e2:5d:fe:42:
         26:6c:93:02:a4:f3:b3:19:37:d5:90:d6:6f:b5:a2:ba:20:a2:
         88:ac:61:90:8a:82:47:39:da:c2:ed:af:cd:f8:21:ce:e6:40:
         74:44:f0:d9:99:6d:c3:f5:ef:08:2d:b4:67:18:a3:e9:cc:60:
         10:02:91:b3:42:f3:c5:f1:a0:24:cd:62:f6:f3:9b:55:73:a7:
         96:43:22:55:81:cb:80:7b:51:f9:30:b5:a8:4a:c0:45:24:68:
         59:89:ab:e0:67:1a:24:a8:03:88:5f:96:e9:0f:a7:b3:59:dc:
         38:bf:0c:ed:f7:d0:87:c0:13:21:9e:13:30:3d:c4:11:0e:c7:
         59:de:d9:96:ab:b3:b4:b6:72:e9:6c:3a:ac:7e:27:53:00:86:
         cf:4c:f2:70:6c:de:1d:cc:bc:ea:1d:21:11:8c:02:14:11:02:
         a7:0c:46:cc:39:31:97:04:7d:1a:37:48:ae:aa:ff:39:ef:7c:
         4d:62:db:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----