Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3699206/9FFD2DF8A1D411F1B8EB37E1CE1D38B0/E47E81D4A1D411F1B89ACFE1CE1D38B0.roa
File:                     E47E81D4A1D411F1B89ACFE1CE1D38B0.roa (raw, json)
Hash identifier:          spGCEq03/xL3BDX1c6E8r0y4NhuuAf+laXwTQmjxv40=
Subject key identifier:   DC:A9:EC:7C:90:18:EA:6A:41:77:51:C9:BD:DD:2A:71:36:89:3C:EF
Certificate issuer:       /CN=F3699206AF/serialNumber=C7D2FC2B5A418185034847609D049C1E29FB7214
Certificate serial:       02
Authority key identifier: C7:D2:FC:2B:5A:41:81:85:03:48:47:60:9D:04:9C:1E:29:FB:72:14
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/x9L8K1pBgYUDSEdgnQScHin7chQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3699206/9FFD2DF8A1D411F1B8EB37E1CE1D38B0/E47E81D4A1D411F1B89ACFE1CE1D38B0.roa
Signing time:             Thu 27 Aug 2026 05:05:17 +0000
ROA not before:           Thu 27 Aug 2026 05:05:13 +0000
ROA not after:            Wed 27 Aug 2036 05:05:13 +0000
asID:                     329797
IP address blocks:        102.201.120.0/22 maxlen: 24
                          2c0f:5420::/32 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3699206/9FFD2DF8A1D411F1B8EB37E1CE1D38B0/x9L8K1pBgYUDSEdgnQScHin7chQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3699206/9FFD2DF8A1D411F1B8EB37E1CE1D38B0/x9L8K1pBgYUDSEdgnQScHin7chQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/x9L8K1pBgYUDSEdgnQScHin7chQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 20 Sep 2026 00:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3699206AF, serialNumber=C7D2FC2B5A418185034847609D049C1E29FB7214
        Validity
            Not Before: Aug 27 05:05:13 2026 GMT
            Not After : Aug 27 05:05:13 2036 GMT
        Subject: CN=6a8fc58d-29a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d3:35:e5:55:e3:27:34:4c:2a:e7:81:ac:99:
                    4a:ed:58:f5:1b:bc:ab:7e:77:2e:db:66:c7:53:1b:
                    ad:96:05:d6:5b:60:48:a2:76:51:23:50:e5:6e:27:
                    ce:a9:9e:58:3d:fc:51:e8:9f:f8:95:e0:d4:1d:18:
                    a6:bf:63:38:6a:7f:b4:78:2a:e2:96:9f:17:3f:3b:
                    77:0f:28:b0:0c:9d:2b:bc:a1:f1:14:59:c1:a0:9b:
                    8f:b5:3e:44:a0:92:b1:07:c1:d6:18:be:95:7a:d2:
                    85:63:6b:db:11:37:f8:23:ba:b9:e0:84:b1:1a:a3:
                    ed:cf:39:75:39:77:02:36:e9:1f:56:ce:24:7e:b1:
                    e8:24:69:a4:53:69:90:ee:d1:e3:5c:21:48:64:f4:
                    c1:1d:28:81:35:31:b1:49:07:cc:06:25:18:5d:99:
                    bb:68:20:87:68:43:d4:6e:86:87:9a:36:3b:64:d5:
                    ea:63:ee:1a:23:16:28:04:8e:fc:6e:4f:82:d5:dc:
                    fe:dd:c9:42:ca:cf:bb:0c:fd:65:f8:58:f4:08:95:
                    4e:8b:aa:4f:d9:17:d9:51:d1:22:96:ec:2e:fd:4f:
                    50:32:1c:97:5c:49:77:f1:51:a9:31:4b:1f:96:4f:
                    d0:65:e2:8f:bc:ba:03:84:f8:af:6e:cb:f9:91:68:
                    89:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:A9:EC:7C:90:18:EA:6A:41:77:51:C9:BD:DD:2A:71:36:89:3C:EF
            X509v3 Authority Key Identifier:
                keyid:C7:D2:FC:2B:5A:41:81:85:03:48:47:60:9D:04:9C:1E:29:FB:72:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3699206/9FFD2DF8A1D411F1B8EB37E1CE1D38B0/x9L8K1pBgYUDSEdgnQScHin7chQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/x9L8K1pBgYUDSEdgnQScHin7chQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3699206/9FFD2DF8A1D411F1B8EB37E1CE1D38B0/E47E81D4A1D411F1B89ACFE1CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.201.120.0/22
                IPv6:
                  2c0f:5420::/32

    Signature Algorithm: sha256WithRSAEncryption
         68:74:4d:23:e2:b9:c9:4b:6a:56:cc:06:8b:a5:98:af:6a:b2:
         c3:20:e7:10:e6:89:f5:db:50:78:ac:0d:a5:07:f4:1b:be:5a:
         02:1a:0e:27:be:b7:12:18:67:08:67:56:d9:ce:1c:18:32:c7:
         e1:4b:5b:89:e3:2f:c8:6a:bf:ab:20:e9:f2:72:9a:3f:11:ca:
         f4:8e:6b:53:66:d4:51:e2:02:bf:4f:0f:e6:f6:02:a5:ce:d0:
         7d:a7:4a:8c:9d:97:00:a4:e3:4b:e1:b7:90:96:ca:1f:c0:f5:
         de:8d:b4:eb:8f:85:48:c9:af:7e:b0:45:39:47:b4:1f:ce:86:
         14:a2:4b:fe:a7:df:fb:5a:0e:de:4b:1a:d3:2d:b9:ba:fa:66:
         34:93:bc:a4:f2:b9:cf:d6:ea:d7:4c:ed:2b:b5:e4:84:62:80:
         0b:84:a2:2f:9d:c6:fd:73:f8:21:77:3c:4c:52:18:f8:ac:f0:
         75:47:d9:84:a3:73:18:22:d6:84:32:b8:5a:74:92:b4:03:0a:
         91:87:f7:ac:9d:94:3f:32:70:2f:b5:db:77:43:9e:45:0b:84:
         3a:ca:12:e3:e2:9f:4b:61:31:47:fb:5d:a9:27:d0:4b:17:b4:
         95:06:e8:9b:db:85:bb:83:e4:3b:ae:37:3d:68:f4:55:94:0f:
         14:52:3f:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----