Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3634F1B/A133C32A299511F0B2F717B2DAE4EC9C/124218F4A87611F1BB343DF9CE1D38B0.roa
File:                     124218F4A87611F1BB343DF9CE1D38B0.roa (raw, json)
Hash identifier:          7EHzv9d4g2QUNpd55xIerKjIlh5gCJKWhi6MbdoooPg=
Subject key identifier:   24:AE:16:BF:14:9F:15:76:0C:B9:5E:47:E0:B4:01:92:8F:C9:EB:E2
Certificate issuer:       /CN=F3634F1BAF/serialNumber=49B4D619095D9432AF6460853E147BEF5D1C48B0
Certificate serial:       0212
Authority key identifier: 49:B4:D6:19:09:5D:94:32:AF:64:60:85:3E:14:7B:EF:5D:1C:48:B0
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SbTWGQldlDKvZGCFPhR7710cSLA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3634F1B/A133C32A299511F0B2F717B2DAE4EC9C/124218F4A87611F1BB343DF9CE1D38B0.roa
Signing time:             Fri 04 Sep 2026 15:34:09 +0000
ROA not before:           Fri 04 Sep 2026 15:34:05 +0000
ROA not after:            Thu 04 Sep 2036 15:34:05 +0000
asID:                     328939
IP address blocks:        102.218.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3634F1B/A133C32A299511F0B2F717B2DAE4EC9C/SbTWGQldlDKvZGCFPhR7710cSLA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3634F1B/A133C32A299511F0B2F717B2DAE4EC9C/SbTWGQldlDKvZGCFPhR7710cSLA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/SbTWGQldlDKvZGCFPhR7710cSLA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 530 (0x212)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3634F1BAF, serialNumber=49B4D619095D9432AF6460853E147BEF5D1C48B0
        Validity
            Not Before: Sep  4 15:34:05 2026 GMT
            Not After : Sep  4 15:34:05 2036 GMT
        Subject: CN=6a9ae4f1-ab91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:bc:bd:d7:93:6d:92:8f:68:f0:7b:13:38:70:
                    c8:81:e1:39:b1:9c:a5:5c:b2:6a:3c:db:f5:d3:43:
                    9d:d8:75:82:a2:9e:32:8a:8e:b1:1e:b3:0e:1f:a7:
                    78:32:08:59:04:f8:8a:61:e3:82:8a:89:48:44:19:
                    9e:70:dd:b7:35:09:ca:ba:06:fa:a6:f8:5d:96:e5:
                    86:c0:df:a8:b4:9b:ee:0f:55:03:9b:93:fc:2f:5d:
                    31:ee:2d:19:04:60:19:32:74:e2:90:c1:9d:38:51:
                    4d:6c:b9:52:87:d8:b3:ad:b4:6c:00:bb:0e:58:90:
                    98:18:95:d5:aa:9e:46:48:ae:f1:28:4a:0a:f0:8a:
                    6f:8f:46:6e:5e:20:f1:31:7e:e1:e9:1f:9a:31:6b:
                    8a:df:43:e7:84:80:2d:e8:ce:6f:94:f9:80:39:1f:
                    14:48:ee:24:96:df:a2:c0:53:97:2b:d6:6b:bd:6a:
                    90:3e:c4:7a:e6:d8:e1:71:cc:6f:95:9c:9b:60:34:
                    26:d4:72:1a:74:8d:5c:65:5a:9e:e7:89:9d:95:8f:
                    d5:bf:33:d7:e6:42:58:e5:a5:65:a8:ac:89:e8:d9:
                    9c:84:74:b7:15:84:5f:59:b6:9d:10:ab:e6:f1:36:
                    13:fd:59:d1:9a:16:c2:96:8d:40:9c:87:ec:58:ff:
                    19:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:AE:16:BF:14:9F:15:76:0C:B9:5E:47:E0:B4:01:92:8F:C9:EB:E2
            X509v3 Authority Key Identifier:
                keyid:49:B4:D6:19:09:5D:94:32:AF:64:60:85:3E:14:7B:EF:5D:1C:48:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3634F1B/A133C32A299511F0B2F717B2DAE4EC9C/SbTWGQldlDKvZGCFPhR7710cSLA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SbTWGQldlDKvZGCFPhR7710cSLA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3634F1B/A133C32A299511F0B2F717B2DAE4EC9C/124218F4A87611F1BB343DF9CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.218.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:3e:8b:42:da:ef:e1:f4:24:d0:b7:39:32:9a:d9:f6:b8:4c:
         15:c1:44:d7:b5:f7:32:96:49:e7:41:f1:e0:b8:a4:8f:54:cf:
         f4:49:84:2d:20:d2:a6:d9:3a:68:fd:ca:8b:79:09:3b:13:58:
         7c:7a:51:0a:95:71:b7:87:f7:1d:29:bb:36:16:87:a7:33:04:
         c1:45:47:87:de:41:44:53:a4:8c:af:35:be:67:df:a0:94:3d:
         ab:81:75:69:ed:4f:0c:3a:09:c0:21:55:35:aa:33:21:c6:4c:
         50:02:8d:b4:65:1e:0b:22:92:4e:a2:a2:2b:c0:e5:be:66:66:
         2a:b2:12:59:64:86:64:a6:61:d8:e3:10:d8:7d:39:77:1d:4f:
         bd:fd:a1:c8:c3:f0:cf:2e:2a:d3:47:66:a0:4a:39:53:30:15:
         e1:14:0d:a9:fe:dd:d1:75:ee:5d:c3:ec:28:88:5d:79:bb:7e:
         d9:88:34:e1:0b:56:19:24:17:bd:bd:c9:fe:fc:7c:5b:23:8b:
         23:e3:d6:a1:05:d3:23:11:29:87:95:aa:b9:08:65:3e:92:44:
         03:f3:0d:7a:10:33:76:43:a9:2b:6b:d8:53:3c:2c:96:2e:0a:
         9b:04:e3:6a:13:e2:28:e7:fb:82:ff:49:7d:e4:92:bd:f5:9c:
         89:f1:62:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----