Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3634F1B/A133C32A299511F0B2F717B2DAE4EC9C/86CCC9CCA87511F19EE685F5CE1D38B0.roa
File:                     86CCC9CCA87511F19EE685F5CE1D38B0.roa (raw, json)
Hash identifier:          Ql444xzWdlYVBALETQlPegLVI3mdHZia7b7bn3tP4Zc=
Subject key identifier:   9F:16:A5:3D:5D:3B:4C:57:0D:1C:D9:7F:3F:C5:62:3E:D7:83:A6:3D
Certificate issuer:       /CN=F3634F1BAF/serialNumber=49B4D619095D9432AF6460853E147BEF5D1C48B0
Certificate serial:       0210
Authority key identifier: 49:B4:D6:19:09:5D:94:32:AF:64:60:85:3E:14:7B:EF:5D:1C:48:B0
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SbTWGQldlDKvZGCFPhR7710cSLA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3634F1B/A133C32A299511F0B2F717B2DAE4EC9C/86CCC9CCA87511F19EE685F5CE1D38B0.roa
Signing time:             Fri 04 Sep 2026 15:30:16 +0000
ROA not before:           Fri 04 Sep 2026 15:30:11 +0000
ROA not after:            Thu 04 Sep 2036 15:30:11 +0000
asID:                     328939
IP address blocks:        102.218.88.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3634F1B/A133C32A299511F0B2F717B2DAE4EC9C/SbTWGQldlDKvZGCFPhR7710cSLA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3634F1B/A133C32A299511F0B2F717B2DAE4EC9C/SbTWGQldlDKvZGCFPhR7710cSLA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/SbTWGQldlDKvZGCFPhR7710cSLA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 528 (0x210)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3634F1BAF, serialNumber=49B4D619095D9432AF6460853E147BEF5D1C48B0
        Validity
            Not Before: Sep  4 15:30:11 2026 GMT
            Not After : Sep  4 15:30:11 2036 GMT
        Subject: CN=6a9ae407-fb81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:5b:e2:85:2a:4e:63:30:d0:d4:68:fc:a9:7b:
                    f0:10:96:39:3a:8a:08:11:27:05:a7:2f:cf:b4:b8:
                    23:5a:de:1a:1f:fe:5c:46:e1:16:0a:83:9d:05:7b:
                    b5:05:05:fa:d2:ff:d6:5c:98:fb:d3:d7:b7:9d:c3:
                    f1:e5:6e:6a:1c:9e:69:ba:40:75:7b:6f:20:31:f4:
                    01:8a:5a:09:31:09:fc:2f:97:b2:dc:16:cf:34:57:
                    15:05:15:70:11:19:c2:6f:4b:c7:30:1e:ec:6e:6d:
                    7e:5b:ba:94:26:5c:bb:32:e2:a5:7b:eb:3b:79:10:
                    85:47:ef:b2:f2:1e:a1:e1:f3:6c:53:a4:7d:21:38:
                    b2:94:ee:e3:49:01:29:d7:bc:c4:ef:8c:83:4f:07:
                    d2:7c:df:f6:83:c9:af:d5:90:4d:13:6e:55:df:33:
                    00:20:09:df:b8:7d:a2:66:bd:05:7b:cd:e4:1a:a9:
                    ce:12:c7:1d:d7:85:da:8d:3d:bf:6f:00:ce:07:bb:
                    a5:5b:6d:45:c8:df:a2:88:1b:53:6d:a3:a3:8f:8b:
                    0b:3f:79:d1:b3:4f:90:7c:aa:db:7f:43:03:22:8c:
                    61:ff:11:6d:0b:82:01:76:4c:59:26:81:d9:27:d7:
                    b4:b4:f2:89:46:f6:86:cf:bc:28:fd:45:2b:18:e1:
                    cd:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:16:A5:3D:5D:3B:4C:57:0D:1C:D9:7F:3F:C5:62:3E:D7:83:A6:3D
            X509v3 Authority Key Identifier:
                keyid:49:B4:D6:19:09:5D:94:32:AF:64:60:85:3E:14:7B:EF:5D:1C:48:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3634F1B/A133C32A299511F0B2F717B2DAE4EC9C/SbTWGQldlDKvZGCFPhR7710cSLA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SbTWGQldlDKvZGCFPhR7710cSLA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3634F1B/A133C32A299511F0B2F717B2DAE4EC9C/86CCC9CCA87511F19EE685F5CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.218.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a7:ff:b1:a9:9b:71:6a:de:40:0c:59:21:81:01:6d:1b:9f:ee:
         7d:28:12:70:19:7c:db:20:0d:4c:81:17:12:b6:78:6a:db:75:
         4e:d8:a8:cb:0d:37:83:b6:ee:26:9e:f9:18:a6:af:2e:6e:79:
         91:34:9f:6d:89:7f:83:9d:f5:ed:24:ea:ca:3b:b4:b4:e2:d5:
         d5:16:c9:14:8e:a2:d1:1a:83:9d:5c:65:f7:03:a9:22:70:ad:
         66:ad:55:b8:21:72:a2:82:de:a0:ac:46:03:d9:3f:9d:bc:c3:
         95:6b:41:0f:49:d4:a5:38:0e:e0:aa:57:cf:ef:b0:00:84:28:
         92:79:ce:88:80:da:06:9f:53:4a:ec:d0:3c:c5:40:03:72:1e:
         70:4b:fd:82:1c:72:02:51:05:4e:2f:ca:02:f8:0a:59:1d:51:
         01:9a:9d:16:4e:91:5d:62:e3:7f:55:97:fc:9e:ee:0b:ea:8e:
         ae:76:74:fb:01:c8:ce:84:ba:2b:cb:31:55:e6:21:70:6f:1e:
         42:7e:67:be:1c:ae:f4:0b:39:9b:07:d6:cb:6e:e4:c2:1f:c9:
         ea:36:09:c4:5e:4a:c1:4f:2d:c3:b8:14:c2:fe:8c:aa:83:41:
         8e:cf:24:7b:96:b3:8b:d7:86:41:a5:23:2d:00:f0:be:91:6b:
         bb:70:4e:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----