Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3634F1B/A133C32A299511F0B2F717B2DAE4EC9C/BBF1B41CA87211F1B8805AE5CE1D38B0.roa
File:                     BBF1B41CA87211F1B8805AE5CE1D38B0.roa (raw, json)
Hash identifier:          CUx3ktlqa3NJN1ypmfmN/V4lM1vS5fVnZweA/hAkGzU=
Subject key identifier:   29:EB:97:7E:E1:81:AC:B7:F1:FE:CA:E3:43:10:D6:73:EC:E9:B6:A6
Certificate issuer:       /CN=F3634F1BAF/serialNumber=49B4D619095D9432AF6460853E147BEF5D1C48B0
Certificate serial:       0206
Authority key identifier: 49:B4:D6:19:09:5D:94:32:AF:64:60:85:3E:14:7B:EF:5D:1C:48:B0
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SbTWGQldlDKvZGCFPhR7710cSLA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3634F1B/A133C32A299511F0B2F717B2DAE4EC9C/BBF1B41CA87211F1B8805AE5CE1D38B0.roa
Signing time:             Fri 04 Sep 2026 15:10:16 +0000
ROA not before:           Fri 04 Sep 2026 15:10:12 +0000
ROA not after:            Thu 04 Sep 2036 15:10:12 +0000
asID:                     328939
IP address blocks:        102.206.128.0/22 maxlen: 22
                          2c0f:4b00::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3634F1B/A133C32A299511F0B2F717B2DAE4EC9C/SbTWGQldlDKvZGCFPhR7710cSLA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3634F1B/A133C32A299511F0B2F717B2DAE4EC9C/SbTWGQldlDKvZGCFPhR7710cSLA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/SbTWGQldlDKvZGCFPhR7710cSLA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 04:51:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 518 (0x206)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3634F1BAF, serialNumber=49B4D619095D9432AF6460853E147BEF5D1C48B0
        Validity
            Not Before: Sep  4 15:10:12 2026 GMT
            Not After : Sep  4 15:10:12 2036 GMT
        Subject: CN=6a9adf58-2b6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:8c:0f:65:6c:4f:a1:df:8a:1d:a8:62:40:e8:
                    0e:37:f4:bd:21:31:8a:c6:cb:92:ab:ca:60:ef:7b:
                    03:96:18:ef:72:8d:b7:32:6b:f7:60:2c:21:7e:a2:
                    d8:b4:25:1e:db:66:5d:64:eb:f4:56:db:ab:dd:9b:
                    38:88:1f:db:98:30:ec:c3:35:aa:02:6a:8a:4f:a3:
                    a8:df:bd:fe:2a:4d:c4:be:be:88:ee:d0:c1:5f:33:
                    ac:c3:9a:38:98:6a:43:b6:aa:f2:a0:cb:c6:08:30:
                    7d:17:34:89:b1:da:40:49:c2:35:11:6a:bd:6f:a6:
                    6d:bb:11:a7:4e:ff:2a:2e:f5:b4:15:55:dd:dd:af:
                    ce:7c:a3:b2:e0:b3:84:17:49:31:a4:ed:2b:fd:4e:
                    d5:03:fd:a1:52:21:48:ec:46:06:a3:06:05:5e:31:
                    ec:b2:a4:74:5d:58:5e:06:e9:d7:02:79:34:8e:8a:
                    25:8c:0b:03:22:7c:80:cb:fb:17:29:5d:40:6e:f9:
                    a3:6a:ca:3d:77:e2:f7:86:22:06:dc:d9:5f:25:a7:
                    89:14:12:36:7c:c8:5d:2c:57:84:57:68:c3:2d:7c:
                    47:52:99:f9:64:e0:5f:56:6f:14:ca:e7:3d:f0:16:
                    e3:40:58:61:e5:74:11:2c:be:14:83:1c:24:40:50:
                    34:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:EB:97:7E:E1:81:AC:B7:F1:FE:CA:E3:43:10:D6:73:EC:E9:B6:A6
            X509v3 Authority Key Identifier:
                keyid:49:B4:D6:19:09:5D:94:32:AF:64:60:85:3E:14:7B:EF:5D:1C:48:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3634F1B/A133C32A299511F0B2F717B2DAE4EC9C/SbTWGQldlDKvZGCFPhR7710cSLA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SbTWGQldlDKvZGCFPhR7710cSLA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3634F1B/A133C32A299511F0B2F717B2DAE4EC9C/BBF1B41CA87211F1B8805AE5CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.206.128.0/22
                IPv6:
                  2c0f:4b00::/32

    Signature Algorithm: sha256WithRSAEncryption
         12:9b:f5:c0:1c:00:85:1e:43:8b:10:4f:07:7d:61:1e:c6:50:
         eb:6f:0f:5d:69:0c:07:9d:a2:99:9f:5f:00:af:78:39:0b:47:
         af:ed:67:94:09:89:dc:a2:32:d9:fd:17:e2:21:f8:77:09:2e:
         55:bb:07:4b:30:0c:0c:37:9d:51:1d:1f:43:fe:3a:a1:ce:46:
         e0:35:1f:87:41:21:72:cd:b4:6f:94:8d:e3:28:76:87:ed:02:
         92:59:0b:e9:d6:9b:84:64:10:e4:b5:02:0b:9d:d6:7f:15:15:
         36:47:24:d3:d7:96:37:fe:63:fb:91:4f:94:c4:86:06:8d:5e:
         83:31:e0:18:99:1c:53:c1:3d:e4:9b:fd:f6:8d:f3:c8:d4:ef:
         83:2b:1f:b5:93:d0:e5:54:21:81:0d:58:0b:68:8c:b4:28:b7:
         9c:a5:46:36:40:02:24:39:86:e8:42:96:e5:b8:a7:8d:3e:27:
         31:c5:6d:76:c7:67:d9:ac:fc:98:4b:7a:c3:34:2a:b0:64:4a:
         97:67:87:0a:8b:af:ad:a3:f2:a8:d7:30:88:e5:4c:1e:ba:3a:
         b5:cb:b9:7b:8b:e9:1c:dd:74:05:de:85:8b:cf:d7:88:d7:2a:
         3b:88:b7:29:0d:b1:62:3d:1e:e6:f1:b4:34:34:d2:b9:5d:80:
         94:c5:8d:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----