Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3634F1B/A133C32A299511F0B2F717B2DAE4EC9C/C97F4500A87611F18F9F4EFDCE1D38B0.roa
File:                     C97F4500A87611F18F9F4EFDCE1D38B0.roa (raw, json)
Hash identifier:          kB0NGtDaNZn1ivrrDJOXtm8BpSuvK9KY0qQiiT++3mA=
Subject key identifier:   68:CB:2D:CD:B2:7D:55:8E:49:B9:E5:B0:20:F3:47:CF:B3:80:0E:90
Certificate issuer:       /CN=F3634F1BAF/serialNumber=49B4D619095D9432AF6460853E147BEF5D1C48B0
Certificate serial:       0218
Authority key identifier: 49:B4:D6:19:09:5D:94:32:AF:64:60:85:3E:14:7B:EF:5D:1C:48:B0
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SbTWGQldlDKvZGCFPhR7710cSLA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3634F1B/A133C32A299511F0B2F717B2DAE4EC9C/C97F4500A87611F18F9F4EFDCE1D38B0.roa
Signing time:             Fri 04 Sep 2026 15:39:17 +0000
ROA not before:           Fri 04 Sep 2026 15:39:13 +0000
ROA not after:            Thu 04 Sep 2036 15:39:13 +0000
asID:                     328939
IP address blocks:        102.218.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3634F1B/A133C32A299511F0B2F717B2DAE4EC9C/SbTWGQldlDKvZGCFPhR7710cSLA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3634F1B/A133C32A299511F0B2F717B2DAE4EC9C/SbTWGQldlDKvZGCFPhR7710cSLA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/SbTWGQldlDKvZGCFPhR7710cSLA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 536 (0x218)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3634F1BAF, serialNumber=49B4D619095D9432AF6460853E147BEF5D1C48B0
        Validity
            Not Before: Sep  4 15:39:13 2026 GMT
            Not After : Sep  4 15:39:13 2036 GMT
        Subject: CN=6a9ae625-adf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:71:c1:c6:e5:2e:61:e1:b0:cb:da:75:1a:f2:
                    55:65:dd:c4:af:6d:22:e6:7e:5c:da:45:ca:9f:62:
                    a1:6a:38:1d:eb:35:4d:80:32:03:09:bc:d2:25:95:
                    6b:df:b8:f5:04:3b:7c:4d:6c:5a:cd:4c:c1:b0:a5:
                    db:be:22:38:2c:aa:a3:c7:d3:58:12:d4:bc:53:84:
                    f1:0f:48:0d:6c:50:1d:1f:50:b8:a9:39:f8:58:e9:
                    08:39:3f:0e:11:dd:6f:e7:d0:d1:84:43:22:31:eb:
                    8a:30:09:2a:66:6f:1f:01:a4:0a:30:44:d6:52:35:
                    97:89:64:84:02:48:5a:1d:0e:41:71:4a:93:a2:91:
                    d8:2d:c6:1e:1e:2d:d2:5f:18:98:14:a3:fb:04:15:
                    35:18:db:10:d7:b1:22:15:b7:41:7e:e1:e6:15:f5:
                    f9:cd:8e:fa:fc:16:eb:09:f3:f6:d1:ec:84:b6:5d:
                    79:9f:c5:da:d1:e7:13:7c:4e:13:ba:79:6d:ba:70:
                    15:1e:8e:bc:f3:e2:aa:e7:d6:92:c0:20:1f:50:97:
                    62:65:69:4e:c0:15:3e:45:63:a2:8c:d9:41:c9:a1:
                    a8:87:b4:f0:ad:6f:2f:17:b6:5c:43:60:12:18:94:
                    b6:33:a9:12:1c:7b:26:64:3f:d1:91:7d:54:36:fa:
                    7d:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:CB:2D:CD:B2:7D:55:8E:49:B9:E5:B0:20:F3:47:CF:B3:80:0E:90
            X509v3 Authority Key Identifier:
                keyid:49:B4:D6:19:09:5D:94:32:AF:64:60:85:3E:14:7B:EF:5D:1C:48:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3634F1B/A133C32A299511F0B2F717B2DAE4EC9C/SbTWGQldlDKvZGCFPhR7710cSLA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SbTWGQldlDKvZGCFPhR7710cSLA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3634F1B/A133C32A299511F0B2F717B2DAE4EC9C/C97F4500A87611F18F9F4EFDCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.218.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:20:8a:24:33:3f:8d:2b:65:b2:18:64:ec:89:09:63:8b:c3:
         60:55:79:5c:36:85:9e:77:2c:3c:69:ab:a2:6b:de:13:ab:93:
         2c:b1:8b:fd:4f:f4:20:5e:56:d6:0a:d2:7c:30:36:73:e6:e7:
         16:4e:70:cc:0b:46:13:0f:df:ad:99:94:d7:bf:81:c6:96:11:
         56:bf:f2:42:c4:50:82:6d:1f:33:ad:17:7a:06:12:0c:55:f2:
         5b:3e:03:6c:ad:49:f1:ca:71:9c:bd:13:cb:b1:eb:b8:46:0d:
         a7:8d:70:2b:99:1d:e9:c3:8a:62:ae:a4:6a:bf:7d:f6:84:34:
         1a:5f:66:d6:b5:af:eb:02:9c:44:d0:7f:8b:68:83:6a:57:6e:
         e2:1e:22:46:cf:8e:3e:72:cf:80:bc:7f:f2:07:f1:a9:fc:dd:
         8c:a4:74:1b:c7:a1:2d:75:6d:95:87:38:7b:31:43:da:51:cc:
         65:97:b1:12:22:4a:f8:88:05:80:e0:63:60:21:db:bf:3d:d1:
         56:6a:cf:76:a5:0d:09:45:97:f3:6e:ba:aa:76:96:67:50:c4:
         da:b3:4c:39:95:45:ea:5d:10:dc:9c:c1:a2:21:5f:16:8f:35:
         9e:66:97:b4:b9:cb:d2:86:c3:19:e2:5f:2a:63:c2:f9:c8:67:
         b5:40:36:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----