Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364B494/38F78A12329411ED96CD57A5F1222468/E3C653308A6D11F1A6412914CF1D38B0.roa
File:                     E3C653308A6D11F1A6412914CF1D38B0.roa (raw, json)
Hash identifier:          p9hlGzewGMaj5gPBDqvEO3e2S+ZbZso+XQB0hn7n8wY=
Subject key identifier:   B8:14:DC:C5:8D:6C:3E:CD:61:08:AD:30:0C:E4:E8:42:CA:4C:7F:D8
Certificate issuer:       /CN=F364B494AF/serialNumber=FB0923F869D52E333802B9C53D78B3BA865430CC
Certificate serial:       05C1
Authority key identifier: FB:09:23:F8:69:D5:2E:33:38:02:B9:C5:3D:78:B3:BA:86:54:30:CC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/-wkj-GnVLjM4ArnFPXizuoZUMMw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364B494/38F78A12329411ED96CD57A5F1222468/E3C653308A6D11F1A6412914CF1D38B0.roa
Signing time:             Tue 28 Jul 2026 10:20:01 +0000
ROA not before:           Tue 28 Jul 2026 10:19:56 +0000
ROA not after:            Sat 28 Jul 2035 10:19:56 +0000
asID:                     327872
IP address blocks:        102.219.88.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364B494/38F78A12329411ED96CD57A5F1222468/-wkj-GnVLjM4ArnFPXizuoZUMMw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364B494/38F78A12329411ED96CD57A5F1222468/-wkj-GnVLjM4ArnFPXizuoZUMMw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/-wkj-GnVLjM4ArnFPXizuoZUMMw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 31 Jul 2026 00:07:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1473 (0x5c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364B494AF, serialNumber=FB0923F869D52E333802B9C53D78B3BA865430CC
        Validity
            Not Before: Jul 28 10:19:56 2026 GMT
            Not After : Jul 28 10:19:56 2035 GMT
        Subject: CN=6a688250-32cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:77:ac:b1:52:76:ee:5f:31:b5:57:c3:0a:38:
                    94:69:7a:0e:0b:7d:b8:89:51:f8:f9:4d:17:6e:ba:
                    13:6e:8e:2e:d4:ce:2b:84:85:0b:a9:b9:bd:75:18:
                    3c:ce:0d:83:12:d1:fb:62:5b:34:5f:c1:ef:8f:19:
                    98:7b:a9:94:17:16:e7:94:86:bb:f3:d4:c2:5f:ad:
                    8a:35:80:d9:f9:00:18:8e:e9:2d:4d:dd:3a:ae:1a:
                    c6:69:6b:61:ec:72:34:c6:3a:d6:fc:1d:d8:11:d0:
                    d3:30:dc:2c:14:9b:ad:46:1f:6e:e5:60:2c:61:d0:
                    44:bd:d8:52:02:69:0a:29:ca:e3:0e:d1:7d:47:30:
                    b2:14:1e:d2:d6:6f:aa:41:9e:c8:98:29:d0:4f:bb:
                    96:ba:93:92:ac:ed:6c:46:a5:84:ad:de:e1:7a:5c:
                    e3:97:97:0b:fc:9e:4d:6e:61:df:89:7c:7d:ac:bf:
                    8b:83:96:47:c6:dc:a6:b8:58:41:ef:66:a4:a0:1e:
                    38:79:3d:77:46:e8:9f:ae:bf:e1:76:0f:fe:3c:d1:
                    5a:85:7d:a8:e9:41:f0:e0:38:b2:bd:cd:4e:9a:39:
                    ff:aa:a4:66:49:e0:4b:11:80:d4:98:66:31:a8:8b:
                    c6:16:c7:ae:bf:ff:23:e8:6b:90:af:1b:32:1a:72:
                    7d:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:14:DC:C5:8D:6C:3E:CD:61:08:AD:30:0C:E4:E8:42:CA:4C:7F:D8
            X509v3 Authority Key Identifier:
                keyid:FB:09:23:F8:69:D5:2E:33:38:02:B9:C5:3D:78:B3:BA:86:54:30:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364B494/38F78A12329411ED96CD57A5F1222468/-wkj-GnVLjM4ArnFPXizuoZUMMw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/-wkj-GnVLjM4ArnFPXizuoZUMMw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364B494/38F78A12329411ED96CD57A5F1222468/E3C653308A6D11F1A6412914CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.219.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9e:a1:12:36:a7:1f:8a:2c:59:a0:7d:d6:a2:22:df:4b:22:31:
         e9:09:bf:c1:74:59:fe:55:c9:0e:aa:a7:41:93:82:27:1a:b3:
         06:76:2e:18:24:40:86:76:1d:62:44:82:7b:be:29:b4:2d:11:
         7d:7b:65:70:97:c0:90:6f:85:35:a2:ef:08:0c:ee:f0:ea:fb:
         6a:bd:ea:af:fa:89:7b:4a:fb:7d:64:0c:f3:95:af:42:51:0b:
         fb:ac:79:9a:5e:a3:d7:6e:30:a3:2c:e8:e8:28:5e:99:27:f1:
         ba:b5:9a:6f:d5:95:10:f2:45:1f:2a:b7:94:62:d1:0a:ac:f3:
         2c:9e:65:c6:e4:33:53:37:eb:8d:b7:33:e1:92:58:ba:da:39:
         8d:28:cc:ec:fd:6d:b7:03:a8:03:91:6f:0c:f9:99:38:80:45:
         b8:24:62:8b:99:d3:ee:6d:15:32:9a:61:11:57:cb:d9:38:91:
         b4:0b:0e:79:01:88:d9:8d:88:b1:ca:26:64:70:9b:ca:23:f7:
         19:00:c7:0d:b1:4f:32:8f:69:00:0a:9f:b0:c6:7e:bd:70:04:
         8f:cc:cc:a1:02:81:1a:2e:4c:81:b5:20:d3:e0:b8:c3:31:4d:
         18:9f:96:bb:f1:b0:19:42:7c:4a:33:56:a4:ba:9c:07:b1:ed:
         cc:d1:f2:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----