Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3664F7B/52128B188A4D11F1AE1B3ECFCE1D38B0/B9E595E08A4E11F18F6CB1D7CE1D38B0.roa
File:                     B9E595E08A4E11F18F6CB1D7CE1D38B0.roa (raw, json)
Hash identifier:          B4ThLzrbIVO16jLTzmKePpz4F2ddN768weBvs+JXx/U=
Subject key identifier:   32:DA:8A:FC:CA:1D:49:4C:C7:F1:B4:B5:F8:B4:18:2D:EE:4A:EB:D8
Certificate issuer:       /CN=F3664F7BAF/serialNumber=5E3C3F19D34150AB3D3BF4C27F6B11658ADD51BC
Certificate serial:       02
Authority key identifier: 5E:3C:3F:19:D3:41:50:AB:3D:3B:F4:C2:7F:6B:11:65:8A:DD:51:BC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Xjw_GdNBUKs9O_TCf2sRZYrdUbw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3664F7B/52128B188A4D11F1AE1B3ECFCE1D38B0/B9E595E08A4E11F18F6CB1D7CE1D38B0.roa
Signing time:             Tue 28 Jul 2026 06:36:56 +0000
ROA not before:           Tue 28 Jul 2026 06:36:52 +0000
ROA not after:            Mon 28 Jul 2031 06:36:52 +0000
asID:                     328388
IP address blocks:        102.130.16.0/20 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3664F7B/52128B188A4D11F1AE1B3ECFCE1D38B0/Xjw_GdNBUKs9O_TCf2sRZYrdUbw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3664F7B/52128B188A4D11F1AE1B3ECFCE1D38B0/Xjw_GdNBUKs9O_TCf2sRZYrdUbw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Xjw_GdNBUKs9O_TCf2sRZYrdUbw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 30 Jul 2026 06:38:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3664F7BAF, serialNumber=5E3C3F19D34150AB3D3BF4C27F6B11658ADD51BC
        Validity
            Not Before: Jul 28 06:36:52 2026 GMT
            Not After : Jul 28 06:36:52 2031 GMT
        Subject: CN=6a684e08-bdbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:5d:29:1c:59:1b:2a:49:62:a2:2b:fe:47:4d:
                    e2:d3:f9:07:84:fc:02:61:2b:28:bd:e6:83:05:05:
                    fe:65:24:ef:26:20:76:d1:bc:a2:bf:b6:eb:2d:5f:
                    5b:92:90:5e:ae:11:7a:4d:19:76:e4:89:ff:22:35:
                    bd:b0:9c:c3:46:55:5b:51:e0:c8:eb:24:4f:f8:ad:
                    ea:57:d6:4b:20:7e:4e:5a:1c:c1:72:65:c6:c1:2b:
                    d5:08:f2:ab:b2:ce:85:43:3b:14:c1:3f:1f:a9:a7:
                    c2:a2:b6:c9:13:88:09:c6:32:8e:1c:c4:6b:ec:94:
                    60:ad:2e:67:80:32:e5:bf:a4:50:31:e1:d0:57:de:
                    80:ce:3c:a1:8c:a1:e6:e9:62:fb:78:15:88:a2:85:
                    30:4b:77:15:d8:5f:49:90:9f:be:85:09:90:74:18:
                    85:2c:d8:db:97:6e:59:6f:54:1a:b9:d8:76:7a:56:
                    4d:7f:30:b4:c4:8f:8c:7f:35:f4:8a:9d:71:45:0a:
                    49:ac:9d:45:56:9b:e6:34:58:05:24:c7:fc:d7:92:
                    52:83:eb:03:97:e7:91:7a:bc:d1:de:48:b5:35:5a:
                    27:f3:2e:97:6f:93:78:af:27:ed:8a:5e:d6:3e:05:
                    6f:dc:27:b6:e6:de:c9:10:c2:55:22:82:ab:75:13:
                    f9:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:DA:8A:FC:CA:1D:49:4C:C7:F1:B4:B5:F8:B4:18:2D:EE:4A:EB:D8
            X509v3 Authority Key Identifier:
                keyid:5E:3C:3F:19:D3:41:50:AB:3D:3B:F4:C2:7F:6B:11:65:8A:DD:51:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3664F7B/52128B188A4D11F1AE1B3ECFCE1D38B0/Xjw_GdNBUKs9O_TCf2sRZYrdUbw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Xjw_GdNBUKs9O_TCf2sRZYrdUbw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3664F7B/52128B188A4D11F1AE1B3ECFCE1D38B0/B9E595E08A4E11F18F6CB1D7CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.130.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         4c:cd:80:cc:48:36:65:b6:83:b0:73:55:52:8a:c4:95:b0:27:
         a5:c2:3b:5a:95:2a:96:ab:80:ce:c5:b7:e8:11:00:8d:0b:62:
         f0:b8:61:c1:08:10:f3:f6:a3:12:02:81:65:30:8b:44:b0:53:
         13:e1:6a:5b:e7:2a:91:94:d7:31:42:c5:b4:80:88:2b:64:bb:
         f6:20:50:7b:89:c7:dc:07:c8:54:f6:c7:4c:6e:a1:22:7d:f9:
         2f:d2:bf:19:7b:b6:0f:15:00:ff:dd:8c:dc:5e:54:c2:9a:16:
         e5:7a:89:e9:f6:5f:3b:f7:17:0a:34:c2:20:46:08:04:cc:f1:
         90:d4:ad:8f:28:2c:f9:6d:c5:31:26:8c:7f:82:dd:29:35:6f:
         d5:3d:f0:76:12:75:df:08:41:8c:72:2b:51:d5:d1:13:83:a8:
         e4:b1:46:4f:48:0f:ab:f8:ce:59:83:87:a8:69:32:d5:50:58:
         ad:8a:72:a0:70:a4:f1:4b:d4:fd:24:92:d4:96:c1:8d:0c:5b:
         3b:36:81:24:5c:98:9c:00:32:ab:2b:f7:66:f7:8d:dc:9a:08:
         8b:63:65:83:10:07:8e:d3:0c:b4:4c:db:f5:f0:dc:14:0c:86:
         a8:c7:74:3e:ae:6b:80:68:91:68:da:13:cd:dd:1c:f4:00:b6:
         9d:4c:c7:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----