Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F366DC11/8A879878967811EAA493725AF8AEA228/9AAE541C962B11F1804FAEE8CE1D38B0.roa
File:                     9AAE541C962B11F1804FAEE8CE1D38B0.roa (raw, json)
Hash identifier:          riwA4TgoDLmktylC5BL11hz6/LujdhFjN4PMwkUkvcc=
Subject key identifier:   95:98:4B:59:3F:5D:13:B9:26:00:6C:94:06:AE:FC:02:6D:6A:24:9E
Certificate issuer:       /CN=F366DC11AF/serialNumber=EC2A86368822A47F1397D8DCE5734C530272C965
Certificate serial:       0930
Authority key identifier: EC:2A:86:36:88:22:A4:7F:13:97:D8:DC:E5:73:4C:53:02:72:C9:65
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/7CqGNogipH8Tl9jc5XNMUwJyyWU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366DC11/8A879878967811EAA493725AF8AEA228/9AAE541C962B11F1804FAEE8CE1D38B0.roa
Signing time:             Wed 12 Aug 2026 08:55:45 +0000
ROA not before:           Wed 12 Aug 2026 08:55:41 +0000
ROA not after:            Wed 31 Mar 2032 08:55:41 +0000
asID:                     328638
IP address blocks:        102.141.64.0/19 maxlen: 24
                          102.216.104.0/22 maxlen: 24
                          102.221.220.0/22 maxlen: 24
                          154.65.112.0/20 maxlen: 24
                          196.6.112.0/21 maxlen: 24
                          2c0f:f0a0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366DC11/8A879878967811EAA493725AF8AEA228/7CqGNogipH8Tl9jc5XNMUwJyyWU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366DC11/8A879878967811EAA493725AF8AEA228/7CqGNogipH8Tl9jc5XNMUwJyyWU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/7CqGNogipH8Tl9jc5XNMUwJyyWU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2352 (0x930)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366DC11AF, serialNumber=EC2A86368822A47F1397D8DCE5734C530272C965
        Validity
            Not Before: Aug 12 08:55:41 2026 GMT
            Not After : Mar 31 08:55:41 2032 GMT
        Subject: CN=6a7c3511-54f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:34:83:70:aa:10:86:95:cc:58:e3:dc:b7:49:
                    c7:d9:3a:80:d9:35:2b:16:18:b5:c9:95:ae:f1:ea:
                    62:b3:2b:f3:4b:fc:24:2f:74:c9:0d:af:8b:dc:18:
                    f0:96:32:09:a9:75:f2:83:82:e9:76:57:d0:de:66:
                    bd:aa:4a:c4:b1:0f:a8:a6:b5:c2:2b:2a:49:e7:3b:
                    63:f2:0d:ab:c3:26:ff:7e:8f:6e:e9:52:9b:b1:fe:
                    a0:7d:99:25:d9:c7:86:ba:26:6d:8e:4d:18:30:46:
                    05:7d:22:e1:f0:8f:f2:d9:5d:5e:18:66:ca:93:9b:
                    21:cc:85:b3:0b:ba:66:f0:1b:a9:53:28:e1:a2:40:
                    1e:4a:d9:dd:12:e4:6a:3d:ab:9b:c0:32:e6:79:be:
                    a0:ac:eb:af:4e:bd:be:e4:5a:f4:dc:68:b1:23:d0:
                    4c:81:f4:77:92:eb:a9:3d:c5:85:77:30:21:9e:22:
                    ff:18:2a:d8:76:c5:26:f7:84:fb:df:fd:51:99:96:
                    b1:b8:ea:bf:78:43:ce:b1:b6:98:e3:21:04:52:c1:
                    cf:b3:09:08:58:16:cc:cc:22:e2:b2:da:73:59:80:
                    06:28:68:d5:e9:e8:2f:82:cc:a6:50:0b:89:bf:1b:
                    07:47:f3:88:69:a2:74:d8:cc:05:55:33:6d:a2:06:
                    51:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:98:4B:59:3F:5D:13:B9:26:00:6C:94:06:AE:FC:02:6D:6A:24:9E
            X509v3 Authority Key Identifier:
                keyid:EC:2A:86:36:88:22:A4:7F:13:97:D8:DC:E5:73:4C:53:02:72:C9:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366DC11/8A879878967811EAA493725AF8AEA228/7CqGNogipH8Tl9jc5XNMUwJyyWU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/7CqGNogipH8Tl9jc5XNMUwJyyWU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366DC11/8A879878967811EAA493725AF8AEA228/9AAE541C962B11F1804FAEE8CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.141.64.0/19
                  102.216.104.0/22
                  102.221.220.0/22
                  154.65.112.0/20
                  196.6.112.0/21
                IPv6:
                  2c0f:f0a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         aa:bb:b9:45:cb:c2:0d:49:22:14:a1:c1:3a:ad:2b:4a:26:34:
         80:33:5b:d3:2f:4c:c8:1a:b6:1a:a5:2f:16:39:fa:77:41:ac:
         97:80:15:ab:f5:39:a7:9f:b1:1c:91:b4:e4:af:c8:c9:e2:0f:
         cd:e3:56:8b:0f:c7:d8:ea:bc:03:4e:fe:e3:0a:92:8d:aa:1e:
         d4:0f:e6:f5:23:38:df:ef:99:3f:ec:78:b3:b3:10:a2:9b:69:
         12:8f:27:9c:03:5b:f2:33:a3:37:ee:43:8c:2c:18:ab:9d:af:
         4f:bb:27:17:45:23:af:57:f7:b5:2d:af:72:9b:a1:96:8e:f3:
         09:72:47:33:8a:67:3c:ad:21:0f:f2:05:59:33:97:8a:91:11:
         46:76:b3:9a:ee:ad:c7:d5:3a:3e:b4:83:56:0f:9b:c3:2f:56:
         84:24:69:ac:b6:6e:16:0c:5e:0d:4f:50:ed:36:5e:ec:86:c1:
         34:d9:a8:e2:16:92:ed:e7:a0:01:9a:ee:96:77:54:fd:8c:f4:
         be:41:4f:95:de:49:a2:af:26:fa:82:77:4d:9e:fc:f8:36:6e:
         b3:e2:62:b6:f0:15:10:ec:f2:b1:20:59:e8:3d:d7:dd:97:91:
         e3:ba:1d:37:7a:bd:09:46:1d:ac:3a:56:fe:fc:1c:72:fb:54:
         20:95:47:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----