Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/933FD9AAA69B11F18E82F4CBCE1D38B0.roa
File:                     933FD9AAA69B11F18E82F4CBCE1D38B0.roa (raw, json)
Hash identifier:          Begy1Pb2rz2hrdXAve9cyRscu7j1WRjvxAfHS703P5c=
Subject key identifier:   C3:A1:21:3C:ED:D6:65:DA:32:E5:68:AA:66:9B:E4:0B:AE:0B:E9:84
Certificate issuer:       /CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Certificate serial:       0A1B
Authority key identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/933FD9AAA69B11F18E82F4CBCE1D38B0.roa
Signing time:             Wed 02 Sep 2026 06:57:35 +0000
ROA not before:           Wed 02 Sep 2026 06:57:31 +0000
ROA not after:            Sun 31 Oct 2027 06:57:31 +0000
asID:                     174
IP address blocks:        102.177.146.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 22 Sep 2026 00:07:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2587 (0xa1b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367DFA4AF, serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
        Validity
            Not Before: Sep  2 06:57:31 2026 GMT
            Not After : Oct 31 06:57:31 2027 GMT
        Subject: CN=6a97c8df-f11d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:bf:31:9d:d7:dc:f2:d3:99:7d:69:ca:f6:08:
                    60:20:c7:6a:e7:5d:d3:bf:36:97:0a:92:57:04:2e:
                    21:a5:1e:ee:24:7d:1b:56:a2:cb:0e:22:71:50:dc:
                    8c:29:88:49:fb:71:bc:d3:7d:cd:c3:89:96:0c:fc:
                    63:f3:61:ca:c8:0f:8a:fe:27:ff:f2:a9:d2:55:e1:
                    9c:6c:96:90:d9:34:8e:b5:b7:92:7a:50:30:c3:ae:
                    a7:8e:bd:e0:64:c2:fc:1f:12:5d:1b:d1:40:9e:5f:
                    7d:51:9a:09:2f:9e:92:a4:42:ac:53:66:2e:ec:82:
                    40:88:2d:0e:70:9c:d8:a2:b9:10:a3:3b:62:55:78:
                    4f:5f:11:68:7c:b7:b3:04:35:9d:a6:e5:9a:f0:01:
                    00:2a:34:e9:fb:20:c1:79:de:f9:95:fd:1a:2d:6c:
                    0d:96:11:1c:1d:2e:af:11:73:cd:1c:23:52:f5:41:
                    33:6f:72:79:8b:27:5a:ac:ad:24:a7:eb:00:09:e6:
                    6f:e7:8d:b7:0b:6c:42:d5:17:21:3d:f9:70:ad:2b:
                    7a:02:d1:4c:b9:8c:b7:c1:d0:b3:9d:80:fe:dd:2c:
                    b9:b1:cf:f2:85:24:c4:c7:fa:da:c9:f3:3d:36:22:
                    68:29:83:ca:38:e8:7c:d7:3e:f2:0a:de:ed:d9:b4:
                    95:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:A1:21:3C:ED:D6:65:DA:32:E5:68:AA:66:9B:E4:0B:AE:0B:E9:84
            X509v3 Authority Key Identifier:
                keyid:97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/933FD9AAA69B11F18E82F4CBCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.177.146.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9b:4d:c2:be:a3:dc:cf:dc:67:41:8e:cd:b7:86:ba:ec:84:f7:
         6b:d7:a1:ae:18:09:30:4c:de:a9:e3:f9:51:ae:27:a8:ba:f8:
         a3:3f:b2:1b:ad:5c:f1:8c:4e:f1:ad:f0:97:6d:5c:fb:db:e0:
         cf:f5:f7:8d:e9:84:67:86:61:91:58:4f:75:03:e7:e0:15:71:
         d6:ee:06:91:ac:f9:57:75:74:b0:f0:26:d6:11:42:39:1a:7e:
         62:66:c7:32:d7:48:ad:fd:4f:1f:be:b2:70:68:c6:8e:d8:33:
         c2:9a:c6:3b:68:18:c9:da:5a:d5:f7:01:bc:54:ba:12:e5:33:
         ba:c3:12:d4:63:40:61:13:61:68:f1:b0:70:04:86:88:e4:bd:
         d0:ea:4b:3d:f1:f4:2e:76:71:fd:bf:66:60:3f:fa:8e:c1:61:
         31:45:86:de:ee:d2:e6:85:9b:77:62:96:b6:73:7a:a5:9f:42:
         cd:98:a9:9a:1d:68:c7:84:cd:d4:ca:f9:9c:12:65:61:87:71:
         d8:d0:8b:3a:07:f2:e3:dd:72:bd:18:24:f7:8a:71:dd:35:f3:
         13:e2:ac:f8:1f:1f:e0:09:69:d6:97:53:e0:f6:d1:de:4e:e4:
         4b:09:86:32:eb:5a:66:2f:38:7b:bc:88:c1:fd:49:50:0c:ac:
         c7:b9:9f:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----