Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F369D6F1/8A5AD036BE3A11F1AD13CB15CF1D38B0/E1F79E82BE4411F193FB76D7CE1D38B0.roa
File:                     E1F79E82BE4411F193FB76D7CE1D38B0.roa (raw, json)
Hash identifier:          GmbfIlz4ZuVDdrs8RT0xxtjOrqdq3uod0WzhmVoFBlI=
Subject key identifier:   EA:28:F0:F1:1B:5A:A6:5E:27:E0:78:56:C8:4B:04:7A:A7:60:FF:8D
Certificate issuer:       /CN=F369D6F1AF/serialNumber=412E7F9F6A17737452C678346D8190EEDE988AB4
Certificate serial:       04
Authority key identifier: 41:2E:7F:9F:6A:17:73:74:52:C6:78:34:6D:81:90:EE:DE:98:8A:B4
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/QS5_n2oXc3RSxng0bYGQ7t6YirQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369D6F1/8A5AD036BE3A11F1AD13CB15CF1D38B0/E1F79E82BE4411F193FB76D7CE1D38B0.roa
Signing time:             Fri 02 Oct 2026 09:37:29 +0000
ROA not before:           Fri 02 Oct 2026 09:37:25 +0000
ROA not after:            Wed 01 Oct 2036 09:37:25 +0000
asID:                     328311
IP address blocks:        102.164.248.0/22 maxlen: 24
                          102.164.252.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369D6F1/8A5AD036BE3A11F1AD13CB15CF1D38B0/QS5_n2oXc3RSxng0bYGQ7t6YirQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369D6F1/8A5AD036BE3A11F1AD13CB15CF1D38B0/QS5_n2oXc3RSxng0bYGQ7t6YirQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/QS5_n2oXc3RSxng0bYGQ7t6YirQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369D6F1AF, serialNumber=412E7F9F6A17737452C678346D8190EEDE988AB4
        Validity
            Not Before: Oct  2 09:37:25 2026 GMT
            Not After : Oct  1 09:37:25 2036 GMT
        Subject: CN=6abf7b58-c63b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:cb:ac:a7:1e:ba:07:f5:13:a9:ef:59:a1:59:
                    8c:ea:4a:ce:54:bd:d5:9a:e6:09:68:98:79:b1:3b:
                    fd:1c:69:50:b1:8c:16:13:c0:b0:f9:31:0b:35:7b:
                    7a:36:ef:80:74:ff:b8:e2:d3:54:0c:9a:b3:90:1c:
                    74:4f:88:a4:e8:94:b5:f3:50:a9:a6:aa:30:97:48:
                    4d:68:b8:0d:aa:0a:95:95:e3:68:b1:0d:c4:64:7b:
                    67:48:fb:28:4e:6b:02:98:e5:c6:21:50:81:ac:ca:
                    2a:a4:e3:08:6b:85:15:72:c5:8d:74:59:e9:35:57:
                    d8:57:c4:ea:19:ef:1c:b3:e3:fe:15:b8:a6:fd:65:
                    63:cd:c7:b9:cb:41:b4:66:1d:54:16:6e:3e:1e:3b:
                    36:77:a7:62:43:e3:97:3a:b6:e7:d6:58:09:99:73:
                    64:57:e1:87:c1:cf:de:c7:e1:2b:1b:40:f5:db:40:
                    ab:9d:aa:3a:69:ca:78:bd:d9:5c:a7:27:85:da:01:
                    b7:d0:5f:4f:71:81:b1:81:18:5b:b4:c0:1f:8c:dd:
                    d8:39:71:00:d0:73:10:23:29:5c:26:65:ef:b2:c0:
                    09:81:36:0f:0c:ab:ea:18:fb:a0:aa:4f:c7:31:8e:
                    20:1a:85:84:b8:4b:47:44:06:f2:97:e3:de:bf:68:
                    e8:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:28:F0:F1:1B:5A:A6:5E:27:E0:78:56:C8:4B:04:7A:A7:60:FF:8D
            X509v3 Authority Key Identifier:
                keyid:41:2E:7F:9F:6A:17:73:74:52:C6:78:34:6D:81:90:EE:DE:98:8A:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369D6F1/8A5AD036BE3A11F1AD13CB15CF1D38B0/QS5_n2oXc3RSxng0bYGQ7t6YirQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QS5_n2oXc3RSxng0bYGQ7t6YirQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369D6F1/8A5AD036BE3A11F1AD13CB15CF1D38B0/E1F79E82BE4411F193FB76D7CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.164.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         0c:f7:d9:cb:b7:bd:14:28:f6:7f:24:c5:1e:85:27:e9:e3:fb:
         b7:87:ee:ac:e4:28:b0:65:24:5b:2d:f9:2d:dc:91:f8:c7:4b:
         71:dd:3c:c3:fe:db:1e:26:06:3d:bb:50:6c:91:3a:55:19:fa:
         86:95:8b:f3:11:d5:df:79:da:c7:fc:73:3c:3d:28:7f:1f:e0:
         ef:99:e5:40:f9:4a:bd:f9:b5:3f:ca:8a:5f:f4:2e:0b:db:fb:
         c4:01:be:9d:07:4f:e4:f4:36:af:3f:e4:85:48:fd:7d:c6:2f:
         6f:36:e4:ba:eb:76:89:50:df:a5:83:f9:37:1d:ee:fc:53:43:
         d0:49:35:e1:c9:b5:ed:fd:5f:98:9a:cb:52:cc:ca:5e:5b:52:
         8f:73:26:80:20:56:a0:56:22:a8:78:78:5c:ee:3b:aa:30:ca:
         bf:26:10:94:dc:84:b9:80:4c:ab:dc:ab:5c:ec:b2:54:66:9d:
         90:5a:a1:b1:e5:7c:39:cf:60:d0:fe:6c:32:a6:3f:83:00:e1:
         0b:52:71:a8:aa:b6:af:83:0c:7a:e9:11:d6:79:b7:45:c1:4a:
         c8:3c:ec:c7:c3:d0:6b:6e:d4:ff:d6:dd:f0:3c:69:56:55:19:
         90:7a:ed:01:73:de:37:8a:04:c3:07:30:11:f9:aa:72:37:6a:
         eb:58:bc:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----