Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F362C18C/45883290ABD111EBB1A6715EF8AEA228/135920B0A27811F19D4416ACCE1D38B0.roa
File:                     135920B0A27811F19D4416ACCE1D38B0.roa (raw, json)
Hash identifier:          fmhmLXMYa8q81d6P+YONgMCa8MOES+3p9rjxKAsAxKE=
Subject key identifier:   19:CF:71:A3:EA:E8:6D:3A:A9:06:C6:07:C9:DD:CD:12:76:7D:44:3F
Certificate issuer:       /CN=F362C18CAF/serialNumber=63E0BB6B3433CD5D71A42B0169BDB01E20E4557F
Certificate serial:       0806
Authority key identifier: 63:E0:BB:6B:34:33:CD:5D:71:A4:2B:01:69:BD:B0:1E:20:E4:55:7F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Y-C7azQzzV1xpCsBab2wHiDkVX8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362C18C/45883290ABD111EBB1A6715EF8AEA228/135920B0A27811F19D4416ACCE1D38B0.roa
Signing time:             Fri 28 Aug 2026 00:33:23 +0000
ROA not before:           Fri 28 Aug 2026 00:00:19 +0000
ROA not after:            Tue 27 Aug 2030 00:00:19 +0000
asID:                     328528
IP address blocks:        102.220.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362C18C/45883290ABD111EBB1A6715EF8AEA228/Y-C7azQzzV1xpCsBab2wHiDkVX8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362C18C/45883290ABD111EBB1A6715EF8AEA228/Y-C7azQzzV1xpCsBab2wHiDkVX8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Y-C7azQzzV1xpCsBab2wHiDkVX8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 10 Oct 2026 00:07:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2054 (0x806)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362C18CAF, serialNumber=63E0BB6B3433CD5D71A42B0169BDB01E20E4557F
        Validity
            Not Before: Aug 28 00:00:19 2026 GMT
            Not After : Aug 27 00:00:19 2030 GMT
        Subject: CN=6a90d753-cc24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:96:cc:9b:d0:f3:83:cc:a1:a2:5c:ec:8e:00:
                    5b:62:66:0f:04:b1:8f:13:f1:4f:c3:1f:38:8a:67:
                    c7:75:75:6f:24:91:ab:70:a5:32:c0:e2:5f:1f:62:
                    25:99:e7:a6:66:eb:0d:b3:db:eb:fe:f7:6a:1a:52:
                    41:f5:58:08:ac:da:dc:0c:a3:76:8e:60:4d:17:2c:
                    68:7d:97:cb:d4:30:1e:69:42:39:b4:58:79:a9:be:
                    f9:09:85:5f:71:d8:dc:61:6a:8e:28:53:7e:e2:8a:
                    72:e7:a0:91:de:86:9a:22:24:c4:5c:3e:fe:b3:1e:
                    1b:17:34:01:ae:38:90:59:16:ae:df:d8:1a:53:75:
                    54:0b:02:e3:e1:a5:65:ac:41:7a:dd:ba:aa:73:18:
                    99:85:d1:a5:95:6c:50:39:8b:32:ac:36:f9:40:bb:
                    5d:45:d8:b1:6c:c4:14:c5:b3:77:5a:28:2d:08:85:
                    5b:04:72:ab:83:09:60:41:2a:29:a7:9a:48:c4:da:
                    4b:44:4a:da:b7:52:85:6a:6b:96:27:fc:4e:db:19:
                    ac:b5:cd:b6:84:66:13:8e:a7:26:49:09:dc:54:d8:
                    e4:68:31:b3:2b:6c:1e:0a:24:4f:17:b1:34:d0:d5:
                    47:e5:f2:e8:bf:b7:bb:54:ce:fc:16:09:db:f4:d0:
                    f3:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:CF:71:A3:EA:E8:6D:3A:A9:06:C6:07:C9:DD:CD:12:76:7D:44:3F
            X509v3 Authority Key Identifier:
                keyid:63:E0:BB:6B:34:33:CD:5D:71:A4:2B:01:69:BD:B0:1E:20:E4:55:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362C18C/45883290ABD111EBB1A6715EF8AEA228/Y-C7azQzzV1xpCsBab2wHiDkVX8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Y-C7azQzzV1xpCsBab2wHiDkVX8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362C18C/45883290ABD111EBB1A6715EF8AEA228/135920B0A27811F19D4416ACCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.220.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:2d:89:b9:35:25:c6:04:98:9f:dd:6a:6c:5f:20:47:ba:01:
         92:be:be:0b:02:ff:39:56:01:f6:08:c5:dd:34:48:05:b4:8c:
         0b:b5:af:4e:a6:36:a4:81:64:81:ab:cb:ee:88:76:0c:03:a1:
         2c:e3:7b:81:0d:bf:8c:87:69:7a:22:d2:d6:31:20:f7:4d:3d:
         d3:32:77:a5:1b:4d:d9:1b:19:8c:04:d7:c9:23:d2:c1:7c:42:
         f0:ae:56:e1:81:6e:e9:cb:1b:1e:19:fa:c5:aa:b8:17:9a:fa:
         d2:f0:99:6a:02:b6:53:90:4d:4b:f4:9a:b1:bf:78:9c:ef:3d:
         32:97:82:e7:2a:73:d1:cb:be:a8:19:9a:7b:7f:dd:74:4e:84:
         03:48:95:5e:26:e8:38:10:2a:34:5f:15:4c:55:0b:37:be:90:
         3d:09:43:43:a5:4f:f0:a4:98:44:2a:7e:07:91:af:2b:79:f6:
         84:f7:ff:32:17:27:b5:9e:0b:09:19:50:b1:c3:df:8a:31:c9:
         dc:50:c5:7e:5c:1e:83:43:ae:87:a9:b5:13:3c:f0:ee:f1:e1:
         88:1e:94:1c:66:e0:c8:aa:dd:b6:69:e4:3d:ff:5c:1b:d9:5b:
         5d:0a:c5:27:df:99:48:8b:4e:81:c3:83:c5:ad:64:3e:b7:1f:
         45:03:3a:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----