Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F366DC11/8A879878967811EAA493725AF8AEA228/91B3C2A696FE11F1A55481EDCE1D38B0.roa
File:                     91B3C2A696FE11F1A55481EDCE1D38B0.roa (raw, json)
Hash identifier:          wViezgn3zihY7XOFaUx0wP080kC6nNBg/ZnQQ9dh0pE=
Subject key identifier:   26:40:5A:D9:C4:C1:96:F5:0D:4F:7F:2A:2E:E3:A9:47:5D:87:0F:98
Certificate issuer:       /CN=F366DC11AF/serialNumber=EC2A86368822A47F1397D8DCE5734C530272C965
Certificate serial:       0934
Authority key identifier: EC:2A:86:36:88:22:A4:7F:13:97:D8:DC:E5:73:4C:53:02:72:C9:65
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/7CqGNogipH8Tl9jc5XNMUwJyyWU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366DC11/8A879878967811EAA493725AF8AEA228/91B3C2A696FE11F1A55481EDCE1D38B0.roa
Signing time:             Thu 13 Aug 2026 10:05:54 +0000
ROA not before:           Thu 13 Aug 2026 10:05:49 +0000
ROA not after:            Wed 13 Aug 2036 10:05:49 +0000
asID:                     328638
IP address blocks:        102.141.64.0/19 maxlen: 24
                          102.207.180.0/22 maxlen: 24
                          102.216.104.0/22 maxlen: 24
                          102.221.220.0/22 maxlen: 24
                          154.65.112.0/20 maxlen: 24
                          196.6.112.0/21 maxlen: 24
                          2c0f:f0a0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366DC11/8A879878967811EAA493725AF8AEA228/7CqGNogipH8Tl9jc5XNMUwJyyWU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366DC11/8A879878967811EAA493725AF8AEA228/7CqGNogipH8Tl9jc5XNMUwJyyWU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/7CqGNogipH8Tl9jc5XNMUwJyyWU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Sep 2026 00:08:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2356 (0x934)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366DC11AF, serialNumber=EC2A86368822A47F1397D8DCE5734C530272C965
        Validity
            Not Before: Aug 13 10:05:49 2026 GMT
            Not After : Aug 13 10:05:49 2036 GMT
        Subject: CN=6a7d9702-1671
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:57:f3:33:fe:b7:7b:23:c1:a4:4e:92:46:07:
                    18:81:32:ec:3e:5d:41:ef:c6:e0:26:c6:51:70:a3:
                    9f:e6:a9:19:bb:6e:c3:03:3d:3d:b4:98:b5:c8:9d:
                    ee:97:fa:7c:cf:bf:12:b7:f8:8c:3b:b0:e5:5d:62:
                    76:70:92:63:41:93:0d:4e:dd:c9:79:a1:9f:69:d9:
                    10:06:df:66:5a:b8:31:fb:cd:7c:cb:82:e3:d7:21:
                    05:15:7d:06:81:a7:f3:0b:9d:47:71:33:ff:53:72:
                    d4:c1:a6:c8:39:6a:17:28:b0:0c:cd:8c:db:9d:be:
                    f4:e3:c5:4a:4d:0b:c6:50:68:4c:6c:18:0c:fa:7a:
                    17:5f:95:0a:a8:02:f1:80:e9:eb:17:e5:bc:22:02:
                    27:3f:f2:6c:72:ef:84:90:da:0c:69:04:b0:f0:93:
                    a5:7d:59:39:cd:62:78:9d:4a:b4:4e:14:ed:2a:87:
                    c4:b0:39:97:25:65:8c:eb:e1:b0:55:c5:26:71:4b:
                    ed:da:7b:df:1e:68:be:20:f0:02:5d:f4:74:fd:01:
                    c2:69:7e:08:ae:66:8c:22:5f:9b:99:31:a4:bb:1f:
                    d8:98:9c:6f:cf:b2:ba:e0:eb:2b:a1:ab:05:a1:da:
                    8b:60:c4:0a:61:4e:6e:44:e7:9f:51:89:94:93:3a:
                    53:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:40:5A:D9:C4:C1:96:F5:0D:4F:7F:2A:2E:E3:A9:47:5D:87:0F:98
            X509v3 Authority Key Identifier:
                keyid:EC:2A:86:36:88:22:A4:7F:13:97:D8:DC:E5:73:4C:53:02:72:C9:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366DC11/8A879878967811EAA493725AF8AEA228/7CqGNogipH8Tl9jc5XNMUwJyyWU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/7CqGNogipH8Tl9jc5XNMUwJyyWU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366DC11/8A879878967811EAA493725AF8AEA228/91B3C2A696FE11F1A55481EDCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.141.64.0/19
                  102.207.180.0/22
                  102.216.104.0/22
                  102.221.220.0/22
                  154.65.112.0/20
                  196.6.112.0/21
                IPv6:
                  2c0f:f0a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         95:4e:6d:b1:70:6f:51:86:f1:27:43:72:6d:90:d3:d0:b0:75:
         3f:0e:79:e2:37:d7:e6:31:e3:a3:c7:5a:5d:26:b7:56:bb:33:
         78:ad:1d:a9:cb:5e:5f:70:fe:71:45:11:17:07:e6:2a:e7:a3:
         91:91:9f:cc:a4:c1:e4:01:4f:1b:09:d2:85:14:8f:54:09:75:
         a0:91:26:bd:08:0c:53:0b:66:b1:13:4f:3c:0c:09:b1:84:ae:
         53:fa:83:56:7d:c7:c4:1d:01:4f:a9:60:6f:2c:ee:42:c1:5b:
         c8:ba:88:6a:29:66:31:2a:e5:9e:06:cf:7e:bb:d1:0b:95:6d:
         7b:87:20:15:a3:71:ee:88:3d:b3:3b:47:21:cc:78:01:5a:55:
         d4:7a:36:d8:f4:4d:5a:e0:1c:51:0e:88:94:10:cd:7b:ee:d0:
         41:8c:fd:e8:52:a8:05:2e:24:6e:63:d2:bd:c5:16:63:f7:02:
         ca:34:bd:ae:f6:69:d4:ad:10:a3:c6:e5:a5:67:5d:92:9e:d6:
         1f:d9:02:72:e4:7e:26:d4:8a:80:0c:f8:5d:6a:37:cf:e4:d9:
         b8:18:b8:ec:6c:6e:e5:dc:bf:63:ea:eb:fc:eb:d3:95:64:a6:
         57:2f:51:92:b2:3a:01:a9:88:bd:e2:a6:46:87:17:f7:85:67:
         a0:48:63:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----