Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3629FF7/EE6FA52ECD3511F1BD542AEBCE1D38B0/E167F496CDF111F19EC52DBACE1D38B0.roa
File:                     E167F496CDF111F19EC52DBACE1D38B0.roa (raw, json)
Hash identifier:          8TQAquVGuqFSedAEvxh2gTQnx5WloxSe6RIvcG/K2d4=
Subject key identifier:   F6:CA:19:81:0D:9A:46:89:86:C1:6B:2B:B7:AC:18:68:9F:AA:C0:38
Certificate issuer:       /CN=F3629FF7AF/serialNumber=4F6FA28C68ED3B94F7F1F4BFF5351DADDE2FA629
Certificate serial:       1A
Authority key identifier: 4F:6F:A2:8C:68:ED:3B:94:F7:F1:F4:BF:F5:35:1D:AD:DE:2F:A6:29
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/T2-ijGjtO5T38fS_9TUdrd4vpik.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3629FF7/EE6FA52ECD3511F1BD542AEBCE1D38B0/E167F496CDF111F19EC52DBACE1D38B0.roa
Signing time:             Thu 22 Oct 2026 08:23:38 +0000
ROA not before:           Thu 22 Oct 2026 08:23:33 +0000
ROA not after:            Mon 22 Oct 2029 08:23:33 +0000
asID:                     37055
IP address blocks:        197.157.242.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3629FF7/EE6FA52ECD3511F1BD542AEBCE1D38B0/T2-ijGjtO5T38fS_9TUdrd4vpik.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3629FF7/EE6FA52ECD3511F1BD542AEBCE1D38B0/T2-ijGjtO5T38fS_9TUdrd4vpik.mft
                          rsync://rpki.afrinic.net/repository/afrinic/T2-ijGjtO5T38fS_9TUdrd4vpik.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Nov 2026 06:03:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 26 (0x1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3629FF7AF, serialNumber=4F6FA28C68ED3B94F7F1F4BFF5351DADDE2FA629
        Validity
            Not Before: Oct 22 08:23:33 2026 GMT
            Not After : Oct 22 08:23:33 2029 GMT
        Subject: CN=6ad9c80a-ac9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:86:fc:e9:06:88:b0:b6:8f:55:18:9f:46:12:
                    b3:ce:f2:17:63:05:4e:23:01:a4:b6:1e:4e:33:44:
                    33:99:dd:6b:03:26:e5:63:52:14:1a:9c:a6:69:69:
                    3a:2c:bb:c4:3e:f4:b8:bd:58:17:aa:6c:8b:78:70:
                    67:ab:68:7e:ea:39:63:0b:7b:6f:a7:df:9e:40:57:
                    60:07:64:6a:d6:8b:06:32:e2:ed:98:ac:74:15:7f:
                    00:d9:64:78:43:52:bc:ec:cd:6e:16:8e:2a:cb:04:
                    40:1e:d3:29:1b:5c:1f:f6:4f:fc:4b:ef:d8:cc:a0:
                    be:c3:ad:ca:48:32:f2:41:9f:f5:b8:c0:5f:0b:27:
                    04:f6:a8:c8:11:5b:dd:4c:71:ad:ed:8c:ab:0b:5c:
                    ad:24:71:7f:4f:b7:57:6f:a3:ea:dc:23:1b:e7:1b:
                    0d:b5:69:8d:c3:b3:20:e5:1a:01:22:a3:5f:db:f5:
                    f8:7f:00:9c:68:b2:99:a2:28:34:e1:d6:ac:2f:6e:
                    f4:d3:be:0f:85:8a:19:fd:08:3b:27:f4:15:77:be:
                    c3:4a:96:92:b9:50:4f:2b:61:42:cd:94:34:9e:ee:
                    77:d3:b6:62:88:7a:c4:17:ff:09:16:be:cb:cf:37:
                    aa:05:ab:8c:d7:68:d5:05:88:f1:20:a4:b0:e9:da:
                    7a:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:CA:19:81:0D:9A:46:89:86:C1:6B:2B:B7:AC:18:68:9F:AA:C0:38
            X509v3 Authority Key Identifier:
                keyid:4F:6F:A2:8C:68:ED:3B:94:F7:F1:F4:BF:F5:35:1D:AD:DE:2F:A6:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3629FF7/EE6FA52ECD3511F1BD542AEBCE1D38B0/T2-ijGjtO5T38fS_9TUdrd4vpik.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/T2-ijGjtO5T38fS_9TUdrd4vpik.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3629FF7/EE6FA52ECD3511F1BD542AEBCE1D38B0/E167F496CDF111F19EC52DBACE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  197.157.242.0/23

    Signature Algorithm: sha256WithRSAEncryption
         64:71:f9:71:ff:8f:e6:1b:57:86:58:db:aa:0a:35:d6:ce:a2:
         d4:13:de:23:1d:73:9c:e1:e7:0f:07:78:52:74:1e:97:5a:fb:
         97:36:30:66:f9:16:ae:10:24:f4:a4:48:dc:59:6f:ee:0a:99:
         9c:71:e0:f8:2e:5a:25:56:97:31:f0:f7:fd:44:60:b1:70:3c:
         fa:35:6d:c3:88:7f:56:01:8b:ff:20:63:15:63:09:a9:d6:5b:
         23:fd:42:b4:7e:30:72:24:8a:19:76:2a:cc:a6:45:e7:84:97:
         43:27:25:77:eb:1b:3a:63:f3:f5:13:a4:af:a8:f2:bf:c5:9e:
         24:84:86:ba:4b:20:e9:d6:3a:97:2c:dc:7d:d0:cb:8b:a3:65:
         69:43:27:44:2e:1d:66:f1:a1:b6:98:76:20:a8:48:53:4f:4e:
         57:04:e0:a3:3b:52:27:a8:83:1c:fa:1a:d1:4c:1b:c8:86:c6:
         53:88:40:1b:92:c7:f1:82:94:62:3a:d2:6d:92:13:3f:71:1b:
         0c:0f:f8:16:94:4f:57:4c:a3:8b:37:b6:aa:06:a0:8c:84:7c:
         e3:5a:1f:53:9a:2b:bd:f6:25:59:37:c2:3c:f3:cb:70:be:0d:
         e8:ac:94:9e:0d:7a:b5:cd:53:98:79:7c:53:b4:3f:6e:26:87:
         68:64:4f:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----