Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36FFA34/0E4561A0D1FE11F190E8CFD8CE1D38B0/3153BC66D21F11F198CB55AECE1D38B0.roa
File:                     3153BC66D21F11F198CB55AECE1D38B0.roa (raw, json)
Hash identifier:          IClC6Pi+UNFvJvucpCy+pmNEfoPI+fosGUTa2wXa2vA=
Subject key identifier:   38:32:07:50:83:22:C1:2D:87:59:9D:31:BC:B3:1A:AC:D4:08:65:90
Certificate issuer:       /CN=F36FFA34AF/serialNumber=4725EF0FFC9B05FC02AC311CADC3A9B52E6F16A7
Certificate serial:       03
Authority key identifier: 47:25:EF:0F:FC:9B:05:FC:02:AC:31:1C:AD:C3:A9:B5:2E:6F:16:A7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/RyXvD_ybBfwCrDEcrcOptS5vFqc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FFA34/0E4561A0D1FE11F190E8CFD8CE1D38B0/3153BC66D21F11F198CB55AECE1D38B0.roa
Signing time:             Tue 27 Oct 2026 15:58:04 +0000
ROA not before:           Tue 27 Oct 2026 15:57:59 +0000
ROA not after:            Mon 27 Oct 2036 15:57:59 +0000
asID:                     37267
IP address blocks:        196.43.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FFA34/0E4561A0D1FE11F190E8CFD8CE1D38B0/RyXvD_ybBfwCrDEcrcOptS5vFqc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FFA34/0E4561A0D1FE11F190E8CFD8CE1D38B0/RyXvD_ybBfwCrDEcrcOptS5vFqc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/RyXvD_ybBfwCrDEcrcOptS5vFqc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 06 Nov 2026 06:06:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FFA34AF, serialNumber=4725EF0FFC9B05FC02AC311CADC3A9B52E6F16A7
        Validity
            Not Before: Oct 27 15:57:59 2026 GMT
            Not After : Oct 27 15:57:59 2036 GMT
        Subject: CN=6ae0ca0c-bfc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:1b:c3:b1:ba:95:91:fc:f2:51:c4:ec:4b:4b:
                    26:14:af:a0:f5:2c:c1:38:c4:71:43:13:41:e7:0b:
                    04:03:a0:ed:55:5b:0c:d6:38:37:f8:f3:34:54:28:
                    b2:a3:1f:97:bb:7a:fb:37:a7:1c:14:79:1c:06:13:
                    3e:24:ef:46:9c:64:49:79:60:da:1c:9a:cf:d3:e5:
                    03:a6:b9:7a:27:b8:6f:87:b9:28:3a:c8:97:b4:81:
                    01:f4:0e:7b:7f:c9:75:d8:58:dc:69:1a:73:53:6d:
                    bb:09:9e:69:fe:c2:c5:5c:6b:16:0e:aa:c3:f4:30:
                    aa:b7:5d:25:10:7f:1f:4b:91:0a:02:b5:3d:12:24:
                    78:a6:ae:55:da:c4:54:07:f5:5e:86:e9:f1:09:ae:
                    71:67:99:85:59:06:df:d2:c4:59:4a:80:18:6f:8b:
                    70:48:cc:b2:4c:41:8e:5a:96:8b:99:fc:40:57:7a:
                    31:68:45:e0:5d:b6:1d:10:61:7d:91:4d:38:23:40:
                    a3:91:ea:2e:03:68:06:95:cb:8f:55:d9:ee:05:5f:
                    8c:08:e2:39:e7:b2:12:31:30:d8:de:36:3c:9c:6f:
                    a9:41:a5:36:34:89:ff:f8:79:47:ee:4f:5d:25:4d:
                    79:d5:7d:b4:1d:a9:52:5e:ef:da:d0:82:2f:19:90:
                    24:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:32:07:50:83:22:C1:2D:87:59:9D:31:BC:B3:1A:AC:D4:08:65:90
            X509v3 Authority Key Identifier:
                keyid:47:25:EF:0F:FC:9B:05:FC:02:AC:31:1C:AD:C3:A9:B5:2E:6F:16:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FFA34/0E4561A0D1FE11F190E8CFD8CE1D38B0/RyXvD_ybBfwCrDEcrcOptS5vFqc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/RyXvD_ybBfwCrDEcrcOptS5vFqc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FFA34/0E4561A0D1FE11F190E8CFD8CE1D38B0/3153BC66D21F11F198CB55AECE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.43.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:6c:01:3d:a6:1e:9d:ad:0e:98:55:f1:b5:4f:16:36:f0:5c:
         5d:4e:fa:12:46:9a:0b:71:4e:a0:91:9c:15:35:e2:43:c8:42:
         33:04:b7:9e:93:20:25:fe:f6:08:15:34:68:58:86:3a:db:ff:
         33:15:4d:68:ae:3c:d3:65:f0:d8:3c:97:7d:75:61:8d:a5:ac:
         89:93:e6:85:de:f8:d6:94:e3:38:4e:58:7c:51:33:4d:b8:af:
         b2:e6:7c:d7:10:f3:c0:da:20:d1:0e:98:37:da:00:da:1d:d7:
         b4:03:3d:d2:00:0c:b6:4d:81:30:db:de:85:27:2e:73:2f:24:
         42:f2:d4:e9:05:9b:d8:41:08:62:f6:9c:30:61:f6:96:48:89:
         c3:6a:88:4f:bf:a1:51:39:32:71:28:b1:60:74:1f:09:28:0f:
         22:73:9b:42:aa:ac:36:5e:a4:b3:10:5b:00:97:92:6e:fa:04:
         ff:bc:e4:b1:28:7b:b5:fc:69:14:28:68:bd:f1:80:ab:bc:d3:
         f4:e2:3f:ee:3a:74:97:88:12:32:01:11:1f:88:3f:a9:7b:a0:
         4c:b3:03:f5:2c:d7:ed:24:f4:a6:7d:46:8e:d1:02:0b:3b:1f:
         45:a5:30:4d:ab:f2:cd:fb:b7:ad:71:3b:6f:3b:75:22:5e:93:
         bd:7b:4f:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----