Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/213EE67CD13711F1B21DE4C7CE1D38B0.roa
File:                     213EE67CD13711F1B21DE4C7CE1D38B0.roa (raw, json)
Hash identifier:          7Kq/IcvAtyy8KSXLtM5FOx+FohTDfc2z18sp0tF/Prc=
Subject key identifier:   CA:59:61:E9:5A:DB:3F:F2:63:5B:D4:6F:79:5C:E8:FF:70:E0:80:04
Certificate issuer:       /CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
Certificate serial:       0905
Authority key identifier: 60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/213EE67CD13711F1B21DE4C7CE1D38B0.roa
Signing time:             Mon 26 Oct 2026 12:16:54 +0000
ROA not before:           Mon 26 Oct 2026 12:16:49 +0000
ROA not after:            Mon 28 Oct 2030 12:16:49 +0000
asID:                     211575
IP address blocks:        102.216.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 07 Nov 2026 00:08:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2309 (0x905)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3614659AF, serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
        Validity
            Not Before: Oct 26 12:16:49 2026 GMT
            Not After : Oct 28 12:16:49 2030 GMT
        Subject: CN=6adf44b6-8468
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:1b:6b:9d:80:6f:98:4c:84:70:47:aa:01:40:
                    3f:73:e1:d8:bd:4f:55:cc:5f:bb:27:d8:70:b6:e4:
                    50:dd:ba:73:ea:bb:c0:c6:17:3f:22:83:52:d0:12:
                    4d:f2:1b:4a:cc:2f:a7:b6:e4:6f:a8:49:8e:a8:da:
                    95:f7:43:e3:a9:4c:fb:58:5c:b6:65:47:f7:b9:19:
                    e4:c3:7c:53:4d:ec:45:a9:4e:8d:9f:cd:b5:1f:e2:
                    da:56:ec:f5:ae:50:e2:ea:c8:35:d0:8c:cf:aa:8f:
                    4c:ed:44:91:cb:85:e7:0a:f4:70:83:5c:85:6d:e2:
                    40:5e:98:9f:16:77:67:98:cf:d5:b5:ab:9a:cb:e0:
                    6f:f5:63:22:fa:cb:e6:53:8c:e3:b6:48:70:5e:0d:
                    44:46:84:cc:98:b9:91:00:ba:a7:84:3e:e0:3f:26:
                    83:75:43:85:4b:1f:75:87:7e:30:bd:18:f9:bc:a5:
                    e3:19:d6:27:93:58:d1:02:f0:f6:4d:98:49:01:2b:
                    15:8b:b3:48:83:ef:d4:cb:a2:b1:27:66:3d:91:38:
                    49:76:6b:ae:98:df:2c:a0:3d:c4:41:74:92:46:55:
                    8f:03:dd:36:23:16:ba:68:50:a5:c4:a0:b3:fd:84:
                    a3:0d:32:3d:ec:25:fa:b9:69:1f:92:c6:13:1b:91:
                    84:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:59:61:E9:5A:DB:3F:F2:63:5B:D4:6F:79:5C:E8:FF:70:E0:80:04
            X509v3 Authority Key Identifier:
                keyid:60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/213EE67CD13711F1B21DE4C7CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.216.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:3b:73:9f:d2:2d:c2:de:06:6b:db:be:1a:6e:f3:98:83:00:
         71:6d:1b:b6:11:27:a7:02:17:36:48:f0:9c:4e:b5:59:5b:77:
         b9:6b:9b:39:f0:ad:5c:e6:c1:df:0e:e5:6c:02:2e:da:91:ef:
         ac:a9:aa:37:c2:49:96:73:d1:10:b9:b7:a3:ce:f0:ba:20:bd:
         63:40:60:06:a6:f1:9d:16:cd:3d:39:51:fc:ff:c6:41:4f:02:
         93:82:53:3a:d7:84:0e:68:ad:94:eb:e6:d8:8b:ba:db:28:bf:
         e4:62:17:23:2a:52:f7:e2:f8:07:a5:b1:02:47:3e:2b:a5:41:
         f2:b8:fe:6b:47:aa:4b:97:1d:bd:62:80:b4:12:f0:8b:d7:d2:
         a2:9f:f0:46:65:39:5b:90:f0:6e:6c:67:7c:48:0b:7b:3b:d6:
         69:cf:1b:15:47:41:96:22:3a:75:c9:ac:d6:3f:44:c9:4b:91:
         c0:05:65:eb:af:4f:7e:32:38:bd:eb:10:32:9f:da:ae:59:ce:
         78:b2:87:d0:25:fa:49:8a:8a:a6:1c:e4:83:c6:0e:8d:05:31:
         4d:a5:b9:16:69:e9:da:83:3c:a9:fc:e2:a4:29:e9:41:39:69:
         08:ef:aa:58:1d:f7:f4:1d:d3:d3:29:e5:ff:1a:04:7c:ac:33:
         5a:ef:8f:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----