Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F362F8BB/0C8F7542C18411F186C31A04CF1D38B0/C05D4446C18411F198CB8208CF1D38B0.roa
File:                     C05D4446C18411F198CB8208CF1D38B0.roa (raw, json)
Hash identifier:          RhoiysuAC6BH6iEDgC+r9WobQ8lzKQgiQJC9+UdUKDY=
Subject key identifier:   DD:94:56:CD:05:7C:3E:57:09:D8:29:7D:23:BA:77:BE:BA:F6:17:F5
Certificate issuer:       /CN=F362F8BBAF/serialNumber=55A9DC191F21342EF96D40EFF5E8D18AAAF5E10D
Certificate serial:       02
Authority key identifier: 55:A9:DC:19:1F:21:34:2E:F9:6D:40:EF:F5:E8:D1:8A:AA:F5:E1:0D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/VancGR8hNC75bUDv9ejRiqr14Q0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362F8BB/0C8F7542C18411F186C31A04CF1D38B0/C05D4446C18411F198CB8208CF1D38B0.roa
Signing time:             Tue 06 Oct 2026 12:52:14 +0000
ROA not before:           Tue 06 Oct 2026 12:52:09 +0000
ROA not after:            Wed 31 Dec 2036 12:52:09 +0000
asID:                     327845
IP address blocks:        196.10.215.0/24 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362F8BB/0C8F7542C18411F186C31A04CF1D38B0/VancGR8hNC75bUDv9ejRiqr14Q0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362F8BB/0C8F7542C18411F186C31A04CF1D38B0/VancGR8hNC75bUDv9ejRiqr14Q0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/VancGR8hNC75bUDv9ejRiqr14Q0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 00:08:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362F8BBAF, serialNumber=55A9DC191F21342EF96D40EFF5E8D18AAAF5E10D
        Validity
            Not Before: Oct  6 12:52:09 2026 GMT
            Not After : Dec 31 12:52:09 2036 GMT
        Subject: CN=6ac4eefd-07ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c9:45:7d:a5:32:23:ed:53:f0:6b:1f:7b:8f:
                    5a:30:e2:e5:17:9d:b2:66:19:9f:64:81:53:7f:94:
                    3a:2a:81:5d:d4:e0:4c:e8:ae:e7:3f:5d:92:8a:7a:
                    70:a7:a9:0b:32:8f:38:21:83:88:b5:bd:61:00:29:
                    24:e9:81:a0:c9:7d:38:8f:e7:5b:35:ba:56:c1:64:
                    39:c7:1c:c8:52:ef:f5:a8:5c:97:59:60:cc:9b:8d:
                    6c:dc:2d:1a:4a:6d:69:bd:5f:fa:75:f2:0d:82:ea:
                    61:98:fd:20:0f:7b:3a:89:40:ce:13:75:76:41:f9:
                    b2:1b:31:62:39:66:48:39:6f:52:08:00:40:dd:3e:
                    60:f5:a2:e5:93:57:14:1b:1d:7f:be:9b:d5:d1:23:
                    a4:37:b1:d0:fc:24:c7:2d:b7:b3:99:ee:cc:5d:9a:
                    b4:26:1c:7d:cc:24:56:0b:9d:54:d4:2b:42:9e:11:
                    87:a0:53:6a:60:e8:99:62:34:00:a3:8c:dd:e7:d1:
                    da:45:68:ac:b4:ab:dd:8c:26:f4:fc:92:26:fc:e8:
                    6a:1b:c0:c1:a4:ed:82:6e:9b:36:b0:f9:75:e8:fe:
                    18:85:76:f6:28:2f:d3:94:9d:09:f8:99:a3:91:ec:
                    32:10:c5:89:f8:af:39:c4:0e:25:9f:35:a3:ce:8b:
                    42:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:94:56:CD:05:7C:3E:57:09:D8:29:7D:23:BA:77:BE:BA:F6:17:F5
            X509v3 Authority Key Identifier:
                keyid:55:A9:DC:19:1F:21:34:2E:F9:6D:40:EF:F5:E8:D1:8A:AA:F5:E1:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362F8BB/0C8F7542C18411F186C31A04CF1D38B0/VancGR8hNC75bUDv9ejRiqr14Q0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/VancGR8hNC75bUDv9ejRiqr14Q0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362F8BB/0C8F7542C18411F186C31A04CF1D38B0/C05D4446C18411F198CB8208CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.10.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:cb:ed:09:f8:e3:dd:34:c3:b5:f3:a3:0e:95:ad:98:05:e5:
         b2:51:56:c8:f5:a3:d8:3c:02:14:3e:c2:a4:1e:2a:fa:49:22:
         cd:21:2f:5e:9c:48:d1:4f:01:27:74:ef:2d:83:2a:d6:47:8b:
         38:f8:26:c5:29:a3:b3:80:11:06:ed:3a:be:05:e0:3f:72:f7:
         51:ab:e4:1d:9a:ca:e5:e5:fd:22:63:3e:cb:61:06:44:07:f4:
         0e:43:c6:46:ed:fd:30:34:65:26:19:b5:75:43:aa:83:bc:d7:
         87:7d:e2:c8:af:5d:cc:68:66:fc:c7:f3:b6:17:3c:9e:ca:70:
         5a:32:84:0a:30:05:71:c7:0e:bf:67:91:fb:c6:2b:ac:92:d9:
         0a:9a:18:be:ee:83:82:9b:74:80:c5:58:cc:90:83:43:51:48:
         92:01:35:c2:a2:ac:e0:1c:a4:75:ce:ad:70:4e:97:e4:f4:65:
         da:0e:3f:eb:09:1c:39:9d:2f:be:cb:15:fb:5a:25:b8:13:90:
         c7:13:99:94:b5:89:00:77:3b:50:b9:87:db:72:d0:e2:af:88:
         d9:fe:a4:a1:0b:4d:f5:9e:fb:8c:7b:8c:12:58:b5:d8:99:34:
         a0:61:36:de:7c:a3:74:3a:4b:2f:45:10:7e:f7:55:51:2b:67:
         5a:01:ae:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----