Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3635607/08C590D2850111F1AB43C5F3CE1D38B0/0FEF5952BDA411F1A13FF8B8CE1D38B0.roa
File:                     0FEF5952BDA411F1A13FF8B8CE1D38B0.roa (raw, json)
Hash identifier:          g5H4xmrRNscDs0rzrTRoHXKecnAQ+8G6+qeZiVx74CM=
Subject key identifier:   C4:8A:AE:18:79:CA:BF:CC:93:FB:63:2A:FB:91:5C:F2:BD:D1:D9:91
Certificate issuer:       /CN=F3635607AF/serialNumber=BD5E8BACFC46684D4DEAA68A230DAE4185589DAD
Certificate serial:       5C
Authority key identifier: BD:5E:8B:AC:FC:46:68:4D:4D:EA:A6:8A:23:0D:AE:41:85:58:9D:AD
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/vV6LrPxGaE1N6qaKIw2uQYVYna0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3635607/08C590D2850111F1AB43C5F3CE1D38B0/0FEF5952BDA411F1A13FF8B8CE1D38B0.roa
Signing time:             Thu 01 Oct 2026 14:26:17 +0000
ROA not before:           Thu 01 Oct 2026 14:26:13 +0000
ROA not after:            Wed 31 Dec 2036 14:26:13 +0000
asID:                     14618
IP address blocks:        102.201.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3635607/08C590D2850111F1AB43C5F3CE1D38B0/vV6LrPxGaE1N6qaKIw2uQYVYna0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3635607/08C590D2850111F1AB43C5F3CE1D38B0/vV6LrPxGaE1N6qaKIw2uQYVYna0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/vV6LrPxGaE1N6qaKIw2uQYVYna0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 07 Oct 2026 05:46:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 92 (0x5c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3635607AF, serialNumber=BD5E8BACFC46684D4DEAA68A230DAE4185589DAD
        Validity
            Not Before: Oct  1 14:26:13 2026 GMT
            Not After : Dec 31 14:26:13 2036 GMT
        Subject: CN=6abe6d89-8e5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:88:f7:2c:ef:6b:1f:1e:50:ff:de:54:54:73:
                    84:d2:17:81:e3:3d:0e:d2:31:98:e1:f9:4e:8e:5a:
                    8a:f8:ea:14:be:fd:d3:af:51:84:4b:e9:c2:5a:c0:
                    5b:fb:fd:93:0d:16:81:05:d8:83:39:c2:32:c3:06:
                    8b:20:67:41:3e:12:58:09:a1:43:b5:4a:c4:79:3a:
                    66:ed:b9:57:1e:09:ca:ab:75:e7:92:6a:9c:e0:ed:
                    69:c3:6e:41:75:d3:75:0e:52:06:7c:10:cf:8a:50:
                    9c:2c:09:ea:89:17:68:7b:b8:cc:39:c5:11:21:20:
                    d5:8f:da:c8:24:29:f2:b7:77:5a:3e:c4:33:eb:41:
                    5a:54:83:27:d0:3e:91:6b:c0:47:d1:f3:04:0a:b4:
                    2e:13:fa:e8:fc:a7:6b:9f:13:31:29:97:18:33:44:
                    b8:d9:14:db:84:45:36:c2:1a:52:ef:51:72:01:d2:
                    e4:5a:df:d4:6b:0f:19:b4:fe:54:57:92:03:e7:ba:
                    94:55:29:9e:ee:96:36:e3:92:ea:45:2e:26:1c:90:
                    ec:34:63:d6:47:d5:bb:7a:56:e9:41:3a:a2:93:ab:
                    b8:d7:cf:8b:dd:27:1f:b1:b3:6a:43:ec:7a:38:f3:
                    80:31:a6:d7:49:7b:6d:99:0a:85:bd:a9:94:13:72:
                    44:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:8A:AE:18:79:CA:BF:CC:93:FB:63:2A:FB:91:5C:F2:BD:D1:D9:91
            X509v3 Authority Key Identifier:
                keyid:BD:5E:8B:AC:FC:46:68:4D:4D:EA:A6:8A:23:0D:AE:41:85:58:9D:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3635607/08C590D2850111F1AB43C5F3CE1D38B0/vV6LrPxGaE1N6qaKIw2uQYVYna0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/vV6LrPxGaE1N6qaKIw2uQYVYna0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3635607/08C590D2850111F1AB43C5F3CE1D38B0/0FEF5952BDA411F1A13FF8B8CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.201.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         dd:53:99:77:ec:a6:8f:26:20:94:19:75:15:11:58:a9:58:1b:
         2d:2b:90:ee:ec:c0:6e:e1:19:99:94:a9:40:87:47:45:cf:b1:
         90:50:a9:6e:91:ea:7b:1c:be:99:e5:23:50:78:4a:1c:a4:25:
         0c:40:0a:a6:06:28:57:32:98:96:ea:91:42:5d:19:f4:9f:94:
         2e:f7:36:fe:d3:d5:7a:1d:be:58:b7:f7:41:e4:eb:f9:91:67:
         36:56:56:fb:77:b5:88:ca:07:a7:98:fd:f2:c2:f8:84:93:41:
         c8:0c:f4:db:59:18:a0:7c:cb:68:b8:9a:98:4a:bf:37:a9:77:
         00:0c:04:0c:31:e1:e8:50:f9:01:9d:a7:e3:1a:c0:7c:45:85:
         94:ec:79:cc:38:cc:e2:6b:dd:b0:a6:48:3e:38:89:59:1d:88:
         17:7e:b9:ea:f1:c4:94:13:70:04:67:37:52:6a:99:6c:b9:ae:
         73:82:15:33:3f:28:bf:be:dd:ec:92:a1:d3:ea:04:d6:04:d6:
         ca:39:1f:df:f4:60:02:0a:5b:8b:85:45:f3:58:dd:cc:b8:3d:
         57:f7:ff:8b:06:bf:ff:a0:90:bb:9f:68:67:af:63:d2:cb:3c:
         1c:78:65:e2:26:bc:8a:69:07:23:3f:ca:93:70:2b:ea:2d:2c:
         17:47:c2:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----