Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3635607/08C590D2850111F1AB43C5F3CE1D38B0/AFF3E7C0BDA311F18696D5B6CE1D38B0.roa
File:                     AFF3E7C0BDA311F18696D5B6CE1D38B0.roa (raw, json)
Hash identifier:          m19tZpyXl+tnHFkUJpVqzzxYjyYaOACT2gDcycLq9N4=
Subject key identifier:   7B:B1:64:AF:4A:33:9E:DA:80:60:C2:DA:92:53:67:94:BF:94:19:C4
Certificate issuer:       /CN=F3635607AF/serialNumber=BD5E8BACFC46684D4DEAA68A230DAE4185589DAD
Certificate serial:       5A
Authority key identifier: BD:5E:8B:AC:FC:46:68:4D:4D:EA:A6:8A:23:0D:AE:41:85:58:9D:AD
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/vV6LrPxGaE1N6qaKIw2uQYVYna0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3635607/08C590D2850111F1AB43C5F3CE1D38B0/AFF3E7C0BDA311F18696D5B6CE1D38B0.roa
Signing time:             Thu 01 Oct 2026 14:23:36 +0000
ROA not before:           Thu 01 Oct 2026 14:23:32 +0000
ROA not after:            Wed 31 Dec 2036 14:23:32 +0000
asID:                     16509
IP address blocks:        102.201.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3635607/08C590D2850111F1AB43C5F3CE1D38B0/vV6LrPxGaE1N6qaKIw2uQYVYna0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3635607/08C590D2850111F1AB43C5F3CE1D38B0/vV6LrPxGaE1N6qaKIw2uQYVYna0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/vV6LrPxGaE1N6qaKIw2uQYVYna0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 09 Oct 2026 00:07:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 90 (0x5a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3635607AF, serialNumber=BD5E8BACFC46684D4DEAA68A230DAE4185589DAD
        Validity
            Not Before: Oct  1 14:23:32 2026 GMT
            Not After : Dec 31 14:23:32 2036 GMT
        Subject: CN=6abe6ce8-9ec2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:80:da:cb:d9:aa:20:1d:78:c9:a8:51:fe:bb:
                    9a:86:7b:06:ab:22:9d:54:1b:2f:98:16:b6:29:45:
                    8b:6b:29:87:0c:8d:61:e1:70:37:76:2a:a3:28:29:
                    57:09:56:17:b6:bb:25:ec:b4:63:bd:45:d8:e8:4b:
                    3d:34:4e:87:02:29:8d:1c:7d:82:24:04:b1:ae:f9:
                    73:a4:14:af:d0:60:87:aa:92:5b:a3:30:57:24:8f:
                    26:c0:f8:b9:8f:a1:95:eb:ff:7a:9a:be:41:2d:60:
                    4a:ab:c1:42:db:0e:af:c9:82:f5:95:fe:bd:cc:ae:
                    c1:4e:fd:d4:7d:b6:1c:bd:96:6e:af:18:f6:0a:0f:
                    c4:c8:94:5f:3f:4f:7c:44:c8:14:e2:4d:1a:10:bc:
                    75:58:03:4b:ea:b3:9c:49:59:65:73:2b:f4:3e:d6:
                    ac:9c:b0:ea:d5:19:19:c3:a2:78:e0:ec:47:ed:4e:
                    7a:c7:1d:ee:ab:a8:24:e0:7d:0a:8f:98:6d:e2:7e:
                    52:4a:f5:1c:5d:8d:96:02:22:99:bb:17:dc:c5:49:
                    27:60:56:2b:c7:ff:e7:25:6c:af:86:5f:99:e7:01:
                    8f:b9:79:3d:e2:bf:62:b9:06:26:2b:32:6b:4d:28:
                    bb:df:bb:92:88:3f:49:d8:48:55:81:81:13:8f:3a:
                    31:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:B1:64:AF:4A:33:9E:DA:80:60:C2:DA:92:53:67:94:BF:94:19:C4
            X509v3 Authority Key Identifier:
                keyid:BD:5E:8B:AC:FC:46:68:4D:4D:EA:A6:8A:23:0D:AE:41:85:58:9D:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3635607/08C590D2850111F1AB43C5F3CE1D38B0/vV6LrPxGaE1N6qaKIw2uQYVYna0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/vV6LrPxGaE1N6qaKIw2uQYVYna0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3635607/08C590D2850111F1AB43C5F3CE1D38B0/AFF3E7C0BDA311F18696D5B6CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.201.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:f4:3d:14:7e:9f:77:43:7f:fe:d7:61:88:12:de:c5:ca:66:
         67:cb:44:c5:4c:87:8d:52:2d:91:52:83:3f:26:c1:ec:03:f3:
         ba:b3:9f:3f:fc:df:5c:aa:f6:d5:96:f7:bf:de:09:78:28:8b:
         8d:0b:f9:5e:95:03:a3:d5:60:41:5d:af:aa:a2:3c:79:d9:20:
         dd:6b:4b:c0:cf:b4:45:f4:62:e6:6b:8d:0d:48:83:37:3e:e1:
         43:94:76:9e:01:fc:69:0f:9d:a5:79:87:2f:12:e5:38:fe:a8:
         fb:87:c2:a9:8f:10:83:66:f1:c0:31:0b:af:74:b0:a6:ff:71:
         36:a4:ed:62:0e:ff:af:60:58:00:c9:1c:71:3c:31:29:e1:1f:
         f9:4b:b6:2a:19:e5:b4:19:c3:c0:fd:ce:be:d9:b6:a2:1a:d2:
         d7:ec:9d:3d:6c:fe:bb:77:72:da:8f:85:0b:ab:7f:c3:80:34:
         3b:d2:2b:89:85:3f:7e:05:a6:8f:03:07:f2:7d:63:98:f7:f2:
         e3:5e:79:b9:dc:e8:ac:25:29:4e:2f:83:0b:35:95:ac:75:b2:
         c1:a9:7e:a7:f4:c5:76:b0:c7:0e:04:64:6c:9a:b9:1a:d7:00:
         99:3f:18:e2:00:05:75:29:9c:6e:a7:27:fd:1c:ec:5f:e7:27:
         10:59:ce:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----