Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/52FD5102CEB311F18B8BDBE4CE1D38B0.roa
File:                     52FD5102CEB311F18B8BDBE4CE1D38B0.roa (raw, json)
Hash identifier:          VtUzNXIrGdnlYkKio2RDeeQhi0HZ9IvJ36rA1VSeWOA=
Subject key identifier:   F9:48:2D:D2:4C:72:A2:E1:1C:22:DA:8B:7F:C9:6E:16:1E:5E:90:1E
Certificate issuer:       /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial:       1310
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/52FD5102CEB311F18B8BDBE4CE1D38B0.roa
Signing time:             Fri 23 Oct 2026 07:28:21 +0000
ROA not before:           Fri 23 Oct 2026 07:28:17 +0000
ROA not after:            Sun 31 Oct 2027 07:28:17 +0000
asID:                     199899
IP address blocks:        196.251.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 28 Oct 2026 02:37:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4880 (0x1310)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
        Validity
            Not Before: Oct 23 07:28:17 2026 GMT
            Not After : Oct 31 07:28:17 2027 GMT
        Subject: CN=6adb0c95-1be8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c1:69:0d:18:e7:8b:38:2f:00:d8:c8:d9:ae:
                    c6:48:8b:c4:d9:84:e4:8f:9b:46:6f:dc:ca:be:e2:
                    18:fd:a4:a9:c0:8d:bc:68:3c:f1:9b:70:38:91:ba:
                    8e:79:c6:d2:d5:53:67:be:61:c3:da:70:b1:ea:9b:
                    1f:a9:6a:5d:d9:7d:02:fb:80:3b:bf:8c:47:6f:3c:
                    4e:29:57:32:9f:08:30:9a:0b:16:68:7b:3b:57:a2:
                    e6:86:02:07:e7:31:a2:2c:cc:63:c8:1d:b7:d0:03:
                    79:00:f7:ec:8f:b7:b1:c2:6c:48:fb:0d:37:fc:35:
                    ff:c2:99:7a:72:49:96:61:e5:31:04:2e:f7:a2:3f:
                    f0:c2:5b:85:9f:05:f6:e3:ee:04:ee:83:04:14:6b:
                    49:5a:e3:95:60:cc:c5:e7:6c:54:89:e4:67:ea:c2:
                    5b:c5:93:44:b1:70:62:fa:af:4b:03:f3:04:c4:13:
                    5a:9b:87:a4:bd:89:a8:85:d1:a6:37:7b:b1:14:70:
                    94:28:b6:00:b3:5b:f3:9f:95:c5:2d:d3:0e:70:f6:
                    46:05:04:78:7b:43:c8:9f:0c:84:9d:19:ec:19:c2:
                    2e:43:85:d8:dc:db:9a:6a:9e:65:c2:da:19:f1:6b:
                    c9:c7:ae:a4:be:b4:dd:4a:e6:e1:1b:77:12:98:e9:
                    bc:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:48:2D:D2:4C:72:A2:E1:1C:22:DA:8B:7F:C9:6E:16:1E:5E:90:1E
            X509v3 Authority Key Identifier:
                keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/52FD5102CEB311F18B8BDBE4CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.251.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:13:40:a1:22:28:39:f9:42:69:39:ee:20:d5:15:25:c2:57:
         ee:b4:dd:58:99:0c:fc:5a:0f:61:52:cb:8b:03:dc:11:99:e6:
         0a:5a:cc:38:67:78:63:84:bb:aa:46:2f:ea:da:04:5f:a8:10:
         dc:0d:a6:92:8f:56:4e:8c:71:b7:d6:6b:b0:5c:c3:be:85:69:
         c5:93:c9:67:d7:5f:bf:71:9b:8b:25:90:e4:74:e4:1b:ee:73:
         db:15:98:1f:60:b8:f8:44:b6:d3:00:9d:2f:4f:f8:a0:69:a4:
         e0:69:7d:1d:07:57:92:14:9f:73:8d:aa:31:6b:b7:4d:5e:ff:
         65:e8:d4:f6:28:a7:2a:49:69:04:d5:cc:5f:9c:4a:72:7b:78:
         d2:f9:6c:4c:8b:34:a1:fd:91:6d:72:e1:da:88:33:f3:95:02:
         a5:60:40:9f:a5:08:2c:21:73:bf:76:e9:0e:46:fb:c1:47:f0:
         80:92:f3:04:52:71:7c:67:f3:61:25:05:01:21:c3:14:ee:5d:
         3e:33:7c:72:05:c6:51:bb:e9:95:22:55:88:fd:23:84:2c:49:
         54:43:53:d6:80:b7:ab:42:61:aa:9e:af:59:96:90:83:c7:fc:
         f5:a6:89:1d:f6:84:3c:9e:e8:f2:df:d0:cc:61:29:25:32:2a:
         46:c3:87:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----