Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/67132E049FA711F191E10FA8CE1D38B0.roa
File:                     67132E049FA711F191E10FA8CE1D38B0.roa (raw, json)
Hash identifier:          0q2htVGiwJGq6n+0n+CKEBhu5oWAHOist6kF9WcpFv8=
Subject key identifier:   4D:EB:25:1C:6D:07:B4:E9:11:95:03:34:38:3B:15:69:63:57:18:FE
Certificate issuer:       /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial:       12A0
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/67132E049FA711F191E10FA8CE1D38B0.roa
Signing time:             Mon 24 Aug 2026 10:34:37 +0000
ROA not before:           Mon 24 Aug 2026 10:34:32 +0000
ROA not after:            Tue 31 Aug 2027 10:34:32 +0000
asID:                     401362
IP address blocks:        102.135.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 05 Sep 2026 00:07:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4768 (0x12a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
        Validity
            Not Before: Aug 24 10:34:32 2026 GMT
            Not After : Aug 31 10:34:32 2027 GMT
        Subject: CN=6a8c1e3c-393e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d7:0d:99:b4:47:a9:45:34:a9:0e:8f:2d:5f:
                    4c:f2:b3:1b:bd:b6:43:80:07:66:49:8b:28:a4:88:
                    16:03:16:d2:39:01:2a:26:e1:fc:10:ad:97:28:f0:
                    49:64:1f:9a:25:ab:c7:a9:f2:8a:c5:f4:eb:18:f5:
                    51:38:dd:fb:61:31:e2:f4:46:c2:1e:ec:3b:f8:68:
                    39:fc:d8:88:e7:54:78:8c:2b:76:b2:f5:a7:dd:b2:
                    29:80:d3:04:fa:74:18:01:3e:af:77:94:3f:26:b8:
                    81:cc:7a:1c:73:ef:59:77:a5:02:62:82:1e:e9:28:
                    bc:96:2a:d8:8b:73:33:7c:18:71:30:e5:23:34:4c:
                    06:be:74:de:18:7f:e2:de:26:a7:57:62:9b:83:11:
                    6f:b2:14:a1:7c:86:67:b6:8c:7a:57:4a:4f:c4:8d:
                    bd:ac:d0:dd:27:6b:72:7a:51:85:18:ca:61:02:7e:
                    a2:c9:e3:b5:dc:97:7e:8c:3e:0a:22:5a:cd:99:47:
                    f8:98:d1:6e:a5:88:29:af:05:6f:5a:33:3e:b1:d1:
                    25:4d:75:09:dd:93:56:b8:f6:52:5f:ee:fb:06:e2:
                    13:4f:d0:d6:96:fb:8a:af:3c:2e:82:d4:32:82:21:
                    29:5b:2f:3e:4c:5d:e3:2d:fe:cf:c9:38:ff:0f:42:
                    d0:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:EB:25:1C:6D:07:B4:E9:11:95:03:34:38:3B:15:69:63:57:18:FE
            X509v3 Authority Key Identifier:
                keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/67132E049FA711F191E10FA8CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.135.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:7e:20:1b:a6:4e:51:6a:a7:c5:90:6c:2b:70:1f:b5:3b:06:
         69:0f:15:d5:f4:53:77:a4:bb:94:d6:f6:22:7c:25:7c:ba:c5:
         cb:34:77:70:da:1d:a6:dc:0c:61:3b:ca:d8:cf:44:a2:a7:da:
         4d:41:4c:2b:9e:78:c7:65:fd:8a:cf:63:99:4d:5e:f5:54:9b:
         4d:7b:e3:50:c3:4f:2e:08:4b:fe:48:5a:8d:6d:26:74:7c:e0:
         31:6b:bc:94:cc:b8:a2:2b:fc:89:78:d8:37:5f:76:40:bc:80:
         81:da:df:b5:25:0e:e6:9c:e6:21:fb:d6:6a:a6:3e:83:2e:71:
         e5:ca:e0:45:10:13:95:8a:b4:e4:6b:47:82:a4:62:9e:58:6e:
         24:a0:9a:86:70:08:84:31:ad:a1:62:0f:43:a6:90:62:c3:8b:
         23:bb:8e:c4:05:65:81:7c:06:f7:34:c1:3e:1b:fa:a0:ee:5c:
         17:5e:fa:cd:6b:a0:80:8a:aa:1a:86:06:6b:c9:dc:8f:c4:d6:
         18:32:87:96:05:78:dc:cf:30:c2:e0:84:43:d9:82:31:79:25:
         ab:b8:f2:bc:41:d3:cc:bf:70:aa:af:ae:9d:f2:fc:99:0f:aa:
         fb:0c:4a:87:e9:54:66:4e:7a:2e:4b:c6:7f:b1:cf:8f:ba:48:
         36:87:37:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----