Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/6B3FD7B2CEB311F1A350F8E4CE1D38B0.roa
File:                     6B3FD7B2CEB311F1A350F8E4CE1D38B0.roa (raw, json)
Hash identifier:          n4TpXh2rVf0XNfkCtnx0JClTJ+vy8Q7th1icnceox5k=
Subject key identifier:   BE:D8:BD:45:5C:F1:D4:DC:7A:49:EF:4E:B8:1F:85:D4:EB:36:38:B2
Certificate issuer:       /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial:       1312
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/6B3FD7B2CEB311F1A350F8E4CE1D38B0.roa
Signing time:             Fri 23 Oct 2026 07:29:02 +0000
ROA not before:           Fri 23 Oct 2026 07:28:58 +0000
ROA not after:            Sun 31 Oct 2027 07:28:58 +0000
asID:                     199899
IP address blocks:        196.251.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 28 Oct 2026 02:37:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4882 (0x1312)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
        Validity
            Not Before: Oct 23 07:28:58 2026 GMT
            Not After : Oct 31 07:28:58 2027 GMT
        Subject: CN=6adb0cbe-06e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:d9:12:0b:80:ea:f6:01:ae:28:eb:e5:50:ce:
                    00:2e:d4:a0:d6:16:15:cd:c0:02:f7:e0:d5:c4:33:
                    7e:15:b1:6e:cb:c6:8f:e6:39:d2:04:b3:69:3a:9a:
                    5f:3a:3b:d0:23:88:06:a4:87:14:b8:3a:87:8f:30:
                    c1:c6:f1:3c:2e:b0:7d:85:de:ae:b5:03:2e:cd:89:
                    43:5a:6b:db:5c:ff:48:80:c9:7a:51:9f:43:82:03:
                    8a:dc:0b:90:b1:35:a4:f0:65:59:8f:7d:38:59:a2:
                    e1:cf:8b:ec:9f:bc:72:d4:d6:fb:91:76:79:84:49:
                    3b:a9:36:5e:e5:ee:a4:01:9e:8b:bb:6d:b1:c1:f7:
                    60:26:3b:b0:8e:e0:a0:0f:ab:34:54:81:09:50:f8:
                    58:e9:fa:ae:61:4f:89:b9:5b:51:e4:fd:c4:a3:57:
                    38:40:72:92:2e:7a:1a:c8:02:49:36:4b:e3:ef:6f:
                    c6:69:7b:d8:ba:69:48:f7:22:7d:00:fa:4b:6a:5b:
                    e8:09:8d:c7:2e:71:f3:b0:15:9b:08:21:52:2f:6d:
                    d5:05:73:d1:74:f9:70:a7:c5:24:08:81:e9:2a:e3:
                    7a:f9:9f:ff:a8:35:ca:cc:04:af:40:a9:dd:6e:ff:
                    a3:1f:51:17:7e:71:7b:10:50:69:b5:cb:7f:60:78:
                    f3:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:D8:BD:45:5C:F1:D4:DC:7A:49:EF:4E:B8:1F:85:D4:EB:36:38:B2
            X509v3 Authority Key Identifier:
                keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/6B3FD7B2CEB311F1A350F8E4CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.251.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:e9:98:8b:24:96:f2:ea:14:b8:43:01:11:a3:5a:ec:bd:a5:
         ae:a3:3a:5d:c3:d0:a6:76:3f:3f:b5:dc:f3:7a:c4:6d:41:73:
         f3:f6:5f:85:f5:0f:a0:94:69:8b:32:43:a9:1c:7d:c1:cb:9a:
         83:ef:15:3e:35:c7:88:b2:ef:06:35:bb:b1:d4:13:5a:ef:77:
         2c:62:42:41:04:55:af:34:0a:b8:dc:89:13:6b:e3:e1:9b:aa:
         7c:df:72:ca:f0:40:e5:16:d7:5b:20:46:7d:c4:d4:8d:eb:b6:
         5c:00:28:a6:4f:f0:a0:97:60:26:ea:e6:ff:8d:4b:7b:fd:09:
         81:d4:4d:90:4f:04:8e:79:87:27:28:ef:38:71:ea:45:af:87:
         c8:1a:0b:21:e4:4e:2d:8f:57:09:88:b6:34:64:59:55:20:fb:
         da:9b:0d:bf:6b:2b:8b:44:49:da:f1:cd:56:f4:60:8f:84:e3:
         42:83:d7:6c:2a:3a:dc:e5:60:10:60:e9:76:c0:7d:88:77:73:
         2d:bb:16:86:22:ac:35:44:6d:f1:a6:fa:e0:4d:ed:a7:a9:65:
         8f:a0:69:b8:e9:a7:58:34:8b:97:83:3d:ba:7e:74:d0:3c:4d:
         94:5d:de:a4:51:9a:7d:bb:d2:f4:bc:fe:07:20:34:ab:8b:1f:
         bd:37:ba:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----