Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/8182AEA4CEB411F1809391EBCE1D38B0.roa
File:                     8182AEA4CEB411F1809391EBCE1D38B0.roa (raw, json)
Hash identifier:          VaIpTbDP2oTUBd89irmGeSoPpsXe1T7jE/TUpwxVD/U=
Subject key identifier:   33:AE:C5:2E:50:E6:6F:33:54:C3:13:5F:17:70:17:D6:81:E1:41:D4
Certificate issuer:       /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial:       1324
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/8182AEA4CEB411F1809391EBCE1D38B0.roa
Signing time:             Fri 23 Oct 2026 07:36:49 +0000
ROA not before:           Fri 23 Oct 2026 07:36:45 +0000
ROA not after:            Sun 31 Oct 2027 07:36:45 +0000
asID:                     199899
IP address blocks:        102.135.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 00:08:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4900 (0x1324)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
        Validity
            Not Before: Oct 23 07:36:45 2026 GMT
            Not After : Oct 31 07:36:45 2027 GMT
        Subject: CN=6adb0e91-6d47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:4d:d5:d1:c9:88:d0:fd:ab:f3:3d:4f:ac:c8:
                    58:e2:00:e1:90:7b:2d:fc:d7:dd:50:bb:b4:04:89:
                    3f:52:8f:2d:1b:73:86:02:a3:43:23:aa:82:c1:19:
                    0f:05:a3:16:7c:cb:be:2b:72:13:3e:6d:7c:f9:e2:
                    1d:b8:d0:31:cc:b6:05:ca:d2:0c:4c:14:db:2b:45:
                    b6:64:df:78:8a:84:b1:15:08:00:52:56:02:1b:97:
                    02:53:e1:12:b3:90:c6:ce:41:8d:9e:ef:05:51:58:
                    10:ad:0a:75:23:6c:df:e1:55:f3:93:6d:cd:c3:09:
                    ba:57:67:15:71:7b:11:e0:57:b9:c1:87:53:6a:54:
                    d4:20:79:56:ab:c7:35:d1:c7:64:a3:5d:09:66:a6:
                    74:96:54:39:bd:ce:ac:76:02:ed:75:9e:6e:79:f0:
                    0e:04:3b:c4:a0:2a:0c:0f:ea:bd:1c:e4:56:1d:6b:
                    a0:c7:32:35:e5:01:4d:44:07:28:f6:cd:db:bd:23:
                    9b:47:f3:4c:7a:a4:d1:8d:e3:ea:bb:23:9f:f5:7d:
                    52:12:34:b4:4f:ee:d9:c8:9c:b5:2e:82:98:2a:25:
                    26:3b:bd:6b:b0:27:23:66:78:a6:55:15:fa:c0:68:
                    39:62:02:ea:18:b6:dd:50:e5:2f:13:ec:82:05:d2:
                    ec:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:AE:C5:2E:50:E6:6F:33:54:C3:13:5F:17:70:17:D6:81:E1:41:D4
            X509v3 Authority Key Identifier:
                keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/8182AEA4CEB411F1809391EBCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.135.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c5:f6:f5:74:dc:65:73:70:f6:2b:de:da:5b:da:1f:38:db:3e:
         cc:fb:7a:71:51:00:51:fe:79:ab:8b:ec:c9:0e:85:53:44:54:
         df:61:26:65:53:7d:6b:88:5d:6e:8a:03:8f:d7:97:0a:7f:bd:
         f1:5f:c2:9f:0e:c2:43:a5:49:15:41:65:12:ed:1f:9b:a8:2d:
         33:a8:12:81:b8:a8:19:a8:ce:e1:a9:e5:e6:82:80:02:6d:54:
         9d:c2:fb:29:3e:c4:24:0d:c6:35:2f:c5:7d:82:05:bc:69:8f:
         d2:00:40:d2:9c:8a:aa:ac:86:8f:5a:6b:9b:48:44:28:28:4e:
         ec:9e:97:56:d1:8d:1d:c1:e1:3d:ce:61:3a:c2:c4:b1:f1:2a:
         1c:36:61:aa:b3:a4:1e:a8:2e:dc:0f:12:12:2a:2f:a1:b8:e5:
         46:3a:49:cf:80:11:2d:c1:f6:3b:d7:b2:3f:47:f9:2a:6f:19:
         d8:ff:15:4c:b6:25:4c:ee:83:8f:f1:8e:84:84:06:a9:cb:f4:
         63:9d:7e:a4:65:24:f4:93:27:97:db:99:58:15:56:12:65:5f:
         8b:fc:5f:b0:2c:56:6d:38:29:52:1b:b9:d4:97:6b:ca:76:c3:
         e2:47:62:7f:1f:a7:f0:b0:f6:76:e9:85:ac:08:55:4a:42:26:
         24:8f:12:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----