Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/8FDC1BC6CEB311F1B0DB18E5CE1D38B0.roa
File:                     8FDC1BC6CEB311F1B0DB18E5CE1D38B0.roa (raw, json)
Hash identifier:          inBw1wg50QTY2fha2nExmva2U5vR4Z1NcdBmdZoKU5Y=
Subject key identifier:   2E:FD:3D:5B:60:09:B3:0C:8D:E6:C2:4A:D4:88:54:75:1A:52:8E:7B
Certificate issuer:       /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial:       1316
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/8FDC1BC6CEB311F1B0DB18E5CE1D38B0.roa
Signing time:             Fri 23 Oct 2026 07:30:04 +0000
ROA not before:           Fri 23 Oct 2026 07:30:00 +0000
ROA not after:            Sun 31 Oct 2027 07:30:00 +0000
asID:                     199899
IP address blocks:        196.251.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 02:37:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4886 (0x1316)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
        Validity
            Not Before: Oct 23 07:30:00 2026 GMT
            Not After : Oct 31 07:30:00 2027 GMT
        Subject: CN=6adb0cfb-8ba9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:9a:20:15:ad:7d:aa:40:5f:f2:9f:94:aa:80:
                    0d:ac:b2:b6:67:2e:fa:f3:2a:97:5a:d5:de:b0:d4:
                    81:c2:ff:5b:dd:58:48:9f:4f:cd:6d:76:69:2c:7e:
                    4f:5d:09:f0:26:f1:c0:99:6d:1b:c5:55:e4:e2:21:
                    dd:d0:d3:5f:fd:2b:2e:1e:bd:7b:c5:1a:07:10:c0:
                    51:00:d9:c0:14:1a:ae:f6:fb:6c:29:00:66:89:43:
                    e4:d3:21:e3:77:7b:91:68:b6:8e:81:ff:67:32:a1:
                    d8:09:f1:4b:dd:23:db:bd:fe:2f:02:3a:b7:66:db:
                    61:b2:6b:fb:1c:ef:d6:40:b2:f1:01:bc:7e:bd:28:
                    81:53:71:93:61:b3:16:93:10:50:e0:a0:4b:8a:31:
                    12:c9:d9:00:a4:d6:f9:08:cc:4a:85:ea:2b:be:96:
                    ea:8f:e9:80:95:05:38:ff:f4:a4:01:bd:2f:12:55:
                    7c:07:39:15:fd:76:f0:08:66:49:f5:03:ea:17:98:
                    ac:46:57:cd:3c:34:89:9d:cc:49:27:2a:61:2c:27:
                    10:c2:6b:74:4e:4d:e4:f4:cf:07:ae:0c:73:97:d7:
                    96:b6:ab:f6:8e:58:93:df:1c:82:f3:d2:10:c9:77:
                    0e:18:26:42:16:63:30:91:c3:1c:15:b2:57:ca:e8:
                    f9:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:FD:3D:5B:60:09:B3:0C:8D:E6:C2:4A:D4:88:54:75:1A:52:8E:7B
            X509v3 Authority Key Identifier:
                keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/8FDC1BC6CEB311F1B0DB18E5CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.251.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cc:5b:21:06:85:80:e9:da:01:ff:9e:28:2a:f2:08:0b:2c:d6:
         e4:b8:fa:4f:61:dd:70:67:9f:00:5f:3d:65:d1:4f:51:92:d1:
         ae:50:bc:53:0b:dc:b7:4e:7c:e3:87:24:89:7f:bf:aa:ad:ad:
         50:e5:e2:2e:c9:45:48:00:4c:48:1f:74:9a:b8:a7:f2:f1:0f:
         0b:18:b9:2f:fa:dd:dc:a9:10:f0:42:c6:a2:a8:b6:84:be:0b:
         e4:1c:9c:ac:db:6a:74:d2:18:05:db:ac:11:42:2c:e3:ca:b1:
         41:55:28:fe:37:dc:9a:67:4c:f3:f8:5b:85:55:84:85:20:9c:
         27:3f:6a:c3:7a:5d:42:f8:f0:15:01:a5:53:0c:6f:cb:b3:df:
         15:cd:e6:36:70:58:74:3e:b0:a7:c9:06:ee:c1:86:cd:e1:87:
         f3:33:8b:c9:fa:21:4d:40:9e:44:e9:ac:77:48:d5:63:3d:4d:
         ca:8a:62:19:44:d0:cd:ef:7b:cf:c4:15:cb:7f:35:ae:99:4f:
         f0:64:54:73:ff:8d:a5:20:fc:a0:8f:4c:12:ec:f8:8b:92:9a:
         51:a5:e0:6e:b1:d5:41:8a:47:2f:f3:d6:bb:75:2c:fd:fa:d8:
         28:16:de:3a:ca:0a:85:02:5f:60:91:9d:2a:35:6e:40:e7:2f:
         ca:c1:1e:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----