Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/93E14E6693C211F1BD9442D5CE1D38B0.roa
File:                     93E14E6693C211F1BD9442D5CE1D38B0.roa (raw, json)
Hash identifier:          QpAOxKy2196bmeEGDbNad8DLpTp6TFWr6Dm1uLwcMeg=
Subject key identifier:   0F:41:06:DE:5B:FC:23:7C:2B:B1:DA:6D:F9:8B:6B:4C:56:F7:0F:7E
Certificate issuer:       /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial:       1283
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/93E14E6693C211F1BD9442D5CE1D38B0.roa
Signing time:             Sun 09 Aug 2026 07:18:54 +0000
ROA not before:           Sun 09 Aug 2026 07:18:50 +0000
ROA not after:            Sat 14 Aug 2027 07:18:50 +0000
asID:                     401362
IP address blocks:        196.251.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 05 Sep 2026 00:07:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4739 (0x1283)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
        Validity
            Not Before: Aug  9 07:18:50 2026 GMT
            Not After : Aug 14 07:18:50 2027 GMT
        Subject: CN=6a7829de-ba30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:07:f0:eb:f0:7d:67:01:36:3e:88:a8:3f:22:
                    b9:84:c1:46:55:2d:4b:00:ba:c4:bf:2f:1e:ff:72:
                    ee:d0:28:50:e8:6d:d7:3e:9e:8c:76:0d:d2:f7:20:
                    f7:ea:18:2c:77:ec:4b:ea:a2:85:f8:2a:f3:f6:7d:
                    ce:4a:f9:04:5d:2e:81:77:e9:d5:b9:3e:5e:82:49:
                    b3:00:15:a3:70:f0:56:da:2f:6e:30:05:26:b2:e3:
                    7b:e1:c7:09:8e:e4:47:03:21:7a:d8:8a:37:63:0c:
                    f4:5a:86:cd:41:68:79:7f:db:dc:f4:39:36:2a:14:
                    a7:88:81:ca:22:a0:40:33:5c:80:b3:8c:51:9b:39:
                    85:cf:ca:da:0a:9c:53:62:18:90:cf:6f:4f:5a:0a:
                    0d:14:71:58:b7:3f:e6:62:ee:a6:fa:f1:6a:5c:95:
                    fe:44:29:a3:41:3d:09:60:82:4e:e7:74:04:73:02:
                    0b:72:a8:21:88:0f:d9:ab:08:0a:23:93:25:bf:16:
                    34:03:93:12:24:2a:27:58:71:59:39:d3:36:9d:72:
                    d9:34:33:ee:a8:01:8a:0f:67:8b:e0:44:fe:62:29:
                    f6:42:d9:2b:80:af:e5:11:82:91:fa:3e:e7:74:59:
                    29:ba:ad:14:3d:c1:e7:ba:38:62:d6:46:3a:b7:11:
                    c1:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:41:06:DE:5B:FC:23:7C:2B:B1:DA:6D:F9:8B:6B:4C:56:F7:0F:7E
            X509v3 Authority Key Identifier:
                keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/93E14E6693C211F1BD9442D5CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.251.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:d8:c2:94:85:89:b7:f9:e6:46:8c:1c:cc:ba:a9:9a:38:5e:
         43:71:90:78:d2:e9:83:c2:d6:51:92:ac:87:f3:7b:92:f1:2f:
         21:8e:1a:24:a5:26:9c:13:b1:4a:9e:14:95:0f:d6:3b:7c:44:
         17:be:53:81:7b:5d:d5:9a:d4:d2:47:f2:f2:dc:b9:38:64:f7:
         ef:2d:f2:01:ca:ad:62:ad:b7:55:1d:f1:41:b6:61:b1:09:56:
         b9:b4:68:c8:74:bb:91:f5:8b:3d:52:67:85:63:1e:0a:2d:a5:
         10:47:2c:26:7f:5b:e7:2b:88:76:64:40:6b:bc:50:ca:3d:40:
         05:37:b1:d7:8d:dd:78:3f:98:c5:91:9c:e3:4c:54:bd:6e:0c:
         14:8f:02:ff:18:fc:0e:22:08:1b:aa:81:f4:e1:69:27:d7:13:
         02:36:16:1e:5d:37:c9:33:4d:3d:ea:d6:88:00:cc:9a:ca:2a:
         a9:d7:11:7d:88:98:4a:c5:e0:51:4d:fe:fc:d6:4b:ab:ce:fa:
         9e:6b:f5:ff:85:69:81:1c:5b:14:e9:6b:df:d8:3f:7d:b9:e5:
         05:95:64:84:2b:94:cb:6e:99:d2:93:fd:63:6e:1b:2d:bf:55:
         d5:8b:60:7c:38:22:71:19:89:fb:37:eb:d2:e3:fc:b7:aa:f8:
         8a:eb:15:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----