Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/9DA5A652CC7711F1A3E6610DCF1D38B0.roa
File:                     9DA5A652CC7711F1A3E6610DCF1D38B0.roa (raw, json)
Hash identifier:          /VBR626MbIujduz/rtO5xYzYXVT+sl77YW+MBr5SUyo=
Subject key identifier:   9B:E9:C2:30:4F:D9:F1:91:4C:98:E9:C5:E6:EC:27:B6:B3:8C:B4:85
Certificate issuer:       /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial:       1300
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/9DA5A652CC7711F1A3E6610DCF1D38B0.roa
Signing time:             Tue 20 Oct 2026 11:15:55 +0000
ROA not before:           Tue 20 Oct 2026 11:15:50 +0000
ROA not after:            Sun 31 Oct 2027 11:15:50 +0000
asID:                     210387
IP address blocks:        102.135.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 24 Oct 2026 12:02:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4864 (0x1300)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
        Validity
            Not Before: Oct 20 11:15:50 2026 GMT
            Not After : Oct 31 11:15:50 2027 GMT
        Subject: CN=6ad74d6b-6042
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:1e:4d:5b:1a:cf:d5:41:ec:0d:2b:8f:02:2c:
                    f6:51:01:6a:5e:d8:4c:cf:2a:42:4e:92:91:c6:3d:
                    3b:47:28:13:db:e9:d0:85:ff:bb:45:df:b8:ba:21:
                    72:eb:62:ae:2d:aa:6b:cc:62:bf:e3:42:f1:1c:ff:
                    d1:5c:0e:38:24:e4:e9:01:37:60:76:d6:6f:7f:19:
                    cd:47:be:fb:fa:e9:11:2c:a0:23:56:71:cd:8e:4c:
                    7f:94:4c:9c:a3:27:c8:63:68:10:4e:fe:d4:6c:3d:
                    4e:9f:56:cf:d1:ac:c6:46:27:4a:43:eb:b5:6d:03:
                    b6:cc:29:19:64:7a:9f:17:8a:a1:f2:d9:d7:de:c6:
                    e8:4c:20:1e:61:6e:5c:54:2d:58:71:99:df:cf:cd:
                    28:c4:5b:71:c9:bc:0e:51:16:30:37:3c:c3:6f:9a:
                    e3:a8:6c:44:72:77:c8:0a:ad:d2:89:5b:60:f2:b2:
                    55:7b:b0:a5:ec:53:89:af:04:0d:53:a7:fc:80:aa:
                    9a:8a:f0:2c:c2:7c:8f:07:ae:4e:65:ee:20:fb:fe:
                    7e:88:0f:ff:80:0d:98:1d:53:32:54:15:13:d3:40:
                    12:d4:45:aa:ae:d6:07:0a:08:1b:47:a4:52:16:1d:
                    2e:d1:f7:e5:4e:a9:e1:2f:02:ed:0e:a7:3a:ec:0a:
                    70:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:E9:C2:30:4F:D9:F1:91:4C:98:E9:C5:E6:EC:27:B6:B3:8C:B4:85
            X509v3 Authority Key Identifier:
                keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/9DA5A652CC7711F1A3E6610DCF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.135.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:bc:aa:50:35:4a:f8:d8:22:4e:5a:f8:ab:4f:d0:85:d8:ac:
         ab:75:84:fc:b4:99:1f:be:8c:92:18:e0:73:e6:52:39:aa:6e:
         d4:24:31:18:96:26:e9:df:12:ec:4f:e3:6c:1d:d8:05:fc:63:
         c9:9c:02:c9:da:24:ef:92:90:e6:e6:91:c7:8d:a5:93:58:64:
         28:6f:d3:3d:8c:f1:17:33:1f:82:33:55:6c:97:c2:a9:eb:07:
         d0:27:e1:e1:f9:f1:f8:fe:7f:75:87:96:9c:09:35:39:57:90:
         2d:ce:08:42:65:25:2f:5e:17:d0:73:9a:0f:f7:20:64:30:a7:
         67:64:9b:bd:26:73:66:f5:e0:00:4f:03:f3:f9:11:eb:00:cd:
         b0:79:f5:b5:90:45:71:2e:6c:21:a6:d0:25:7a:6e:e5:7a:15:
         3d:3d:c3:46:2c:3e:f4:a1:16:74:c5:41:80:78:31:25:f1:2d:
         74:9f:e4:f0:b2:45:35:80:fc:1e:8e:b4:f1:d3:ca:7e:6f:c2:
         dc:13:bf:76:04:59:ce:2c:37:8f:61:c4:dd:e3:33:7b:7a:01:
         4a:0c:c8:0b:3d:dc:df:64:16:22:83:ba:8b:57:73:cd:4d:8c:
         b3:1e:c5:22:39:ac:42:b2:0c:13:3b:4b:88:11:1a:f1:f2:e2:
         87:51:47:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----