Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/CBD1989ECEB411F1A755E0EDCE1D38B0.roa
File:                     CBD1989ECEB411F1A755E0EDCE1D38B0.roa (raw, json)
Hash identifier:          K7TYrqW0yMDh8ZnSsFlb4YaceUkSnJBTi//Ye+kKj90=
Subject key identifier:   10:A4:64:B9:86:A1:AA:9C:5B:03:0C:BC:6F:4B:C7:8E:0B:EA:8C:63
Certificate issuer:       /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial:       1328
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/CBD1989ECEB411F1A755E0EDCE1D38B0.roa
Signing time:             Fri 23 Oct 2026 07:38:54 +0000
ROA not before:           Fri 23 Oct 2026 07:38:49 +0000
ROA not after:            Sun 31 Oct 2027 07:38:49 +0000
asID:                     199899
IP address blocks:        102.135.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 00:08:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4904 (0x1328)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
        Validity
            Not Before: Oct 23 07:38:49 2026 GMT
            Not After : Oct 31 07:38:49 2027 GMT
        Subject: CN=6adb0f0e-9956
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:16:43:c2:c2:ed:ba:2e:2c:89:67:f1:1e:ff:
                    4f:d7:58:1e:9d:08:6c:32:c2:2b:d8:b3:f8:dc:7a:
                    d0:4b:37:2f:d0:31:ea:39:98:30:e2:69:f8:80:64:
                    4a:0d:12:2a:ce:b4:0e:a5:62:58:59:db:2c:cc:b9:
                    57:d6:1f:12:66:d0:c5:9f:71:10:a6:8d:a8:71:a4:
                    60:9d:64:fd:b2:be:e5:cb:e0:f2:ba:5a:89:c9:40:
                    6b:f3:3e:10:bf:dc:5b:ad:3d:2f:73:d2:cb:7d:66:
                    ce:42:48:2e:f5:ce:e5:ec:b4:c8:a6:71:3f:1e:f5:
                    76:16:9d:e7:5f:59:f6:ce:d8:e7:bb:3b:45:0b:2a:
                    ba:d1:03:29:6d:a6:98:54:89:7f:d6:9b:32:a0:3c:
                    e4:6b:3a:80:5d:30:08:8e:a1:31:49:02:6f:3e:2d:
                    cb:48:db:5b:d4:8d:49:c5:cb:1d:2a:f1:44:3e:19:
                    63:0d:aa:3d:ec:08:0a:5d:11:ef:ec:db:2b:22:e6:
                    85:70:e1:6a:77:dc:ff:60:83:15:29:b9:5d:bc:73:
                    a7:1e:d1:6c:76:a8:2e:cf:e2:72:79:95:0d:de:c7:
                    0b:45:00:cb:10:b4:0a:fd:b7:61:42:d8:a6:76:9f:
                    28:7e:28:48:80:c5:fd:ea:41:be:fe:4f:a2:05:da:
                    c2:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:A4:64:B9:86:A1:AA:9C:5B:03:0C:BC:6F:4B:C7:8E:0B:EA:8C:63
            X509v3 Authority Key Identifier:
                keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/CBD1989ECEB411F1A755E0EDCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.135.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:e8:ea:09:20:f2:13:39:cf:5f:ef:26:ae:40:f2:70:2c:b0:
         41:82:5a:d0:45:62:66:93:dd:77:ac:78:0f:27:71:26:63:8f:
         e7:b2:2b:32:d4:5b:12:c8:5c:de:ad:95:63:58:2e:90:b4:85:
         e1:bd:1f:0a:15:96:eb:15:8c:81:9c:54:68:e2:54:e5:45:fe:
         7c:a6:fd:68:d5:33:74:bf:70:99:88:d2:41:51:da:55:60:98:
         d8:7b:ab:22:f3:0d:8b:7e:0c:8a:c7:cb:36:c9:83:33:54:89:
         b8:31:6a:5d:2b:4f:92:fe:c2:3e:9c:d8:08:5e:6d:88:10:f0:
         d2:0a:21:94:ed:06:09:ae:c8:39:42:22:92:f8:a8:68:0c:8e:
         32:18:ec:4a:5c:26:e0:b2:39:51:e8:50:26:ec:f6:8e:f0:4b:
         e7:ae:84:24:a3:77:64:4a:ed:ce:01:35:f7:d7:a0:29:67:a2:
         93:e4:8b:72:6e:c9:04:ad:51:0c:8b:cd:8e:dc:41:ea:46:52:
         52:95:9d:6c:d4:f5:8b:6e:60:56:5b:2b:f3:00:f1:f8:06:a0:
         d3:73:d9:32:f8:65:6f:79:55:d4:94:c7:9b:fb:88:42:d4:db:
         f2:12:87:81:76:e5:0a:c6:8e:5b:b5:32:d2:36:b0:cd:da:88:
         a8:91:d7:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----