Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/CD9C05F4CC7711F1AD464F0FCF1D38B0.roa
File:                     CD9C05F4CC7711F1AD464F0FCF1D38B0.roa (raw, json)
Hash identifier:          YoG1atwmeTSAvWkR3DGXRQ6TB28SQGa7BzfJlTKyYnM=
Subject key identifier:   61:A8:3B:FA:74:2E:05:BF:85:F3:48:E0:E7:98:A3:35:C6:60:BB:3C
Certificate issuer:       /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial:       1304
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/CD9C05F4CC7711F1AD464F0FCF1D38B0.roa
Signing time:             Tue 20 Oct 2026 11:17:15 +0000
ROA not before:           Tue 20 Oct 2026 11:17:11 +0000
ROA not after:            Sun 31 Oct 2027 11:17:11 +0000
asID:                     210387
IP address blocks:        196.251.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 24 Oct 2026 12:02:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4868 (0x1304)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
        Validity
            Not Before: Oct 20 11:17:11 2026 GMT
            Not After : Oct 31 11:17:11 2027 GMT
        Subject: CN=6ad74dbb-ec75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:f0:60:9e:4a:34:3c:28:a9:ca:6e:25:97:6f:
                    f9:01:01:27:41:30:f4:2e:e7:f4:25:88:53:d8:70:
                    49:35:d9:5a:44:f1:c1:b5:a0:ad:42:23:bb:d0:77:
                    0f:69:f9:5a:bf:0e:7a:d2:b6:61:22:f3:50:06:0b:
                    1f:27:1d:4a:01:3a:ff:99:a0:7e:06:72:fb:8a:88:
                    7d:6c:52:cb:00:5b:8e:e9:b7:1e:e9:63:3b:0d:96:
                    16:60:24:73:23:54:d3:77:81:1e:4d:fb:3a:3c:b1:
                    15:32:31:95:43:a6:b1:db:71:be:89:cc:14:ed:a7:
                    47:77:9a:3e:c3:71:aa:82:a4:bf:a8:f5:8a:b9:9c:
                    6d:46:f5:17:07:28:ed:4a:9d:12:33:2b:c0:4c:ec:
                    68:00:a0:6b:f4:a6:8c:31:3c:92:b1:76:90:b2:14:
                    09:e3:0b:fd:c8:0c:b3:63:52:48:1c:88:82:ea:0c:
                    64:e6:ef:00:2e:aa:62:d6:f5:9b:96:22:0f:cc:6a:
                    cc:dc:bf:ad:4f:47:bf:cd:58:c2:a3:3e:21:d7:3f:
                    e2:2e:ef:e0:5f:2d:30:38:82:57:b7:44:fa:4c:82:
                    96:e3:6c:d8:1e:9e:12:f6:60:52:2b:d5:bc:d3:d4:
                    6b:46:8f:5e:e3:4b:1f:0c:17:af:1c:2b:1a:3e:9f:
                    cf:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:A8:3B:FA:74:2E:05:BF:85:F3:48:E0:E7:98:A3:35:C6:60:BB:3C
            X509v3 Authority Key Identifier:
                keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/CD9C05F4CC7711F1AD464F0FCF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.251.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:13:34:5e:ad:50:ac:86:e0:eb:bc:f9:4f:62:0b:bd:6e:bb:
         78:16:64:41:56:99:db:00:a6:28:08:58:a6:38:5c:68:9b:fe:
         2b:91:83:67:38:f9:2b:b3:d3:45:4e:ad:15:de:c1:d3:fa:4c:
         a6:4a:d1:d5:44:fd:0f:e4:44:19:e3:3f:9a:e5:4f:e9:46:1c:
         36:c9:c5:c2:de:51:91:5d:3d:61:c7:c1:da:6b:7a:1e:96:be:
         e6:f5:c8:b4:ae:3b:60:ba:2f:d0:e0:89:aa:38:5b:2e:16:f5:
         15:c8:41:05:56:53:be:e4:e9:de:96:db:10:e2:42:f5:f0:38:
         74:ac:4d:25:9a:00:db:16:e9:a2:4d:99:00:b7:2c:1c:4f:41:
         d2:63:89:05:0b:9b:eb:b8:05:6c:da:38:16:32:a4:a9:23:2d:
         c0:98:96:00:e0:35:5f:5f:2a:e0:60:7e:b8:31:2a:58:37:c5:
         af:10:0c:1f:b8:c4:5e:95:6f:f2:71:ff:c7:f3:6e:18:f6:ea:
         46:ba:53:b2:e5:b6:28:8c:39:e0:60:cd:52:27:97:65:9c:14:
         24:7b:b1:f6:f8:39:42:67:bc:02:1c:49:5a:9f:fc:0a:d0:5e:
         08:b9:71:e6:40:f5:48:46:d5:88:63:c8:34:84:fd:6e:7c:df:
         6f:1c:86:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----