Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/D75969E0CEB311F1842622E7CE1D38B0.roa
File:                     D75969E0CEB311F1842622E7CE1D38B0.roa (raw, json)
Hash identifier:          a1Bs3AwITAjTiC/eQmdgCbnQo44EaMKUXLvnLPr6Lro=
Subject key identifier:   9D:38:F8:7F:0F:CB:DB:92:EC:42:A4:E7:15:22:05:0C:66:B7:ED:6E
Certificate issuer:       /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial:       131A
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/D75969E0CEB311F1842622E7CE1D38B0.roa
Signing time:             Fri 23 Oct 2026 07:32:03 +0000
ROA not before:           Fri 23 Oct 2026 07:31:58 +0000
ROA not after:            Sun 31 Oct 2027 07:31:58 +0000
asID:                     199899
IP address blocks:        196.251.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 00:08:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4890 (0x131a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
        Validity
            Not Before: Oct 23 07:31:58 2026 GMT
            Not After : Oct 31 07:31:58 2027 GMT
        Subject: CN=6adb0d73-6d4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:aa:b0:68:5e:42:6f:8d:d7:98:b6:38:11:6d:
                    85:af:b4:9e:6b:47:14:00:a4:bb:3a:fe:6e:6a:5d:
                    e5:e0:97:94:1c:36:3d:ee:81:1d:aa:a9:52:0a:b6:
                    1c:28:77:3f:0d:7d:b2:50:f4:b8:03:84:28:30:37:
                    a5:c3:14:6d:b7:3a:a7:27:46:67:28:2e:74:93:fc:
                    e1:22:27:92:b4:83:9c:62:21:73:5b:a6:d4:d5:09:
                    4b:d7:46:a6:e2:64:6d:6b:dd:42:dc:a0:a0:13:06:
                    96:33:2d:78:f8:58:9e:58:22:22:d4:d7:0b:6e:7c:
                    39:dc:7d:69:56:8b:94:1f:c7:26:23:06:67:08:fa:
                    0e:18:23:9b:6a:54:1e:7c:38:c1:f5:c3:dc:f6:06:
                    62:55:74:fc:5a:0a:ed:10:bf:3d:c0:45:8f:f8:2f:
                    44:0e:23:ae:54:61:6b:4e:c2:d8:b2:04:d0:60:1a:
                    5f:ea:9f:0e:1b:dc:90:34:e3:e2:a7:ed:b0:5e:f3:
                    68:2a:89:42:b0:e7:e0:b1:7f:b4:f8:fb:33:f9:ae:
                    a1:67:3c:2c:86:3c:dc:1e:a8:8c:76:a2:4e:bc:f8:
                    12:37:d8:60:be:2f:f4:89:b9:0b:aa:f2:ea:54:3b:
                    78:98:1d:72:2d:1e:2b:c2:ed:fb:bc:bf:8f:59:54:
                    96:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:38:F8:7F:0F:CB:DB:92:EC:42:A4:E7:15:22:05:0C:66:B7:ED:6E
            X509v3 Authority Key Identifier:
                keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/D75969E0CEB311F1842622E7CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.251.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:2d:91:90:b6:47:6e:e4:78:05:a3:b2:5e:af:8b:2b:74:d3:
         24:ab:4d:e4:5c:23:e8:4e:ef:c7:e9:78:db:a0:11:fd:e9:56:
         f5:f7:8b:90:62:13:39:61:72:26:98:00:ff:4c:06:b1:fa:6d:
         e2:82:e0:04:cc:79:d1:8b:66:47:8c:1f:8c:5b:83:93:5c:4a:
         e4:09:ff:43:27:9f:e7:ce:a6:81:dd:88:f4:b9:62:a1:32:01:
         80:f2:d4:25:be:54:33:fb:b8:df:bb:56:ef:41:ef:7a:b5:f2:
         5b:da:c2:32:c1:e8:f2:de:6f:02:b9:89:cc:db:dc:b7:e4:cf:
         bc:88:42:9b:b0:f2:7d:7e:85:71:30:25:44:ee:d5:f3:88:5a:
         b5:1b:2a:1a:e9:03:21:ac:87:76:57:1d:f4:57:28:28:7a:2e:
         17:87:67:82:92:50:5c:8c:5c:c7:63:3b:46:bf:0f:72:03:ae:
         42:61:a3:d6:d5:c8:d5:d7:f2:7c:d0:46:f9:e9:0e:ea:0e:48:
         72:29:1e:3f:a6:fa:7e:8b:93:54:7d:a2:22:8e:3c:3f:f7:4c:
         60:c2:26:1d:39:c0:a1:5f:ae:7d:82:bd:26:a5:14:bb:16:13:
         14:ed:36:3c:0b:d8:28:5b:3a:b8:33:67:4d:dc:8d:0c:f8:0c:
         a5:99:56:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----