Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/D9643CC6CC7711F1912F6E0FCF1D38B0.roa
File:                     D9643CC6CC7711F1912F6E0FCF1D38B0.roa (raw, json)
Hash identifier:          o3K+1i3+VOX+NxmT+71U31WGaNeSDVK4DV28BbSpmek=
Subject key identifier:   F4:C3:CA:5F:B0:D3:23:A5:FA:C1:1A:EF:15:C4:D1:5A:CA:0F:F0:E4
Certificate issuer:       /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial:       1306
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/D9643CC6CC7711F1912F6E0FCF1D38B0.roa
Signing time:             Tue 20 Oct 2026 11:17:35 +0000
ROA not before:           Tue 20 Oct 2026 11:17:31 +0000
ROA not after:            Sun 31 Oct 2027 11:17:31 +0000
asID:                     210387
IP address blocks:        196.251.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 26 Oct 2026 02:38:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4870 (0x1306)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
        Validity
            Not Before: Oct 20 11:17:31 2026 GMT
            Not After : Oct 31 11:17:31 2027 GMT
        Subject: CN=6ad74dcf-6958
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:59:98:f4:c0:6e:91:17:6e:db:00:22:27:47:
                    85:fd:90:6c:fd:ff:0b:ad:3d:fb:2d:4f:15:38:b9:
                    44:03:44:72:28:3a:2b:1e:dd:ed:87:ef:02:0f:d4:
                    9e:b7:41:9d:28:4f:e3:8b:df:9e:9d:01:e6:ff:98:
                    01:5a:3e:f2:12:b5:ee:51:f9:fd:a2:d2:a3:01:b8:
                    a4:82:e4:b9:f3:e4:83:0d:f1:b6:a4:1c:75:c6:e4:
                    e5:e9:dd:25:c2:7b:36:de:8f:e7:ef:68:ac:d2:be:
                    1c:15:5e:be:3e:53:d5:45:3b:a7:66:d6:e1:be:da:
                    de:83:24:9a:4d:32:eb:4d:ef:5f:1f:de:40:53:24:
                    a0:b6:b9:38:78:31:43:d3:7f:b1:c0:25:60:9f:4c:
                    72:f4:28:68:e7:f5:c1:b1:58:45:34:1e:49:a9:10:
                    05:88:82:53:7f:20:5a:04:0f:85:84:ac:55:9b:d8:
                    39:23:9e:84:ae:cb:b7:f2:21:a1:88:08:5f:0c:3c:
                    27:cd:17:b2:a2:51:91:cd:f8:af:05:66:f2:bf:8a:
                    d9:96:86:11:6c:3e:25:19:5b:51:0a:6c:69:33:63:
                    ab:31:4a:3b:26:6e:c7:ac:c2:75:89:bf:26:09:e5:
                    b5:b0:81:32:21:cc:ba:9b:61:3d:63:dd:f9:ea:13:
                    fb:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:C3:CA:5F:B0:D3:23:A5:FA:C1:1A:EF:15:C4:D1:5A:CA:0F:F0:E4
            X509v3 Authority Key Identifier:
                keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/D9643CC6CC7711F1912F6E0FCF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.251.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:37:8f:f2:61:5c:33:5a:55:3f:7f:ba:f9:c9:8c:1f:e3:61:
         76:e2:03:99:d1:f0:5f:fc:7b:6e:3d:37:d0:72:1d:79:f1:bb:
         d3:d0:15:d1:3f:26:dc:a7:87:ac:df:1d:31:68:ca:d2:26:8c:
         29:64:44:48:1a:42:21:f2:38:d2:1c:07:85:8c:50:4c:e1:8d:
         4e:cf:48:fa:a4:11:6d:b5:06:b2:96:bd:67:e8:20:2e:45:93:
         4a:ab:8b:ce:5a:ce:6c:a9:76:2e:ac:93:2e:96:fd:75:bf:3d:
         2d:33:4e:03:e5:46:30:e1:58:e2:36:d1:a7:b2:68:d4:03:b1:
         34:1d:f5:08:4a:24:85:cd:5b:cc:52:99:f0:f2:b3:fc:a0:f7:
         0a:ef:2c:0c:84:f4:c4:cd:0a:dd:da:e6:f7:fe:7d:fc:92:a4:
         3c:8e:2e:0d:5b:94:ef:f6:bf:27:4a:63:d6:0b:66:16:8f:51:
         1c:19:7c:ef:b0:7c:0c:0e:02:ce:ed:22:8b:4b:99:4b:53:55:
         79:d3:76:e8:a3:6e:41:d5:85:59:48:70:ad:e0:1c:7e:24:3a:
         1b:e1:f1:aa:16:f7:44:6f:2e:54:2e:18:8b:f7:e0:a3:75:c4:
         ae:60:e4:1f:1f:85:5e:80:02:8f:f8:d8:fe:83:ea:bb:4f:be:
         52:1e:a7:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----