Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/DCE6D6A8CEB411F1A5A8E9EDCE1D38B0.roa
File:                     DCE6D6A8CEB411F1A5A8E9EDCE1D38B0.roa (raw, json)
Hash identifier:          cmCyNRId8v66xYOrQx6PuybniXhGaTirN1Z9xSWd7RE=
Subject key identifier:   48:EE:FA:36:12:27:49:68:AA:F2:1B:1A:15:0C:15:C5:15:EA:8D:88
Certificate issuer:       /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial:       132A
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/DCE6D6A8CEB411F1A5A8E9EDCE1D38B0.roa
Signing time:             Fri 23 Oct 2026 07:39:22 +0000
ROA not before:           Fri 23 Oct 2026 07:39:18 +0000
ROA not after:            Sun 31 Oct 2027 07:39:18 +0000
asID:                     199899
IP address blocks:        102.135.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 28 Oct 2026 02:37:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4906 (0x132a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
        Validity
            Not Before: Oct 23 07:39:18 2026 GMT
            Not After : Oct 31 07:39:18 2027 GMT
        Subject: CN=6adb0f2a-0672
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:ec:70:c5:fa:28:6e:1c:9c:8e:e5:8c:46:88:
                    7a:cb:f3:62:64:60:76:b5:27:c9:44:c8:7b:d6:d9:
                    65:80:5b:36:74:c1:30:de:41:13:30:8d:ef:7a:60:
                    33:2a:1b:fd:ca:04:15:71:c2:71:5e:d0:4a:6d:19:
                    c9:b0:9b:35:b2:03:52:bd:68:54:fb:7f:da:3e:f0:
                    21:64:23:bd:85:62:c2:06:ed:d5:42:2b:1b:ec:37:
                    b9:a0:1d:74:c5:a5:86:27:60:1d:75:0e:e5:f5:73:
                    cb:69:78:35:70:91:a6:be:ec:70:9f:33:91:11:62:
                    5e:e7:b2:38:3f:27:43:a5:d7:0b:44:47:25:7e:b1:
                    b7:d0:66:3d:e6:d5:a2:58:bd:ed:a9:e0:67:77:b3:
                    83:3b:38:96:7c:0f:ab:db:6d:15:1b:a2:15:ff:64:
                    08:d9:5e:64:46:59:7b:42:d4:c2:51:5d:a0:7c:f9:
                    ed:60:a5:75:48:30:d9:1b:a7:db:1c:e6:cd:c7:f6:
                    5d:99:aa:77:f1:1c:1d:2e:ee:8d:bd:7b:2f:90:40:
                    b1:73:8d:94:83:fd:7c:63:e6:ef:44:a2:69:ec:78:
                    1c:09:dd:83:eb:12:00:7e:ee:d1:f3:d1:20:03:92:
                    f3:46:fd:2e:5f:4a:d4:14:83:53:a1:ec:6d:92:8c:
                    67:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:EE:FA:36:12:27:49:68:AA:F2:1B:1A:15:0C:15:C5:15:EA:8D:88
            X509v3 Authority Key Identifier:
                keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/DCE6D6A8CEB411F1A5A8E9EDCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.135.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:aa:43:bf:e8:75:c5:ce:f1:a3:6e:99:d1:29:26:f8:c8:a6:
         bf:5d:b9:43:2e:45:17:0e:9c:84:dd:02:cb:ff:7a:87:03:4b:
         7d:cc:a0:20:d5:75:25:64:c2:98:7a:e2:80:56:db:be:d3:f7:
         9d:74:0f:50:bc:2e:ba:c7:aa:de:9d:71:a1:9b:ff:7d:8a:ee:
         c3:57:dc:ff:94:b2:4f:e2:a4:9f:fa:3f:9e:85:a1:db:03:c4:
         6c:fb:75:88:27:5d:c2:ca:2b:ca:ad:89:91:f0:0f:a6:fe:6f:
         63:bc:49:fa:0d:f2:50:90:1c:34:ee:b5:83:7e:61:28:31:e4:
         8b:a9:d4:53:8e:3d:89:71:1b:59:fc:ca:77:05:f3:f5:22:61:
         3c:b8:92:cb:91:d8:ad:25:2f:38:5d:d4:4f:ba:74:73:be:99:
         be:61:0c:09:74:df:22:dc:cc:2b:b0:7c:c4:ce:e5:78:8a:9b:
         f5:63:fa:d9:de:fb:43:23:f4:51:93:e0:70:9e:cf:74:0e:40:
         73:4a:70:54:b5:3e:84:3c:ae:37:4f:9c:18:31:0f:94:df:21:
         64:a6:b4:02:10:81:33:81:73:82:00:f7:80:a7:03:56:32:b5:
         22:f5:77:8d:5f:dc:5c:0f:e6:5c:9a:54:88:bc:ae:1f:0a:cd:
         19:32:a2:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----