Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/ECC24E4ACEB411F186FCF1EDCE1D38B0.roa
File:                     ECC24E4ACEB411F186FCF1EDCE1D38B0.roa (raw, json)
Hash identifier:          HudjJ6K8ZtZafayNdUQwRnqevP+4VK7ODEIBR2Dvy6Y=
Subject key identifier:   44:D6:41:B2:B6:59:00:4F:AB:B2:0F:97:A0:96:72:B9:5A:53:19:89
Certificate issuer:       /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial:       132C
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/ECC24E4ACEB411F186FCF1EDCE1D38B0.roa
Signing time:             Fri 23 Oct 2026 07:39:49 +0000
ROA not before:           Fri 23 Oct 2026 07:39:45 +0000
ROA not after:            Sun 31 Oct 2027 07:39:45 +0000
asID:                     199899
IP address blocks:        102.135.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 02:37:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4908 (0x132c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
        Validity
            Not Before: Oct 23 07:39:45 2026 GMT
            Not After : Oct 31 07:39:45 2027 GMT
        Subject: CN=6adb0f45-bfaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:24:90:52:0d:2a:83:6f:22:ca:14:b0:79:85:
                    26:a2:6b:bf:0e:04:9d:67:cd:71:2a:2c:dd:78:30:
                    4d:0d:8d:f9:2a:f5:e3:1b:c4:88:2e:4c:af:ce:80:
                    1d:a2:6c:e0:3c:d4:9c:b2:a2:91:ca:5f:9c:a7:e9:
                    85:00:3d:aa:bf:d0:40:b3:5c:81:49:fd:6d:31:55:
                    07:3f:4c:6a:19:cb:a9:c8:56:be:87:aa:e0:15:79:
                    4c:20:f9:e3:77:25:57:72:9a:1c:24:c8:c5:c9:05:
                    a5:32:51:81:5e:35:56:fb:d4:b7:fa:47:f3:e8:54:
                    7e:35:a2:6a:5d:48:fc:3e:85:d2:62:9c:75:83:03:
                    38:20:30:08:37:06:71:57:16:9a:0b:df:59:cf:46:
                    d8:45:c0:79:fc:e6:dd:fb:91:3c:b1:c9:7d:ed:1d:
                    8e:51:e7:79:8c:75:a6:7f:90:ba:f2:61:bb:5a:c3:
                    a3:59:72:94:95:09:44:44:0d:6a:d4:4f:62:dc:e1:
                    fe:e3:9c:f3:45:35:44:d0:ae:08:42:e1:33:1b:2f:
                    67:c4:1f:0c:51:b9:ce:d4:15:7b:9a:54:96:8b:24:
                    d1:1b:10:4d:ff:46:99:eb:07:cc:92:40:ba:76:d6:
                    05:84:09:ff:a5:01:0f:65:12:9b:c7:dc:d5:90:2a:
                    01:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:D6:41:B2:B6:59:00:4F:AB:B2:0F:97:A0:96:72:B9:5A:53:19:89
            X509v3 Authority Key Identifier:
                keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/ECC24E4ACEB411F186FCF1EDCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.135.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b8:2e:2a:cc:7c:70:62:3a:b2:f8:c7:32:1a:7d:d9:68:a1:d7:
         dd:62:9b:64:0e:29:ea:74:ba:f9:2b:83:2c:c1:f4:1a:ce:94:
         09:d3:af:1a:6f:51:0e:a8:1f:c9:7d:0f:27:94:a6:90:0e:05:
         42:d3:89:62:b1:54:a2:56:e4:ce:d3:42:03:32:b2:25:d3:9d:
         1e:10:de:97:11:7f:ae:19:6e:ff:95:df:25:78:0a:03:67:66:
         5f:54:23:59:3b:fa:00:59:b3:c9:3e:6f:6a:20:82:de:8f:de:
         b2:33:fc:94:b1:e6:eb:5f:1d:59:ee:0e:32:05:2f:36:50:6e:
         ec:0f:2e:5a:00:24:60:38:29:a3:08:50:fb:3b:57:19:27:8f:
         53:27:c6:3e:26:2b:fd:f6:af:be:95:8f:e1:d7:84:c6:fe:6f:
         fe:80:c4:9b:a6:59:29:97:0f:a7:b7:27:8b:d8:0f:f3:87:79:
         a0:e3:97:d4:fb:23:1d:f2:1d:93:9d:fd:63:13:6c:8f:59:a3:
         b2:5b:d9:87:bd:17:d1:4c:b3:45:42:50:58:d6:2a:f2:68:b6:
         88:2d:b4:49:de:fb:e4:ca:ec:75:53:80:85:aa:ee:51:17:3a:
         21:d9:fe:b4:7d:34:af:ed:07:3a:cb:e4:a3:5b:83:5a:73:b6:
         98:6b:d5:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----