Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/FA106DA2CEB411F193F23CEECE1D38B0.roa
File:                     FA106DA2CEB411F193F23CEECE1D38B0.roa (raw, json)
Hash identifier:          bh4M2a3WK1cU0ES/YQrALod1xNY6cLwGTpWGgCPCt4Q=
Subject key identifier:   CA:45:AB:78:F6:E5:AE:E4:C5:0C:21:D3:F4:EB:88:DF:CF:78:12:2E
Certificate issuer:       /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial:       132E
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/FA106DA2CEB411F193F23CEECE1D38B0.roa
Signing time:             Fri 23 Oct 2026 07:40:11 +0000
ROA not before:           Fri 23 Oct 2026 07:40:06 +0000
ROA not after:            Sun 31 Oct 2027 07:40:06 +0000
asID:                     199899
IP address blocks:        102.135.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 02:37:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4910 (0x132e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
        Validity
            Not Before: Oct 23 07:40:06 2026 GMT
            Not After : Oct 31 07:40:06 2027 GMT
        Subject: CN=6adb0f5b-df94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:42:be:9f:20:42:6e:5f:33:ee:1c:44:b1:b1:
                    4d:9c:38:b7:82:cc:1b:84:c1:81:9b:9d:ae:f3:9d:
                    7d:3d:c2:8b:60:c1:57:dd:47:4f:19:34:88:00:82:
                    43:80:4b:ef:ee:b4:10:a3:6f:21:9b:e1:bd:13:7c:
                    24:5d:ff:62:1b:89:d3:4d:b2:1b:fb:f8:10:ac:a6:
                    bd:99:97:43:70:c5:af:45:14:a4:fb:57:37:2d:95:
                    f1:37:3f:07:3d:9a:18:26:f7:dd:41:fd:31:55:ba:
                    06:f3:4e:37:d4:37:f4:58:73:5e:e9:68:e9:5f:7b:
                    2a:6e:c8:bc:15:df:c6:09:dc:91:74:8b:b9:e8:51:
                    66:48:59:d6:15:ad:93:a4:8c:7f:22:37:08:be:48:
                    dd:df:4a:1a:a6:7c:ae:c4:5b:bc:40:70:98:c2:85:
                    ce:0e:7a:c7:ff:94:22:30:ed:47:b8:63:2d:1d:7b:
                    ed:2a:4b:2e:ad:34:7d:5b:85:11:1a:7a:dc:17:62:
                    6b:30:9f:7f:e1:6b:27:67:8d:0b:23:c8:41:e4:60:
                    83:3f:ab:52:ff:1f:2f:0f:5b:66:ab:3b:b9:28:02:
                    f5:89:79:7c:00:14:ba:7a:c5:5a:8a:34:7b:58:c2:
                    9e:e0:10:19:52:8a:07:7b:fa:2e:1e:13:27:4a:c3:
                    95:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:45:AB:78:F6:E5:AE:E4:C5:0C:21:D3:F4:EB:88:DF:CF:78:12:2E
            X509v3 Authority Key Identifier:
                keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/FA106DA2CEB411F193F23CEECE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.135.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bc:48:c7:64:9e:ff:af:92:a8:64:5e:5c:75:4f:55:83:e7:07:
         cf:d0:f5:e9:cb:e4:28:cc:04:0b:02:ce:bd:c9:19:06:4c:bf:
         29:a4:5a:28:f3:eb:24:1b:1f:d7:6d:aa:56:f0:15:1b:3c:94:
         18:63:79:c2:4b:16:1d:84:61:d9:0b:ad:b3:97:38:f5:ee:0e:
         6a:d8:5c:eb:71:08:78:55:bd:89:c5:ed:f3:9d:7b:c0:0f:f6:
         f9:fa:1b:6e:c0:7e:d3:08:e7:3a:90:c7:94:fc:70:e5:50:76:
         60:bc:44:29:39:01:c6:17:24:aa:d8:91:1c:3c:90:85:10:e2:
         ee:11:c9:4f:e0:96:60:67:b0:fd:77:f8:51:53:6d:f0:6d:e1:
         f2:18:1c:4b:db:75:1a:d2:13:96:a7:6f:bf:93:ca:fc:51:df:
         d4:34:c9:c0:80:48:2b:41:65:32:3a:88:91:ca:96:9d:20:d5:
         2f:c4:ec:03:50:75:58:ac:ca:aa:2a:6b:f2:e8:59:f2:57:ae:
         ad:fb:9a:5d:a8:ff:2a:d0:3c:ba:24:06:e9:8a:43:f8:c5:51:
         a7:7d:90:4c:cf:44:3b:00:23:ed:f6:a3:c9:d3:8b:93:2e:b0:
         49:41:65:62:4a:e2:ed:44:25:80:bb:ed:af:eb:4a:fd:36:9a:
         fc:e5:f5:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----