Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3645EEF/87197ABEAC3611F18B3B8CB7CE1D38B0/EBEE85F2AC3A11F1A5732FD0CE1D38B0.roa
File:                     EBEE85F2AC3A11F1A5732FD0CE1D38B0.roa (raw, json)
Hash identifier:          QwlK+QN112m44lVk1uPEgi3OJcDWCvd/zy8bamKKzqY=
Subject key identifier:   32:96:EA:D1:15:A0:09:DA:1C:6A:C6:0D:DF:A5:E7:8B:8F:EF:89:5B
Certificate issuer:       /CN=F3645EEFAF/serialNumber=8157465EC871F677C5B97874ECA5792338A35924
Certificate serial:       0B
Authority key identifier: 81:57:46:5E:C8:71:F6:77:C5:B9:78:74:EC:A5:79:23:38:A3:59:24
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/gVdGXshx9nfFuXh07KV5IzijWSQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3645EEF/87197ABEAC3611F18B3B8CB7CE1D38B0/EBEE85F2AC3A11F1A5732FD0CE1D38B0.roa
Signing time:             Wed 09 Sep 2026 10:40:49 +0000
ROA not before:           Wed 09 Sep 2026 10:40:45 +0000
ROA not after:            Tue 30 Sep 2036 10:40:45 +0000
asID:                     37503
IP address blocks:        197.231.128.0/21 maxlen: 30
                          2c0f:f890::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3645EEF/87197ABEAC3611F18B3B8CB7CE1D38B0/gVdGXshx9nfFuXh07KV5IzijWSQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3645EEF/87197ABEAC3611F18B3B8CB7CE1D38B0/gVdGXshx9nfFuXh07KV5IzijWSQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/gVdGXshx9nfFuXh07KV5IzijWSQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 20 Sep 2026 00:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11 (0xb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3645EEFAF, serialNumber=8157465EC871F677C5B97874ECA5792338A35924
        Validity
            Not Before: Sep  9 10:40:45 2026 GMT
            Not After : Sep 30 10:40:45 2036 GMT
        Subject: CN=6aa137b1-e77b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:cd:3b:a1:22:0e:89:b5:a4:e8:35:2d:8f:69:
                    1c:ba:de:50:25:ab:80:f0:9d:3c:48:77:d3:48:e1:
                    33:15:94:1e:64:18:c2:34:14:21:70:b1:51:be:56:
                    17:d8:07:17:84:6e:31:9c:3d:63:a1:20:b6:e6:9a:
                    b4:14:4a:29:3c:42:c9:4f:ce:54:05:32:6a:52:02:
                    aa:32:a1:7f:fd:e6:76:aa:88:4c:1f:b2:5d:42:b1:
                    a4:d8:21:6e:63:eb:68:26:b9:40:d8:7e:b9:0f:ad:
                    22:08:3b:80:be:4f:47:a8:60:a0:e0:4f:37:8d:b8:
                    b1:c9:dc:aa:de:0f:d7:6d:f1:97:c3:81:66:8d:b1:
                    1c:b7:20:d4:b0:17:21:3c:05:dc:bc:25:6a:58:66:
                    52:c9:ba:c5:3c:b2:80:2f:df:61:64:15:3b:c4:e7:
                    73:1a:d4:0b:0f:70:f2:9b:99:b8:c8:c5:ee:e4:64:
                    e6:2b:ff:25:67:1c:2f:df:51:e1:7e:0d:2c:91:c3:
                    c6:24:2c:38:36:e6:ae:81:4b:f7:82:1b:9a:8a:b5:
                    b9:65:15:11:c4:be:2f:9b:81:59:f9:17:68:a2:8e:
                    22:0d:f3:38:49:39:d0:70:f8:e8:86:40:01:14:c7:
                    5a:b5:0d:fe:d2:38:68:a2:27:ed:62:e9:1a:f7:e2:
                    10:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:96:EA:D1:15:A0:09:DA:1C:6A:C6:0D:DF:A5:E7:8B:8F:EF:89:5B
            X509v3 Authority Key Identifier:
                keyid:81:57:46:5E:C8:71:F6:77:C5:B9:78:74:EC:A5:79:23:38:A3:59:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3645EEF/87197ABEAC3611F18B3B8CB7CE1D38B0/gVdGXshx9nfFuXh07KV5IzijWSQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gVdGXshx9nfFuXh07KV5IzijWSQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3645EEF/87197ABEAC3611F18B3B8CB7CE1D38B0/EBEE85F2AC3A11F1A5732FD0CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  197.231.128.0/21
                IPv6:
                  2c0f:f890::/32

    Signature Algorithm: sha256WithRSAEncryption
         8a:2c:b8:eb:7c:ec:05:4a:1d:68:08:9d:99:9b:0a:ac:3e:c6:
         8b:88:43:73:1a:2f:f1:b0:c0:0f:42:30:a2:d2:14:88:f3:51:
         21:26:b7:9d:a1:74:dd:64:1e:d0:51:35:b5:0a:40:8a:88:b7:
         59:81:00:54:be:09:34:c9:a6:f7:d8:6a:c7:28:0b:f1:bb:16:
         59:cb:ff:d8:69:1a:41:7a:a5:70:e0:1a:27:d4:2b:38:f5:5a:
         63:7c:a5:ce:ba:3c:a8:93:fe:a2:da:75:14:f7:e0:e5:f4:5a:
         03:e5:b7:46:10:97:4b:eb:fc:d3:b8:59:f8:0f:f6:b2:bc:fe:
         f1:9d:ba:17:d8:c3:8f:fb:a0:a2:f5:30:2c:dd:52:96:28:87:
         ae:99:12:70:46:b1:81:33:be:75:43:26:f5:3e:b4:ef:87:03:
         fd:14:0c:31:66:73:07:78:8b:e3:c9:7d:25:43:2c:c8:88:c1:
         66:1c:f2:b0:4c:31:a4:47:46:3e:e7:02:78:5d:cc:82:f9:86:
         46:6c:92:d7:50:b0:ba:20:a4:e0:4f:7b:da:ea:14:e9:ef:bd:
         ae:27:98:20:f0:ce:7d:dc:4b:4f:46:e6:d5:ce:e0:d7:96:78:
         a4:0e:94:88:dd:c9:58:d6:e6:95:5b:ed:52:72:11:83:01:cf:
         17:57:7c:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----