Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F364C81D/33794D2E890E11E99A72D162F8AEA228/38C9E54AC96611F1934D6707CF1D38B0.roa
File:                     38C9E54AC96611F1934D6707CF1D38B0.roa (raw, json)
Hash identifier:          Ybx9UDCpAGxCaaCNTraiGUFElhYUsvaWsxK28fY65jM=
Subject key identifier:   F8:60:06:A6:BC:AF:02:F6:42:E6:F1:26:05:C3:E4:17:19:C7:C4:2E
Certificate issuer:       /CN=F364C81DAF/serialNumber=BCCE86D612D43F841AB0416EC5A884070F5CE5D6
Certificate serial:       0ADB
Authority key identifier: BC:CE:86:D6:12:D4:3F:84:1A:B0:41:6E:C5:A8:84:07:0F:5C:E5:D6
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/vM6G1hLUP4QasEFuxaiEBw9c5dY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364C81D/33794D2E890E11E99A72D162F8AEA228/38C9E54AC96611F1934D6707CF1D38B0.roa
Signing time:             Fri 16 Oct 2026 13:33:51 +0000
ROA not before:           Fri 16 Oct 2026 13:33:35 +0000
ROA not after:            Mon 01 Jan 2029 13:33:35 +0000
asID:                     327822
IP address blocks:        102.223.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364C81D/33794D2E890E11E99A72D162F8AEA228/vM6G1hLUP4QasEFuxaiEBw9c5dY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364C81D/33794D2E890E11E99A72D162F8AEA228/vM6G1hLUP4QasEFuxaiEBw9c5dY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/vM6G1hLUP4QasEFuxaiEBw9c5dY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 30 Oct 2026 01:27:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2779 (0xadb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364C81DAF, serialNumber=BCCE86D612D43F841AB0416EC5A884070F5CE5D6
        Validity
            Not Before: Oct 16 13:33:35 2026 GMT
            Not After : Jan  1 13:33:35 2029 GMT
        Subject: CN=6ad227be-4354
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:5f:e7:1f:da:7d:0d:69:b7:e0:9d:29:16:36:
                    a1:69:da:43:97:93:eb:3b:56:85:c0:45:4b:b6:7e:
                    73:46:f5:4e:31:c7:14:12:64:cd:9b:a4:69:b3:d2:
                    d6:b0:06:cf:41:c2:95:3e:41:58:f2:3c:aa:13:17:
                    96:2b:11:f1:96:b4:53:66:b4:c9:43:dc:9d:da:01:
                    70:05:92:06:f5:27:52:a0:61:07:db:d8:26:4a:a2:
                    15:6a:1a:96:38:73:7e:e8:af:99:a6:27:d6:39:99:
                    f8:0d:9f:52:73:b8:c4:b8:3e:2b:d9:49:fc:0a:66:
                    a5:eb:81:d4:b6:15:68:29:d1:aa:0c:71:05:2c:89:
                    c2:c0:99:bc:9a:ee:2a:c4:df:f3:5d:1e:bc:27:03:
                    4f:56:3d:f1:30:21:25:73:be:d1:2a:63:1a:32:22:
                    70:be:e8:c1:62:5a:19:5d:cf:3a:7c:4c:55:f5:e4:
                    bb:2d:d5:e0:b2:ee:a9:84:8e:90:44:3a:49:b0:80:
                    2f:26:c8:84:eb:d0:3e:de:83:36:9f:14:43:3f:bf:
                    33:03:89:79:28:44:76:bd:12:24:61:58:9d:7a:bd:
                    e4:7a:06:bf:6c:e3:27:70:2b:86:79:ef:8a:65:16:
                    65:bd:16:07:1d:e4:dc:4c:b0:59:d3:42:42:40:ff:
                    d3:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:60:06:A6:BC:AF:02:F6:42:E6:F1:26:05:C3:E4:17:19:C7:C4:2E
            X509v3 Authority Key Identifier:
                keyid:BC:CE:86:D6:12:D4:3F:84:1A:B0:41:6E:C5:A8:84:07:0F:5C:E5:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364C81D/33794D2E890E11E99A72D162F8AEA228/vM6G1hLUP4QasEFuxaiEBw9c5dY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/vM6G1hLUP4QasEFuxaiEBw9c5dY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364C81D/33794D2E890E11E99A72D162F8AEA228/38C9E54AC96611F1934D6707CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.223.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:44:07:c0:21:28:ab:37:56:69:ed:7d:93:be:29:ab:23:54:
         7a:ca:54:86:45:88:2e:55:a6:5e:57:40:25:ae:b6:11:6e:55:
         0a:35:5d:a7:c2:6f:d0:26:72:f7:2f:a4:bf:6d:6e:e7:b6:71:
         86:4c:e4:74:01:e0:d0:fc:66:56:8d:16:c4:17:ea:1d:fc:aa:
         40:3f:17:df:5c:35:3f:6e:38:d3:ad:1c:10:7e:f9:0f:8f:95:
         51:52:1d:ee:88:ad:da:b8:1b:01:b3:c6:13:1c:80:56:58:74:
         a8:af:1c:03:47:d3:df:2f:50:02:8d:ab:ff:34:6d:15:0c:e9:
         44:38:73:85:26:dc:60:61:7b:03:8b:7c:e0:b0:14:96:47:80:
         65:d2:fe:ad:e1:30:9e:11:27:3a:e1:02:0e:92:f4:c5:f5:ff:
         31:e7:dc:1b:24:ac:df:d8:b6:97:0d:84:fa:5e:8a:ce:89:96:
         cc:5b:ab:ce:ab:dd:8e:a5:3f:df:16:93:42:cc:26:2e:c0:fc:
         24:58:c7:66:e9:1e:24:82:4e:9e:a2:ce:b9:48:54:22:5b:e4:
         e2:cc:1e:6a:3b:6a:c5:79:0c:e4:c0:bc:59:d0:62:e0:84:65:
         15:83:e9:9e:8f:06:30:fb:3a:c0:4f:e5:b5:98:22:d5:07:85:
         01:1d:d4:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----