Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3660C14/CAD5F3629BFA11E9B1BFC179F8AEA228/DCDB716EC70211F18B94BAF4CE1D38B0.roa
File:                     DCDB716EC70211F18B94BAF4CE1D38B0.roa (raw, json)
Hash identifier:          htT7zWMtp8uSchpzNVXzyCa76G20cDyHx0yo4DSF5eA=
Subject key identifier:   A8:FC:10:13:8B:C5:9A:B0:20:1D:65:5F:AE:7D:96:63:22:55:C7:88
Certificate issuer:       /CN=F3660C14AF/serialNumber=AE15E6355B084A93EBA21C4A9DD61BCDC258B59E
Certificate serial:       0AA4
Authority key identifier: AE:15:E6:35:5B:08:4A:93:EB:A2:1C:4A:9D:D6:1B:CD:C2:58:B5:9E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/rhXmNVsISpProhxKndYbzcJYtZ4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3660C14/CAD5F3629BFA11E9B1BFC179F8AEA228/DCDB716EC70211F18B94BAF4CE1D38B0.roa
Signing time:             Tue 13 Oct 2026 12:37:34 +0000
ROA not before:           Sun 01 Nov 2026 12:37:29 +0000
ROA not after:            Tue 31 Oct 2028 12:37:29 +0000
asID:                     328213
IP address blocks:        2001:43f8:de0::/48 maxlen: 48
Validation:               Failed, certificate is not yet valid

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2724 (0xaa4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3660C14AF, serialNumber=AE15E6355B084A93EBA21C4A9DD61BCDC258B59E
        Validity
            Not Before: Nov  1 12:37:29 2026 GMT
            Not After : Oct 31 12:37:29 2028 GMT
        Subject: CN=6ace260e-0187
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:8b:8e:e1:22:91:22:b4:41:74:42:b6:f3:08:
                    8a:60:34:9a:05:45:f6:e4:2a:b7:ae:7e:1b:3a:b4:
                    0b:18:18:96:91:50:1d:94:2d:98:9d:76:4c:16:d6:
                    7d:12:f2:60:13:1d:57:cc:30:7b:62:d3:58:81:10:
                    16:f8:69:dc:97:db:3d:ce:77:7a:3f:a1:a1:8f:4f:
                    a8:0f:14:31:f6:6e:12:69:7e:ed:2d:a8:e0:10:3f:
                    26:95:77:f7:96:aa:57:46:ac:26:4b:27:b2:07:43:
                    d1:6d:66:36:84:e2:32:1e:6e:2d:ef:5d:09:21:be:
                    fc:dd:ff:24:56:7c:15:59:27:80:ab:b2:03:dd:4e:
                    91:4b:28:99:fb:71:c9:08:69:bd:0f:ad:1e:53:00:
                    28:f9:d3:e5:89:c1:54:81:99:e7:cf:f5:82:d5:79:
                    c6:19:e9:11:2d:03:5d:26:6b:26:31:da:6f:b6:ad:
                    fb:ca:80:c1:7f:fa:39:5c:31:2f:35:ae:7a:72:2a:
                    c1:c9:4e:9f:de:6c:e9:79:2e:54:05:5e:95:f1:3f:
                    f0:b1:64:51:c8:8f:8c:63:e9:2d:b8:7e:f9:37:19:
                    be:b1:86:07:d0:5e:16:38:29:0b:42:d7:f8:0f:84:
                    0a:c9:b5:52:91:bc:a7:b5:38:de:03:ad:20:41:f3:
                    89:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:FC:10:13:8B:C5:9A:B0:20:1D:65:5F:AE:7D:96:63:22:55:C7:88
            X509v3 Authority Key Identifier:
                keyid:AE:15:E6:35:5B:08:4A:93:EB:A2:1C:4A:9D:D6:1B:CD:C2:58:B5:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3660C14/CAD5F3629BFA11E9B1BFC179F8AEA228/rhXmNVsISpProhxKndYbzcJYtZ4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rhXmNVsISpProhxKndYbzcJYtZ4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3660C14/CAD5F3629BFA11E9B1BFC179F8AEA228/DCDB716EC70211F18B94BAF4CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:43f8:de0::/48

    Signature Algorithm: sha256WithRSAEncryption
         ad:51:48:1a:2a:c3:af:b5:2e:f8:9a:f7:f4:76:4e:41:6e:03:
         c9:8e:d9:ac:dd:52:6e:f3:4c:75:00:66:c6:bc:92:ba:6c:db:
         34:41:4b:71:4f:48:03:ef:b9:ce:ab:ca:a3:ee:21:80:58:90:
         97:97:1e:77:1a:05:0e:94:fd:ed:56:16:32:d0:b4:bf:ab:2f:
         14:96:ef:19:46:da:1f:1b:e7:8a:fe:f6:95:16:f5:75:f3:e6:
         db:3c:16:9d:ac:3d:a5:cf:70:58:38:38:81:0a:0b:22:b0:29:
         3a:bc:c9:d4:c8:30:5d:63:d4:06:31:aa:93:32:7b:3c:a8:43:
         ca:fa:bc:29:f2:d0:d1:62:0a:14:6d:b9:fd:4b:7e:d0:f7:9d:
         2b:4d:f8:5e:40:3f:64:16:bb:bc:7d:45:d5:b9:bc:f0:d0:ab:
         88:87:69:a6:4c:e8:e2:e9:ed:95:50:05:21:cc:30:90:03:a5:
         71:9d:04:a2:57:a6:03:75:e9:16:30:54:7b:c1:b3:c0:8a:c8:
         7f:eb:93:9d:a5:00:7a:8d:bc:03:4e:8b:cc:a5:23:44:58:99:
         21:a3:af:cd:99:09:c7:9f:f2:19:84:2e:fb:2b:a4:65:b2:87:
         a8:c6:37:63:10:4a:88:7c:f5:1e:17:a5:de:e5:b9:fc:d8:09:
         3e:94:d1:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----