Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F367917C/00DB23C4B75A11F1953AF9B0CE1D38B0/5D4B6218C6F511F1950F261DCF1D38B0.roa
File:                     5D4B6218C6F511F1950F261DCF1D38B0.roa (raw, json)
Hash identifier:          rktVVLf+yQbgxvwZ2kSXxsvbPxg9nymdrXaWE4er4ek=
Subject key identifier:   68:50:B5:DB:7A:DE:4F:10:9A:9B:67:15:36:BD:51:DB:00:CC:E3:FD
Certificate issuer:       /CN=F367917CAF/serialNumber=D3ABD956F45371FE29FC9298A95AFCB2F9B83D2D
Certificate serial:       1B
Authority key identifier: D3:AB:D9:56:F4:53:71:FE:29:FC:92:98:A9:5A:FC:B2:F9:B8:3D:2D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/06vZVvRTcf4p_JKYqVr8svm4PS0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367917C/00DB23C4B75A11F1953AF9B0CE1D38B0/5D4B6218C6F511F1950F261DCF1D38B0.roa
Signing time:             Tue 13 Oct 2026 11:00:56 +0000
ROA not before:           Tue 13 Oct 2026 11:00:51 +0000
ROA not after:            Tue 31 Dec 2030 11:00:51 +0000
asID:                     329784
IP address blocks:        102.201.192.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367917C/00DB23C4B75A11F1953AF9B0CE1D38B0/06vZVvRTcf4p_JKYqVr8svm4PS0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367917C/00DB23C4B75A11F1953AF9B0CE1D38B0/06vZVvRTcf4p_JKYqVr8svm4PS0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/06vZVvRTcf4p_JKYqVr8svm4PS0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 00:08:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27 (0x1b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367917CAF, serialNumber=D3ABD956F45371FE29FC9298A95AFCB2F9B83D2D
        Validity
            Not Before: Oct 13 11:00:51 2026 GMT
            Not After : Dec 31 11:00:51 2030 GMT
        Subject: CN=6ace0f68-35c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:6f:40:61:38:03:09:a7:0e:38:13:d8:c9:dd:
                    f0:4d:3e:67:fa:ec:3b:fb:5c:38:71:64:ec:2b:cd:
                    a1:b5:14:39:a5:3a:2c:d7:77:95:73:fc:03:ea:45:
                    cd:76:17:69:24:9a:6c:60:77:13:07:cd:f2:34:dd:
                    69:ed:1c:b5:25:e9:be:07:da:bc:da:2c:8a:b9:77:
                    66:44:af:1c:5e:95:70:65:d1:02:29:34:fa:ee:bc:
                    bb:fc:02:42:8a:23:2b:36:31:9d:a2:3d:96:56:e7:
                    96:9b:fc:9a:b6:0c:80:10:fa:b8:e9:8a:41:7d:af:
                    77:cb:eb:5d:91:04:a7:a6:7d:82:b8:b3:12:6b:5e:
                    eb:33:b8:77:00:b0:c0:2a:e7:91:99:5b:20:88:92:
                    4a:be:57:f0:82:b1:72:94:20:59:c1:7c:ee:86:00:
                    40:67:d2:8a:ba:89:ee:02:28:7a:34:23:84:6a:3a:
                    d9:54:d9:e0:63:49:50:6f:0b:eb:4b:c5:d5:65:49:
                    9e:24:fe:77:03:cf:3a:b2:c6:03:af:bd:f0:a9:75:
                    0d:a6:0d:fd:c3:9e:6f:46:0c:2a:61:52:0e:c7:d3:
                    44:49:c9:b7:f0:80:6d:04:e7:6f:74:92:9b:60:e8:
                    12:aa:94:da:fd:e5:7c:38:78:c1:58:2f:35:8b:42:
                    3c:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:50:B5:DB:7A:DE:4F:10:9A:9B:67:15:36:BD:51:DB:00:CC:E3:FD
            X509v3 Authority Key Identifier:
                keyid:D3:AB:D9:56:F4:53:71:FE:29:FC:92:98:A9:5A:FC:B2:F9:B8:3D:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367917C/00DB23C4B75A11F1953AF9B0CE1D38B0/06vZVvRTcf4p_JKYqVr8svm4PS0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/06vZVvRTcf4p_JKYqVr8svm4PS0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367917C/00DB23C4B75A11F1953AF9B0CE1D38B0/5D4B6218C6F511F1950F261DCF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.201.192.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a2:a0:d0:98:3f:55:6f:5a:87:46:f6:1e:6e:c4:37:34:29:40:
         77:44:f5:5a:fe:52:b4:0f:d1:19:16:3f:b6:86:27:78:01:f7:
         f0:e2:70:d2:a8:b9:1c:24:ec:52:91:ca:10:a3:8e:44:d1:f0:
         cf:65:1a:84:ad:ef:7e:e1:32:09:32:98:9c:da:89:38:78:5c:
         e0:e5:d0:4a:65:0c:b1:bc:80:dd:02:c0:88:46:13:04:9c:55:
         47:54:74:6f:7c:4d:a8:27:3c:02:1b:4a:28:16:86:95:0b:fb:
         1f:12:2d:f4:68:ea:ea:62:48:c6:63:1f:27:cf:d5:48:75:f6:
         46:98:2a:1b:ca:e0:bd:3b:18:c9:51:86:41:bf:08:17:d1:15:
         81:ec:78:92:d3:91:f2:50:09:9b:4d:12:33:fe:16:25:a4:28:
         de:a7:4a:2c:55:29:9b:ab:8c:04:3c:c6:eb:96:8e:86:a7:0a:
         89:21:6a:24:41:63:59:6b:32:39:b2:97:36:7b:6c:cd:b4:4d:
         c1:f7:19:c2:b4:ec:f6:a5:9a:d2:75:9c:fd:d2:05:35:ae:dd:
         ae:8f:4a:8d:cc:8a:04:b0:9b:20:07:3c:26:f5:4e:f4:ce:37:
         a4:33:65:6b:38:e0:3e:4d:be:a6:d2:0f:53:18:02:d2:cf:a8:
         99:a1:35:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----