Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/71B540ACB39011F1B8014FB1CE1D38B0.roa
File:                     71B540ACB39011F1B8014FB1CE1D38B0.roa (raw, json)
Hash identifier:          CwZ6Znsms5tlQuV4ajJ93AfNQRjxSb7NhGK13DruOLI=
Subject key identifier:   46:70:5A:3A:C8:00:23:77:B7:50:25:CC:F5:FF:7C:91:7B:0D:17:F8
Certificate issuer:       /CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Certificate serial:       0A48
Authority key identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/71B540ACB39011F1B8014FB1CE1D38B0.roa
Signing time:             Fri 18 Sep 2026 18:40:39 +0000
ROA not before:           Fri 18 Sep 2026 18:40:35 +0000
ROA not after:            Mon 28 Sep 2026 18:40:35 +0000
asID:                     211826
IP address blocks:        102.177.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2632 (0xa48)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367DFA4AF, serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
        Validity
            Not Before: Sep 18 18:40:35 2026 GMT
            Not After : Sep 28 18:40:35 2026 GMT
        Subject: CN=6aad85a7-babb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:1a:91:15:3e:ac:a5:41:ac:89:be:cd:76:eb:
                    96:21:39:b2:14:4d:e9:bc:06:b0:4c:48:72:23:33:
                    b9:90:6c:30:1a:ee:d5:19:59:70:29:3b:35:a3:fa:
                    30:58:f5:99:b5:85:68:14:92:69:2e:cc:f7:b4:c4:
                    98:0e:ee:8e:60:fa:75:fd:50:e6:19:93:83:27:e0:
                    db:09:81:7b:f0:a1:39:86:0c:d7:f7:9f:f9:99:32:
                    34:3d:d2:20:52:1f:97:23:3e:3e:e9:f5:1f:f3:58:
                    ba:d8:e1:dd:6a:d3:43:b2:10:d1:a1:2b:89:d3:8b:
                    83:fc:87:1c:1c:23:5c:59:4f:36:fe:03:7f:c4:ef:
                    54:2f:12:e5:7f:88:13:05:5d:6e:9a:43:ef:0d:3f:
                    75:92:38:09:51:70:42:61:4a:59:1f:81:3d:0f:0c:
                    d7:21:1f:1e:c4:89:34:7c:d4:80:ff:57:0b:80:6e:
                    57:b9:8b:be:2e:6b:e5:aa:8e:99:c4:fa:60:e2:a5:
                    9d:10:42:b2:91:0a:8a:be:9f:2b:4f:e3:16:39:f8:
                    43:3f:8d:60:c4:a6:56:e8:fd:e5:7c:16:c0:1d:65:
                    98:15:29:ad:73:c1:e2:b8:7f:2a:79:37:52:b4:41:
                    12:38:f1:23:74:38:ae:89:c6:14:e1:af:fc:22:bd:
                    67:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:70:5A:3A:C8:00:23:77:B7:50:25:CC:F5:FF:7C:91:7B:0D:17:F8
            X509v3 Authority Key Identifier:
                keyid:97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/71B540ACB39011F1B8014FB1CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.177.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:19:67:54:3f:b7:5e:d2:32:36:ee:3e:32:d7:53:45:c2:c7:
         13:7f:2e:26:b3:33:bb:5f:47:25:a0:b0:74:5a:bb:a3:10:b5:
         39:ef:e2:ea:1a:bb:28:5f:83:02:33:4f:1d:53:57:7e:15:15:
         ce:5e:49:d9:ac:78:01:3d:9d:2c:4c:e2:e9:3d:5f:78:f7:e1:
         a0:e0:d3:2e:0d:84:e4:ef:43:2d:9d:6c:9b:83:4a:88:46:14:
         74:6d:12:75:d8:cc:de:24:b1:86:dd:a0:5a:89:fc:49:90:70:
         be:43:87:09:1d:96:38:d0:f9:6a:bd:49:c2:58:61:3a:83:ce:
         e0:8a:cb:c7:54:06:7b:d7:49:a4:13:6a:a8:11:55:19:a8:fa:
         91:f5:16:b2:c9:a6:01:81:65:f9:23:ba:e8:d5:e9:b1:04:8b:
         8e:11:5d:0e:90:a2:d3:58:da:fe:5d:6e:0d:9e:3e:6e:c5:c1:
         22:7e:15:5b:de:e7:86:62:6d:01:46:5f:e3:e4:a3:bd:18:03:
         ec:77:1e:d3:0b:60:5e:d5:49:3b:42:9f:57:09:7d:c4:f1:d0:
         35:02:4e:f7:6b:77:6a:15:35:55:e1:cf:42:f9:51:67:aa:d8:
         89:78:5e:2a:55:d3:61:a9:ad:0b:b4:cb:af:e2:7d:21:f8:1f:
         95:8b:36:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----