Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/A0685950C87311F1B40410E1CE1D38B0.roa
File:                     A0685950C87311F1B40410E1CE1D38B0.roa (raw, json)
Hash identifier:          LdFfvmRde0wDGOL8nLci84Pw7kdFHOCd9ogYSw4wRbU=
Subject key identifier:   98:22:1E:62:85:FB:84:FF:A4:EA:AB:5A:F7:01:91:C0:A4:1E:50:7C
Certificate issuer:       /CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Certificate serial:       0A6A
Authority key identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/A0685950C87311F1B40410E1CE1D38B0.roa
Signing time:             Thu 15 Oct 2026 08:37:17 +0000
ROA not before:           Thu 15 Oct 2026 08:37:12 +0000
ROA not after:            Sat 28 Nov 2026 08:37:12 +0000
asID:                     141718
IP address blocks:        102.177.180.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 29 Oct 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2666 (0xa6a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367DFA4AF, serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
        Validity
            Not Before: Oct 15 08:37:12 2026 GMT
            Not After : Nov 28 08:37:12 2026 GMT
        Subject: CN=6ad090bc-7a4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:28:d9:0d:71:a0:a9:9d:db:a0:b4:d6:83:cf:
                    16:c2:ff:6a:2e:42:9b:11:73:10:05:4e:c6:a1:e2:
                    d3:78:78:62:f7:51:c4:aa:a9:a7:df:43:81:ae:d1:
                    7d:ec:fa:f0:e2:3a:31:a5:a4:31:89:9e:41:0f:6a:
                    97:90:b9:2d:0b:fb:a5:fa:af:cc:fa:3d:18:38:d2:
                    75:0a:53:f0:b3:e4:db:9e:20:f5:34:e1:f4:7a:ae:
                    90:5f:b5:7a:03:6e:4d:6f:1e:fc:d4:ad:94:01:5f:
                    9a:48:14:18:79:14:20:65:07:9b:07:08:7f:27:a7:
                    a6:02:d3:60:d5:93:39:15:25:5f:cb:6a:e7:67:18:
                    0a:b4:09:74:27:4d:87:3b:19:46:f3:42:49:47:9f:
                    da:99:e0:13:92:77:11:43:71:c8:c5:e5:f8:75:f1:
                    4f:25:a1:f8:7e:0b:71:43:82:74:c6:fd:2c:71:24:
                    ec:51:b8:c6:22:38:64:43:44:0e:72:22:a5:b8:25:
                    6c:a6:89:e0:ba:6e:5b:48:cd:7c:49:fa:94:51:0b:
                    c5:56:54:e3:59:f1:11:fc:63:68:c7:9e:02:58:fd:
                    ff:f6:3c:a8:99:f6:a3:9d:40:4e:f4:06:d8:c0:dd:
                    17:e0:1d:bc:af:34:e0:78:fb:07:37:45:63:fa:fd:
                    79:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:22:1E:62:85:FB:84:FF:A4:EA:AB:5A:F7:01:91:C0:A4:1E:50:7C
            X509v3 Authority Key Identifier:
                keyid:97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/A0685950C87311F1B40410E1CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.177.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:43:32:3a:09:26:d1:19:30:11:23:5a:e0:fa:2a:da:56:77:
         a5:6d:ca:34:fa:e3:dd:4f:22:16:78:98:05:d3:68:a6:62:27:
         2d:52:95:5a:26:08:3a:a8:26:6f:8c:94:a0:85:ea:f2:17:0b:
         92:d6:34:d6:3c:f5:cc:2f:1d:a0:a6:02:c4:5c:d1:c9:de:03:
         6b:02:d1:a1:2c:76:58:a6:6b:ad:2f:79:37:90:90:78:ba:f9:
         40:e8:24:e2:95:a1:84:61:eb:c5:f8:de:91:66:36:99:08:5d:
         c5:6e:b6:2b:09:fe:33:98:29:8d:ae:8e:16:a2:5f:37:9d:87:
         48:31:fb:c1:da:2f:9f:16:53:86:d2:fd:14:4b:c3:49:bc:df:
         3f:7d:1c:59:0c:a3:96:28:c4:8a:f5:6f:67:20:b4:c1:1f:63:
         b5:ef:7e:71:ea:b4:59:05:ed:33:a5:b1:95:fc:76:67:94:30:
         1c:d2:81:c1:e7:3b:66:1e:a3:32:40:c4:77:5e:21:63:53:5f:
         77:84:15:8a:ba:e3:b0:d7:23:ba:11:9c:bd:9f:3c:7c:0a:d0:
         9b:57:37:2d:35:13:f0:58:ab:a9:f9:8b:a2:1e:ed:9b:d3:19:
         12:dd:b5:ef:01:e6:cc:1b:86:e6:65:a4:13:e9:ec:ce:9a:d7:
         88:21:31:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----