Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/EBEF01B4B39011F1AB143DB3CE1D38B0.roa
File:                     EBEF01B4B39011F1AB143DB3CE1D38B0.roa (raw, json)
Hash identifier:          zTSTEil+00JSU10YZOnNSTSqUr6EUTtKfQAH6mWtDoQ=
Subject key identifier:   A8:AC:B0:C8:4F:99:E0:D6:F5:AC:4B:16:23:62:27:09:E6:91:C2:AD
Certificate issuer:       /CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Certificate serial:       0A4A
Authority key identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/EBEF01B4B39011F1AB143DB3CE1D38B0.roa
Signing time:             Fri 18 Sep 2026 18:44:04 +0000
ROA not before:           Fri 18 Sep 2026 18:44:00 +0000
ROA not after:            Wed 14 Oct 2026 18:44:00 +0000
asID:                     209242
IP address blocks:        102.177.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 02:03:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2634 (0xa4a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367DFA4AF, serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
        Validity
            Not Before: Sep 18 18:44:00 2026 GMT
            Not After : Oct 14 18:44:00 2026 GMT
        Subject: CN=6aad8674-62c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:11:ba:4e:61:c1:cd:0c:4f:44:d9:91:eb:41:
                    82:dc:90:78:6e:6d:e1:f4:e6:d1:66:c2:d0:bb:f7:
                    55:96:1f:17:f4:1c:b6:d5:bd:d1:f8:98:10:ec:28:
                    4d:18:45:43:9e:6c:58:30:56:bf:a2:c2:46:fb:5e:
                    54:74:a6:ce:ae:52:f1:95:4a:a7:7a:d0:2e:50:ed:
                    2d:3c:76:2e:10:15:c1:fc:28:a7:0d:d2:d8:aa:15:
                    21:c6:01:cb:d5:8b:df:51:eb:a7:4c:f8:8b:37:f8:
                    5f:d4:42:57:de:ce:82:bb:32:33:fb:a8:68:e8:54:
                    1f:d5:a7:08:5a:9e:92:83:83:cd:40:9f:56:28:55:
                    08:d4:cc:c4:9a:4b:1f:92:55:a5:9e:e0:e1:b7:e2:
                    41:58:c5:0b:ec:da:58:18:53:56:1e:f7:15:40:55:
                    43:08:47:c3:71:78:44:23:d5:3e:b0:cc:a0:fb:c1:
                    bd:0a:0d:5d:a7:16:5e:20:6a:b6:fb:fd:c8:45:6d:
                    23:d3:59:23:08:cb:16:a2:a2:49:87:3e:9a:b8:48:
                    47:9c:94:a3:de:5a:77:5d:95:db:d1:d9:cc:ae:2f:
                    69:88:9b:51:8a:cb:04:69:5c:c8:9d:d0:49:24:73:
                    f6:11:a6:da:cc:88:19:14:0c:58:ba:30:ec:a1:22:
                    ee:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:AC:B0:C8:4F:99:E0:D6:F5:AC:4B:16:23:62:27:09:E6:91:C2:AD
            X509v3 Authority Key Identifier:
                keyid:97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/EBEF01B4B39011F1AB143DB3CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.177.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:f2:88:b0:b1:af:92:ac:bb:de:cd:72:d8:d3:74:7f:15:6a:
         a7:96:ba:2b:96:d3:d2:fe:6e:8a:cd:10:28:b9:92:e3:19:08:
         88:dd:9c:1b:b1:0b:ea:1f:b0:f2:db:22:07:1a:05:ad:78:be:
         d4:8f:28:97:bd:a9:73:00:5f:09:b3:da:12:e6:7b:0f:a0:3b:
         c9:27:be:04:25:8b:0e:0e:bc:1b:61:de:28:14:4b:6b:8f:e0:
         81:8d:80:a7:ce:89:80:ec:da:04:7f:87:dc:8d:67:c0:90:db:
         05:50:80:e6:41:4c:a2:72:33:63:3b:9a:59:bd:44:4f:1d:df:
         c2:de:bf:c0:11:37:79:a2:c8:27:4e:bd:a0:b7:a3:51:44:64:
         28:8d:0b:dd:60:1c:d8:b8:b9:3c:77:8a:a5:de:75:bf:33:09:
         49:f2:b2:fc:c2:ea:0b:85:ec:d7:80:e2:b6:98:fd:f9:6b:c5:
         98:ec:c1:0f:e4:d6:52:1a:db:25:ab:cd:80:71:0f:1a:57:bb:
         86:17:91:0d:eb:30:3d:c7:57:74:ef:3f:d3:b6:72:e5:35:74:
         b0:c9:7b:59:a6:cb:65:3b:c5:a4:a7:bc:e7:92:fe:49:66:38:
         1d:94:44:57:d9:3a:38:e6:3a:46:5a:31:ef:71:bf:ad:fb:1f:
         62:bb:89:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----