Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3683A54/5C3677F21F7811EC9A12311AD8A014CE/58977490B0DF11F1A1FBC1F1CE1D38B0.roa
File:                     58977490B0DF11F1A1FBC1F1CE1D38B0.roa (raw, json)
Hash identifier:          N11/bWdhvJMGtJ4/BrZKOXxSUZeKS0aLH8pXMLFi838=
Subject key identifier:   DD:81:04:EA:24:ED:78:66:92:8B:83:82:B9:C9:E4:22:7F:6B:F6:AE
Certificate issuer:       /CN=F3683A54AF/serialNumber=91733293FC6350AEDFBA75A916FFF41B515ECF4C
Certificate serial:       0753
Authority key identifier: 91:73:32:93:FC:63:50:AE:DF:BA:75:A9:16:FF:F4:1B:51:5E:CF:4C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/kXMyk_xjUK7funWpFv_0G1Fez0w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3683A54/5C3677F21F7811EC9A12311AD8A014CE/58977490B0DF11F1A1FBC1F1CE1D38B0.roa
Signing time:             Tue 15 Sep 2026 08:27:54 +0000
ROA not before:           Tue 15 Sep 2026 08:27:50 +0000
ROA not after:            Mon 15 Sep 2036 08:27:50 +0000
asID:                     36924
IP address blocks:        102.201.60.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3683A54/5C3677F21F7811EC9A12311AD8A014CE/kXMyk_xjUK7funWpFv_0G1Fez0w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3683A54/5C3677F21F7811EC9A12311AD8A014CE/kXMyk_xjUK7funWpFv_0G1Fez0w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/kXMyk_xjUK7funWpFv_0G1Fez0w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 20 Sep 2026 00:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1875 (0x753)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3683A54AF, serialNumber=91733293FC6350AEDFBA75A916FFF41B515ECF4C
        Validity
            Not Before: Sep 15 08:27:50 2026 GMT
            Not After : Sep 15 08:27:50 2036 GMT
        Subject: CN=6aa9018a-90b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:6e:f3:89:2b:4b:35:11:65:c7:67:2d:90:5b:
                    8f:f5:59:38:da:14:f3:91:15:92:2a:01:3d:2f:e6:
                    ea:54:e4:63:2b:d5:7a:ac:c8:e9:57:97:b1:52:bf:
                    a5:ab:b4:29:f8:4e:e0:24:92:1e:b1:38:b9:6c:a4:
                    ad:ac:ac:a3:4e:ac:fd:8b:ef:60:01:cb:db:af:98:
                    7d:93:f8:2d:42:32:b6:86:37:b1:b5:be:74:d2:4d:
                    ce:d5:61:f8:8e:74:52:c1:ad:e0:e7:16:88:f9:98:
                    c4:85:e3:88:84:22:ac:08:c8:74:64:34:35:7f:a2:
                    04:7d:ee:b1:df:14:a4:05:45:c2:df:79:ab:49:6c:
                    21:01:e9:fe:a4:e5:54:d3:79:4f:3f:ac:c8:4f:39:
                    e0:62:45:4f:e7:8f:81:41:67:e5:7f:c2:f0:24:0f:
                    f2:40:b5:cd:1e:f0:67:02:2a:91:33:0b:3f:11:3b:
                    bc:fc:25:dc:3d:08:ff:89:7a:86:64:9d:b4:fe:30:
                    e4:00:7b:4f:c5:05:5d:b9:21:b3:68:15:87:f7:90:
                    eb:21:51:bf:45:4f:5b:18:c8:a6:d9:32:63:cc:97:
                    44:46:5d:be:46:c1:70:5a:7c:fd:2a:52:5d:11:71:
                    60:9d:9d:9b:d4:54:9a:ce:e0:7e:16:4a:1a:8f:33:
                    60:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:81:04:EA:24:ED:78:66:92:8B:83:82:B9:C9:E4:22:7F:6B:F6:AE
            X509v3 Authority Key Identifier:
                keyid:91:73:32:93:FC:63:50:AE:DF:BA:75:A9:16:FF:F4:1B:51:5E:CF:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3683A54/5C3677F21F7811EC9A12311AD8A014CE/kXMyk_xjUK7funWpFv_0G1Fez0w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kXMyk_xjUK7funWpFv_0G1Fez0w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3683A54/5C3677F21F7811EC9A12311AD8A014CE/58977490B0DF11F1A1FBC1F1CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.201.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6b:29:7d:6e:2e:3a:ef:30:9a:42:55:f2:bc:d1:14:62:0e:e3:
         55:c7:79:04:39:4b:26:2d:c6:56:3d:ef:43:44:8f:37:b4:16:
         d6:26:8c:e4:d1:af:df:31:dd:72:02:15:55:c9:a4:e1:02:e4:
         26:f6:1f:0d:d3:68:9f:b3:6a:df:39:ae:95:9f:d5:82:20:75:
         fd:d7:44:0f:0b:e1:f3:34:28:88:35:51:7d:93:6d:33:b2:e4:
         db:fa:b5:ce:20:26:13:06:b8:31:3d:42:65:db:4b:80:d3:83:
         4c:54:71:e9:2f:9c:05:6f:dd:b4:94:df:47:a6:d0:3f:73:0e:
         40:65:77:8e:cd:8d:13:85:0d:75:c8:57:2a:3b:f2:f9:39:e0:
         6f:29:c1:52:ca:db:3c:fd:82:fc:b8:7a:c4:3a:51:5e:e0:b1:
         d2:a2:7f:29:14:0f:81:2e:8c:78:52:e4:0f:0a:e9:0b:bd:f5:
         87:53:51:4d:57:94:ec:ea:2c:20:52:54:9f:af:b8:05:0e:69:
         89:2e:88:04:b6:c2:01:2e:fd:0d:6c:f9:53:63:25:fc:00:20:
         75:e6:49:3c:56:2a:3b:2b:f0:9c:bf:af:bc:33:6d:5e:c5:bb:
         3f:a9:43:b0:cd:02:c0:23:79:bd:db:d7:18:f0:cd:d8:66:e1:
         45:08:a8:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----