Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3683ABD/4EE8C7467D4C11EABB20164CF8AEA228/BC75406AC28611F188489717CF1D38B0.roa
File:                     BC75406AC28611F188489717CF1D38B0.roa (raw, json)
Hash identifier:          Wje/LSibE/7jNLlBIgtvp8lLQioUz5pyecyKhdjRhGA=
Subject key identifier:   0B:7F:C9:CE:40:62:C2:93:38:B4:35:74:AF:23:AD:E3:B4:2A:0F:FA
Certificate issuer:       /CN=F3683ABDAF/serialNumber=154FDB0564B137DD228F35DF4AF6E40780EF10D6
Certificate serial:       097D
Authority key identifier: 15:4F:DB:05:64:B1:37:DD:22:8F:35:DF:4A:F6:E4:07:80:EF:10:D6
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/FU_bBWSxN90ijzXfSvbkB4DvENY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3683ABD/4EE8C7467D4C11EABB20164CF8AEA228/BC75406AC28611F188489717CF1D38B0.roa
Signing time:             Wed 07 Oct 2026 19:38:57 +0000
ROA not before:           Wed 07 Oct 2026 19:38:51 +0000
ROA not after:            Mon 07 Oct 2030 19:38:51 +0000
asID:                     328632
IP address blocks:        196.192.48.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3683ABD/4EE8C7467D4C11EABB20164CF8AEA228/FU_bBWSxN90ijzXfSvbkB4DvENY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3683ABD/4EE8C7467D4C11EABB20164CF8AEA228/FU_bBWSxN90ijzXfSvbkB4DvENY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/FU_bBWSxN90ijzXfSvbkB4DvENY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 01:45:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2429 (0x97d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3683ABDAF, serialNumber=154FDB0564B137DD228F35DF4AF6E40780EF10D6
        Validity
            Not Before: Oct  7 19:38:51 2026 GMT
            Not After : Oct  7 19:38:51 2030 GMT
        Subject: CN=6ac69fd1-ea7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:85:9e:57:c5:8d:ed:77:c9:b4:53:e7:58:05:
                    3c:55:b7:84:78:8b:f5:fa:3b:89:22:c2:e6:57:d7:
                    f6:5d:b3:cb:d3:cd:b4:03:8c:61:dc:7b:8e:9d:2d:
                    40:fe:cb:cb:0e:26:6e:e9:cc:be:ef:af:b1:e7:ac:
                    bf:9f:20:5b:ef:db:88:c2:1b:4a:38:72:93:81:51:
                    b6:f7:73:18:bc:5c:45:98:af:c0:fd:46:8d:e2:97:
                    e4:6b:36:10:aa:cf:1d:46:fd:1d:e0:42:80:dc:93:
                    7e:f9:7e:b1:1a:41:9e:6b:d0:4f:79:30:fc:a9:50:
                    00:96:0e:92:f6:a3:55:6f:47:3d:54:99:6b:82:cc:
                    ba:5c:06:bf:0a:cc:43:bb:55:89:09:f3:5a:85:3a:
                    63:17:06:03:f5:84:60:a3:62:0c:f4:c5:39:14:44:
                    a7:3f:f6:29:c6:48:cb:7a:2b:b4:59:b9:79:55:9d:
                    09:12:08:67:e7:ce:4e:e1:c9:2c:66:fe:d1:9a:ea:
                    2e:f2:18:97:55:14:f5:2f:9f:06:ea:d6:e6:ed:9f:
                    08:7c:cb:9c:b8:d9:98:f1:53:15:18:51:9b:46:4e:
                    23:df:ea:1b:a1:8e:ea:df:be:8f:7f:a4:0d:b4:70:
                    fc:d4:0d:09:c2:3e:9f:b0:61:9a:ea:b9:9b:85:fb:
                    43:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:7F:C9:CE:40:62:C2:93:38:B4:35:74:AF:23:AD:E3:B4:2A:0F:FA
            X509v3 Authority Key Identifier:
                keyid:15:4F:DB:05:64:B1:37:DD:22:8F:35:DF:4A:F6:E4:07:80:EF:10:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3683ABD/4EE8C7467D4C11EABB20164CF8AEA228/FU_bBWSxN90ijzXfSvbkB4DvENY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/FU_bBWSxN90ijzXfSvbkB4DvENY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3683ABD/4EE8C7467D4C11EABB20164CF8AEA228/BC75406AC28611F188489717CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.192.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         73:da:18:08:9b:e8:c2:75:75:f2:fa:71:d2:ad:a7:1b:37:47:
         76:68:0b:f0:3b:89:e5:85:b8:01:f5:3c:c1:d0:ef:d2:36:0b:
         82:20:4a:55:7e:98:05:02:49:02:59:a3:00:f2:53:31:9d:bb:
         98:53:c7:d3:89:63:a5:3f:28:b3:52:03:85:b3:8f:1f:5d:8a:
         aa:0b:4a:79:ac:2b:89:d9:33:73:a6:c2:d0:7a:20:c0:09:87:
         8a:32:51:c8:18:f7:f3:9f:dc:99:dc:a4:19:4b:dc:52:56:6b:
         30:64:9d:93:fa:7f:7f:77:5d:24:b1:07:83:b0:b0:ff:99:61:
         c9:00:62:9a:9c:64:10:0f:a1:bb:4f:9b:2a:b2:05:66:f4:f7:
         da:3d:d0:2b:d7:12:1c:4c:6d:52:ec:2e:10:3f:20:3b:a8:26:
         af:86:0e:35:4c:c7:c9:3b:01:e5:7f:11:7d:e8:b9:0b:b7:ed:
         e1:4e:41:7f:05:c0:86:57:26:c1:2b:2b:a3:41:22:7a:62:b4:
         a9:c3:bc:aa:0e:9f:99:2e:1c:32:75:84:ca:23:c5:aa:b9:6a:
         f4:28:c4:b9:b6:25:fa:6c:23:dc:21:9d:c7:04:d4:ba:ca:1b:
         85:6f:ab:6a:bc:27:4d:9c:31:32:18:12:5c:e5:b7:59:a0:4d:
         d2:3b:11:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----