Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3687682/DB80ADB8009211EF9BC14D0D017001B1/BC30116296F211F18CC449A8CE1D38B0.roa
File:                     BC30116296F211F18CC449A8CE1D38B0.roa (raw, json)
Hash identifier:          ORQ7n3coekVtJLCpiwAISUj5z1s9Sm9EXvcBSK7c524=
Subject key identifier:   0B:AA:BC:E2:3B:97:96:F8:94:9A:09:C4:74:2D:3B:F9:3C:55:9D:E6
Certificate issuer:       /CN=F3687682AF/serialNumber=EE1796E0EC5913D8C88FBABAF1F80A459CEE3939
Certificate serial:       036D
Authority key identifier: EE:17:96:E0:EC:59:13:D8:C8:8F:BA:BA:F1:F8:0A:45:9C:EE:39:39
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/7heW4OxZE9jIj7q68fgKRZzuOTk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3687682/DB80ADB8009211EF9BC14D0D017001B1/BC30116296F211F18CC449A8CE1D38B0.roa
Signing time:             Thu 13 Aug 2026 08:41:11 +0000
ROA not before:           Thu 13 Aug 2026 08:41:07 +0000
ROA not after:            Wed 13 Aug 2036 08:41:07 +0000
asID:                     31856
IP address blocks:        196.44.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3687682/DB80ADB8009211EF9BC14D0D017001B1/7heW4OxZE9jIj7q68fgKRZzuOTk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3687682/DB80ADB8009211EF9BC14D0D017001B1/7heW4OxZE9jIj7q68fgKRZzuOTk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/7heW4OxZE9jIj7q68fgKRZzuOTk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 14 Sep 2026 00:08:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 877 (0x36d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3687682AF, serialNumber=EE1796E0EC5913D8C88FBABAF1F80A459CEE3939
        Validity
            Not Before: Aug 13 08:41:07 2026 GMT
            Not After : Aug 13 08:41:07 2036 GMT
        Subject: CN=6a7d8327-b4c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:03:89:70:ca:78:a9:c1:ae:b0:38:1c:82:27:
                    13:68:d5:13:3f:02:d9:11:cd:38:13:c5:32:1f:d2:
                    b2:df:8b:0f:4f:b4:c5:ea:d6:29:9f:4d:52:c4:72:
                    48:cd:b3:d0:70:81:b8:87:72:f2:af:2a:7f:ac:28:
                    01:4d:09:3c:5c:10:6f:74:da:ad:20:da:95:2a:16:
                    62:00:9e:d7:4a:9a:fc:1c:f9:63:4b:19:7c:a2:b2:
                    2b:d9:61:33:2e:d2:10:b3:1e:bf:80:c0:79:bb:81:
                    ab:e2:72:ae:ec:84:4a:2f:e0:68:d8:7b:6e:62:7b:
                    7d:cf:69:39:21:cc:2e:2d:04:cf:e8:82:8e:fa:3b:
                    f0:0a:c4:1d:fb:be:85:50:7e:96:b1:14:7b:e4:dc:
                    4f:b5:94:d5:99:48:01:8e:ca:32:d4:66:9f:59:ed:
                    e0:69:ab:21:ea:1d:79:67:57:c1:ca:08:a1:fa:9e:
                    39:df:36:74:fc:a8:a9:3a:96:d3:d3:95:a4:54:84:
                    59:1a:ea:03:a6:5b:18:28:07:e6:03:0d:ea:77:18:
                    5d:d1:f6:f1:dd:3e:ad:47:fa:1a:ed:87:81:dc:0b:
                    ca:cd:4e:f5:31:62:cb:ba:e7:15:a4:d4:64:87:d8:
                    87:4a:4c:c6:8e:87:7c:71:e4:8a:93:f2:31:ae:17:
                    0d:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:AA:BC:E2:3B:97:96:F8:94:9A:09:C4:74:2D:3B:F9:3C:55:9D:E6
            X509v3 Authority Key Identifier:
                keyid:EE:17:96:E0:EC:59:13:D8:C8:8F:BA:BA:F1:F8:0A:45:9C:EE:39:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3687682/DB80ADB8009211EF9BC14D0D017001B1/7heW4OxZE9jIj7q68fgKRZzuOTk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/7heW4OxZE9jIj7q68fgKRZzuOTk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3687682/DB80ADB8009211EF9BC14D0D017001B1/BC30116296F211F18CC449A8CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.44.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d8:cc:60:a4:84:bf:7a:09:1a:14:01:5d:21:83:81:b4:5e:00:
         c3:ea:ac:7e:5f:ca:cc:82:4d:e7:dc:1e:4d:50:e4:ec:a6:e5:
         39:51:ba:7f:e3:5e:ac:c7:f5:ca:2c:8e:44:09:c3:75:61:f8:
         fc:3f:ed:c2:af:fe:3d:63:1b:17:27:8e:68:c9:a3:d8:77:a5:
         da:f9:84:51:9a:a2:fc:6b:f4:6f:74:4f:a7:ee:75:b8:05:33:
         a3:6e:95:2d:ec:a2:ce:86:e7:3b:84:e0:ff:7b:c6:b8:59:06:
         20:20:15:4e:f6:7d:db:32:e0:4c:66:04:45:a6:a6:ea:ab:c8:
         9c:91:c7:2f:ae:9b:5f:f8:6f:94:d1:10:9e:62:d8:c5:ab:53:
         c9:0a:c6:71:0e:9c:57:35:3f:a5:2a:ce:b0:c0:52:cc:ac:45:
         c3:4e:2b:6d:7f:d3:7d:6e:b8:82:d7:3c:88:43:6f:17:a0:ad:
         ec:44:0e:51:c6:02:bc:fa:5b:3b:db:77:a1:5c:8b:05:1f:f7:
         07:95:4f:b8:55:ba:e6:ec:be:f1:5f:47:3b:d8:a5:db:bf:3b:
         35:4f:ba:d3:a0:fa:13:4f:ed:e4:6e:be:c7:fa:20:ab:a1:e1:
         40:91:e6:fe:05:9d:d9:57:3f:8f:49:86:14:3e:fb:62:4c:d8:
         88:c3:09:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----