Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/2625810AD5FB11F1B1DC1CE4CE1D38B0.roa
File:                     2625810AD5FB11F1B1DC1CE4CE1D38B0.roa (raw, json)
Hash identifier:          6eyjbVue8UNWLOWhXq5X6NeCyFB9GLqkEaxc/wAbvrI=
Subject key identifier:   14:F0:6F:8D:9C:4E:C4:11:A6:62:1D:B5:5C:B7:77:11:22:B4:55:24
Certificate issuer:       /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial:       1357
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/2625810AD5FB11F1B1DC1CE4CE1D38B0.roa
Signing time:             Sun 01 Nov 2026 13:50:08 +0000
ROA not before:           Sun 01 Nov 2026 13:50:04 +0000
ROA not after:            Tue 30 Nov 2027 13:50:04 +0000
asID:                     29802
IP address blocks:        196.251.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 07 Nov 2026 00:08:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4951 (0x1357)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
        Validity
            Not Before: Nov  1 13:50:04 2026 GMT
            Not After : Nov 30 13:50:04 2027 GMT
        Subject: CN=6ae74390-096e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c1:d6:c2:76:29:30:72:80:6b:06:25:f8:0d:
                    a0:e7:53:83:43:d5:66:8d:fc:c4:2b:aa:18:95:06:
                    08:ba:04:17:5d:83:ce:25:e7:3c:df:72:a2:de:92:
                    f8:05:3b:93:d2:c6:c2:ab:84:2b:41:9c:6b:d1:9c:
                    75:3f:f7:fa:f6:ff:ee:f4:06:c1:61:4f:9c:96:e6:
                    bb:e2:84:31:80:ec:ed:ad:ef:34:fd:98:74:50:43:
                    20:f1:35:36:90:f1:d2:a0:c1:5a:91:58:f6:05:3f:
                    b7:62:5e:f7:5e:df:54:4c:34:08:d4:ee:dc:c5:a4:
                    9f:28:22:9f:73:10:33:6b:70:90:3a:9a:61:44:4d:
                    3f:87:b4:a9:6a:f3:31:40:48:e6:56:5c:5e:a4:4d:
                    83:c7:83:0d:a8:f0:69:d7:4d:45:27:21:39:33:e2:
                    13:27:55:cf:b7:92:44:44:e5:8f:d2:f9:eb:5d:23:
                    4c:0c:c2:5e:36:15:bd:4f:a3:d2:c4:ac:75:c7:5b:
                    ad:b9:48:e1:47:29:4c:49:3c:e9:8e:99:b6:ed:59:
                    bc:c0:97:3a:44:da:ba:fd:fb:06:d7:94:3f:65:55:
                    3f:9c:e9:61:60:9d:86:4c:e0:ca:58:82:da:21:6c:
                    31:51:8b:0e:33:c0:d3:a3:0b:f1:9a:bf:af:40:7f:
                    c7:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:F0:6F:8D:9C:4E:C4:11:A6:62:1D:B5:5C:B7:77:11:22:B4:55:24
            X509v3 Authority Key Identifier:
                keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/2625810AD5FB11F1B1DC1CE4CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.251.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:ce:cb:15:0a:60:c6:0c:5d:11:d8:75:4c:a3:b0:3e:80:b2:
         71:0f:c6:db:5e:a6:1f:69:4b:a0:b0:2b:49:cf:9c:6c:f4:57:
         e8:5a:c6:1b:c2:e6:81:28:a0:e9:8f:ae:16:b0:21:f4:bc:cc:
         28:23:b5:82:6a:94:ae:fe:25:88:bd:4f:36:9d:5c:f5:7f:90:
         38:1c:f1:e6:78:06:42:a8:b7:34:d1:a3:70:50:05:18:a1:2f:
         fd:11:2a:50:a6:13:52:e9:70:1b:2e:b4:3b:a2:78:73:6f:f4:
         0c:83:da:90:f4:1c:55:da:9e:47:af:19:65:a8:2f:8f:5b:7d:
         b2:54:2d:85:e8:70:a1:c9:46:5f:3d:ae:03:9b:cc:15:6a:26:
         2e:34:35:68:1c:be:e4:1e:ed:61:29:7b:14:26:cc:2a:a3:17:
         78:8f:ac:e9:73:e4:82:da:bc:ac:8a:c4:66:d1:d3:bb:e0:7e:
         5a:08:be:8e:9e:e5:1a:db:a3:45:d2:30:0e:57:81:15:62:07:
         35:60:ec:2b:fa:eb:86:f4:e2:db:0b:da:22:93:7a:80:01:32:
         a9:ec:5d:ef:45:28:77:01:a1:c5:c3:f8:8e:24:eb:b3:46:74:
         7f:c7:4f:3b:c9:a0:e9:37:6f:ea:f7:bf:9c:ba:90:3b:65:8f:
         16:28:ac:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----