Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/377854AAD5FB11F1A23D2BE4CE1D38B0.roa
File:                     377854AAD5FB11F1A23D2BE4CE1D38B0.roa (raw, json)
Hash identifier:          F/o0NoBm45MAHz8wfze28PX2I9xd7w6DyevhfOK6pxM=
Subject key identifier:   E9:59:67:EC:9D:86:A0:C6:82:4F:8A:DC:C0:7F:14:E6:70:F6:11:E4
Certificate issuer:       /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial:       1359
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/377854AAD5FB11F1A23D2BE4CE1D38B0.roa
Signing time:             Sun 01 Nov 2026 13:50:37 +0000
ROA not before:           Sun 01 Nov 2026 13:50:33 +0000
ROA not after:            Tue 30 Nov 2027 13:50:33 +0000
asID:                     29802
IP address blocks:        196.251.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 07 Nov 2026 00:08:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4953 (0x1359)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
        Validity
            Not Before: Nov  1 13:50:33 2026 GMT
            Not After : Nov 30 13:50:33 2027 GMT
        Subject: CN=6ae743ad-dc3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:19:a1:33:1b:0c:f2:63:07:2b:a5:b9:cf:63:
                    3f:a8:ee:ee:2f:7a:1d:16:07:34:a6:8e:66:d7:1c:
                    e5:05:51:76:c9:4a:8c:f6:c8:f2:55:cc:94:46:10:
                    ac:19:21:98:a6:e7:6e:c3:80:24:a7:09:37:d0:ea:
                    f4:35:0d:c7:2f:b6:82:63:29:ab:c8:eb:05:bb:d4:
                    e9:3a:e3:6e:79:e8:84:b5:ae:da:27:4a:68:7b:74:
                    8f:2c:0e:55:29:3b:b3:4e:80:a6:5c:6e:91:37:f9:
                    61:71:88:2d:cd:f6:ef:66:db:d0:bd:39:3d:6c:58:
                    d3:3a:53:81:0c:53:c8:98:6f:f2:9b:b8:1e:1b:e8:
                    50:26:75:20:b6:04:cf:6b:29:c5:f1:77:3b:6d:78:
                    48:fb:a9:37:f7:5c:f9:ff:6c:5d:26:86:57:5a:de:
                    24:8b:82:7b:88:9d:f6:25:e8:3b:ac:e3:b4:36:e4:
                    a5:b9:24:ce:b9:04:5e:11:63:0e:18:ac:ca:2b:c3:
                    74:d6:24:cf:c1:65:f7:73:cf:cc:f5:e3:6d:73:1e:
                    08:a1:9e:00:7b:4b:45:74:f3:e4:cd:30:98:85:0f:
                    b9:e4:ce:48:37:2c:58:af:dd:e7:ff:b2:9e:a2:71:
                    dd:46:ad:81:00:a7:9a:74:1a:5b:eb:49:93:63:2e:
                    79:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:59:67:EC:9D:86:A0:C6:82:4F:8A:DC:C0:7F:14:E6:70:F6:11:E4
            X509v3 Authority Key Identifier:
                keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/377854AAD5FB11F1A23D2BE4CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.251.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:19:0e:36:d2:a6:70:f9:a4:ce:2d:00:6b:0a:72:3b:0c:d7:
         9f:48:4d:42:48:c3:1c:6e:d6:b2:03:f8:8f:58:5a:d6:2e:c6:
         a7:b5:fb:54:b5:5d:6f:bc:09:a7:e2:6c:d9:2e:b8:25:52:fe:
         7d:d6:48:a7:a9:78:0d:40:e8:ed:55:20:2d:97:bd:17:80:b6:
         86:4d:4d:d9:0e:57:3b:fe:d2:38:bb:44:00:cc:98:96:f2:9c:
         b4:5c:7c:f3:a5:22:60:52:44:d3:51:f8:94:71:55:de:2f:45:
         99:32:b7:9f:3d:e1:de:c9:4d:9b:78:87:be:49:09:a3:4a:cc:
         4c:d6:32:9d:be:fd:4b:6a:71:8e:98:54:45:3a:2e:83:70:cc:
         ae:e7:d2:f6:8f:aa:d9:35:52:31:f6:f7:f8:fb:70:a8:57:06:
         03:29:2e:e1:a0:54:0f:fc:a8:90:3d:ca:29:9d:60:23:4a:ec:
         a0:54:c5:ec:2f:e2:27:9f:4e:18:55:fe:7f:d8:17:2f:3c:a8:
         51:70:c0:6b:d6:67:84:cd:7c:d9:6c:d8:49:37:b4:58:89:bd:
         46:82:30:80:2f:30:1f:d1:da:ea:61:a1:68:6d:6f:d7:94:84:
         cd:4b:21:31:d6:03:e3:b3:81:aa:23:08:f4:e8:04:51:ff:eb:
         e5:1c:5c:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----