Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/BC9B8D32D5FB11F1BE004AE8CE1D38B0.roa
File:                     BC9B8D32D5FB11F1BE004AE8CE1D38B0.roa (raw, json)
Hash identifier:          /OSvfHIbw3wARamc7JQKaJE7PPOmnLVJN5qj0ptI0Yo=
Subject key identifier:   03:A7:77:8F:15:BC:A1:FD:49:64:E0:EF:0C:E0:B7:8F:BC:5A:D0:9C
Certificate issuer:       /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial:       1361
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/BC9B8D32D5FB11F1BE004AE8CE1D38B0.roa
Signing time:             Sun 01 Nov 2026 13:54:21 +0000
ROA not before:           Sun 01 Nov 2026 13:54:16 +0000
ROA not after:            Tue 30 Nov 2027 13:54:16 +0000
asID:                     29802
IP address blocks:        196.251.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 07 Nov 2026 00:08:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4961 (0x1361)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
        Validity
            Not Before: Nov  1 13:54:16 2026 GMT
            Not After : Nov 30 13:54:16 2027 GMT
        Subject: CN=6ae7448c-26ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:96:42:01:a3:39:88:57:c4:be:b8:65:5c:18:
                    bd:63:a7:77:51:fc:e6:58:d5:9a:d4:7e:b3:99:fe:
                    c1:c7:b2:ff:58:f6:e8:54:50:27:ae:ba:07:c8:06:
                    8a:84:61:8b:97:2a:54:e7:3a:3d:b5:06:48:2a:ee:
                    68:19:d0:d0:76:58:0a:ae:fb:ff:a7:94:88:79:84:
                    c9:f9:42:a5:4d:2a:b9:ee:d6:e7:8a:69:6f:e1:3f:
                    21:23:cb:29:8e:15:55:79:7e:fd:60:a0:da:65:a0:
                    01:45:bd:92:41:0b:70:9e:5c:1b:59:f4:6f:a2:9c:
                    0c:ae:b6:a2:d8:d3:e0:91:fa:b6:e1:3e:9f:e7:1d:
                    c8:98:67:56:48:d1:33:36:71:75:74:5b:46:c9:57:
                    eb:14:2e:b4:90:3a:c6:24:15:bd:ed:50:06:6b:75:
                    8d:2b:ed:fa:da:ff:a9:da:a5:26:f4:0b:40:4e:18:
                    3c:49:45:dd:ee:48:3d:6b:1e:39:2b:3a:0a:71:77:
                    28:3d:13:89:1c:af:18:d0:0e:05:36:d9:69:67:30:
                    8d:20:ac:22:f7:cc:5d:fe:1e:d7:07:d1:f1:36:cb:
                    d2:71:06:e1:c0:0d:50:30:b7:fa:35:e1:ac:e5:da:
                    d3:68:e6:c7:c0:8b:56:74:53:a9:c1:f3:b9:5d:35:
                    83:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:A7:77:8F:15:BC:A1:FD:49:64:E0:EF:0C:E0:B7:8F:BC:5A:D0:9C
            X509v3 Authority Key Identifier:
                keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/BC9B8D32D5FB11F1BE004AE8CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.251.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:bc:aa:06:a3:d6:25:39:73:6d:f8:63:72:ec:46:5c:5c:1e:
         1d:ee:f2:8b:d0:51:64:2a:f3:1c:01:f1:cf:cc:46:d0:88:2b:
         f0:29:4b:6e:9a:0a:8b:48:81:24:80:3a:15:6b:9e:ca:13:4a:
         f0:27:a2:cb:87:34:36:1f:51:34:78:fa:d1:4f:0a:e5:8c:e5:
         1d:48:2e:04:4c:1d:f1:2a:47:4e:a8:79:ab:cc:37:27:56:79:
         4c:c9:cb:e4:de:8c:99:1b:51:63:17:21:4d:61:1f:82:e0:e5:
         a6:07:d0:70:ac:5c:35:3b:59:34:8e:c3:9a:f2:50:52:4b:2a:
         a6:1c:e1:89:ce:15:2a:3b:55:15:d5:0d:e0:95:b3:5d:6b:c3:
         96:c5:01:d3:41:d7:a2:ec:5c:d4:b0:72:bf:c1:68:1d:cc:12:
         d6:cf:ff:24:e4:91:4d:53:0c:71:0e:07:c4:f2:3a:8a:c6:44:
         6a:88:45:88:c0:52:50:27:23:41:eb:0d:63:bb:78:ff:c4:1e:
         d3:d0:15:8e:65:12:5b:e2:c0:e6:ff:a8:62:42:b3:c6:65:c1:
         0f:03:8d:f5:0d:30:0d:48:cb:c1:3a:c7:fc:00:21:16:35:80:
         7e:72:6a:22:8b:fb:e9:da:85:a5:c1:36:df:52:a6:10:d7:f2:
         36:85:81:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----