Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/90B9C3FAC6EC11F19F8CADE6CE1D38B0.roa
File:                     90B9C3FAC6EC11F19F8CADE6CE1D38B0.roa (raw, json)
Hash identifier:          aLgb9OSivFu0JIZ/HxZ2TqCDOq5mfquW4oiBAi05nHw=
Subject key identifier:   15:EB:9F:9A:05:83:A1:5B:8A:54:5B:4B:E3:FB:81:79:B4:A6:38:08
Certificate issuer:       /CN=F364712FAF/serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
Certificate serial:       0942
Authority key identifier: 3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/90B9C3FAC6EC11F19F8CADE6CE1D38B0.roa
Signing time:             Tue 13 Oct 2026 09:57:57 +0000
ROA not before:           Tue 13 Oct 2026 09:57:52 +0000
ROA not after:            Wed 31 Dec 2036 09:57:52 +0000
asID:                     13335
IP address blocks:        196.207.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 16 Oct 2026 02:05:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2370 (0x942)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364712FAF, serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
        Validity
            Not Before: Oct 13 09:57:52 2026 GMT
            Not After : Dec 31 09:57:52 2036 GMT
        Subject: CN=6ace00a5-2099
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:5d:7b:b9:90:f4:5a:62:ec:e8:f5:dd:71:67:
                    29:8b:fb:80:43:b3:42:6c:f8:2f:9c:66:2d:74:cf:
                    ce:12:24:38:b3:de:a6:dc:9b:9f:07:09:ed:0d:4d:
                    46:05:6f:97:3a:ce:d4:dd:9c:25:de:fb:c6:28:4a:
                    6a:d7:e7:20:5f:e5:bd:de:b0:53:61:9e:ea:62:98:
                    6b:63:06:64:07:3e:f9:30:2e:ec:14:5b:78:38:9d:
                    bd:2c:c2:74:c3:64:7a:31:75:e2:9e:3a:f8:c2:02:
                    13:42:10:d7:33:99:12:2d:57:26:f5:e1:ae:f3:b3:
                    d2:67:17:1c:28:62:5c:38:ec:1e:1d:a2:76:24:08:
                    f4:96:f4:29:4a:fc:86:89:3f:3e:2d:a7:ea:ca:fa:
                    0d:50:d4:5c:94:33:59:3e:1e:d5:51:6e:86:f1:f0:
                    52:ca:ca:64:7b:58:df:47:97:dc:c2:f5:98:ab:ea:
                    0c:0d:23:f1:61:f4:77:4e:18:19:14:5d:98:bb:64:
                    6a:06:ca:be:48:85:a0:17:3d:72:eb:fb:4f:1a:c0:
                    98:08:77:18:fb:d0:91:49:b7:07:e5:12:cd:3f:2b:
                    ae:05:a3:d3:c6:86:7d:92:68:13:84:42:5f:02:86:
                    81:f9:14:61:ca:b4:e8:39:6e:6a:19:cc:74:0f:b7:
                    3c:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:EB:9F:9A:05:83:A1:5B:8A:54:5B:4B:E3:FB:81:79:B4:A6:38:08
            X509v3 Authority Key Identifier:
                keyid:3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/90B9C3FAC6EC11F19F8CADE6CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.207.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:ce:d4:b5:71:10:fc:2d:a3:ca:6b:fe:c1:76:c0:d5:99:3f:
         9d:10:32:67:7c:24:ed:9d:8f:fc:3b:c5:21:83:a5:26:42:a5:
         eb:1b:cf:43:bf:21:cd:fc:cc:64:a1:dc:73:26:2d:ee:d7:eb:
         0f:f7:4d:7b:f4:c4:ed:fa:1f:68:c6:e9:03:ce:1b:82:e2:4c:
         4f:57:92:77:64:af:5e:d2:9f:35:02:b8:3f:ee:71:ab:4c:0c:
         b9:a9:f7:09:0d:5f:77:ce:ed:8a:c5:b5:56:bf:e9:df:3e:c4:
         62:8d:20:94:83:d3:35:c6:92:56:b7:aa:dc:ed:bd:25:84:3b:
         37:ef:77:28:ec:85:13:63:e2:aa:e6:e4:ab:73:33:1e:fc:e8:
         54:14:e0:64:3e:ef:74:0a:34:71:48:7e:54:5c:55:68:38:07:
         9d:66:cc:18:56:13:f5:74:5c:a3:e8:44:2c:43:3b:04:84:56:
         e9:b3:7f:64:7e:6b:61:16:f9:6d:42:cb:1b:46:d6:13:6a:4d:
         a9:11:a3:e7:fa:a1:7d:ee:69:c0:93:e6:64:0d:f9:ee:98:13:
         2b:84:d1:9a:52:48:6c:4a:76:20:71:31:2e:7c:40:d9:21:10:
         b1:b7:8f:32:f4:1b:e1:7d:83:d1:b5:96:96:53:bb:5d:e6:6c:
         c1:2c:de:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----