Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/70C0347C8A4111F18F253F02CF1D38B0.roa
File:                     70C0347C8A4111F18F253F02CF1D38B0.roa (raw, json)
Hash identifier:          YquXEas7ZBrf+wE8oD5kf3nqV/72UTlW3zUn0oy/Ekg=
Subject key identifier:   11:73:45:0E:DA:0F:83:29:A3:79:F7:AE:29:DE:4D:C0:71:62:83:A7
Certificate issuer:       /CN=F3682104AF/serialNumber=8B1026953ECF7C4CE139FE9A59BDD7228A153544
Certificate serial:       0965
Authority key identifier: 8B:10:26:95:3E:CF:7C:4C:E1:39:FE:9A:59:BD:D7:22:8A:15:35:44
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ixAmlT7PfEzhOf6aWb3XIooVNUQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/70C0347C8A4111F18F253F02CF1D38B0.roa
Signing time:             Tue 28 Jul 2026 05:01:50 +0000
ROA not before:           Tue 28 Jul 2026 05:01:46 +0000
ROA not after:            Wed 31 Dec 2031 05:01:46 +0000
asID:                     19905
IP address blocks:        105.48.0.0/12 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/ixAmlT7PfEzhOf6aWb3XIooVNUQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/ixAmlT7PfEzhOf6aWb3XIooVNUQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ixAmlT7PfEzhOf6aWb3XIooVNUQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 30 Jul 2026 06:39:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2405 (0x965)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682104AF, serialNumber=8B1026953ECF7C4CE139FE9A59BDD7228A153544
        Validity
            Not Before: Jul 28 05:01:46 2026 GMT
            Not After : Dec 31 05:01:46 2031 GMT
        Subject: CN=6a6837be-161e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ee:07:b6:3b:b8:c3:e4:45:b1:5a:bd:04:57:
                    80:53:87:5f:50:52:69:52:fd:96:e8:10:cd:81:6d:
                    f2:83:1c:04:e9:e3:b8:8a:c7:22:83:45:85:dc:2d:
                    25:2a:1c:57:03:1a:77:e7:50:69:c9:6b:71:6c:a4:
                    c1:22:a3:3d:72:c9:af:07:56:61:3c:a7:28:50:68:
                    29:c0:ca:90:e1:d6:fb:25:e6:31:d5:8b:f4:f9:57:
                    c0:0f:d7:8e:9b:81:af:3e:ea:c1:90:a5:7e:f3:fe:
                    3f:0d:43:6a:20:50:1f:8c:35:fc:39:b0:10:5e:89:
                    84:81:53:ef:5d:b6:35:e8:60:3e:d0:3f:a8:a3:ac:
                    f1:00:fc:d5:e6:1e:a7:ca:dc:6a:57:b2:73:78:42:
                    c6:ee:98:f1:43:5a:ae:96:53:9e:92:3b:20:9b:c6:
                    0b:6e:98:59:ee:c7:ef:e3:00:31:d4:d8:90:c4:6c:
                    69:51:4c:ef:30:fa:84:b2:c7:da:8c:35:b6:a2:4d:
                    d1:ba:1a:41:55:9f:21:5c:82:70:bc:7b:45:d7:7c:
                    55:01:1b:1c:15:ad:64:52:39:3a:ea:75:10:aa:4c:
                    a5:1c:12:a3:c7:47:ad:f9:1b:10:fa:0e:5b:11:5c:
                    97:d3:19:f3:c9:67:19:b6:b2:86:b8:95:5c:6d:98:
                    33:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:73:45:0E:DA:0F:83:29:A3:79:F7:AE:29:DE:4D:C0:71:62:83:A7
            X509v3 Authority Key Identifier:
                keyid:8B:10:26:95:3E:CF:7C:4C:E1:39:FE:9A:59:BD:D7:22:8A:15:35:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/ixAmlT7PfEzhOf6aWb3XIooVNUQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ixAmlT7PfEzhOf6aWb3XIooVNUQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/70C0347C8A4111F18F253F02CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  105.48.0.0/12

    Signature Algorithm: sha256WithRSAEncryption
         a8:17:dd:cf:7e:78:19:8f:fa:72:e3:35:4b:d2:cf:75:7a:f2:
         a8:21:05:5f:82:a2:f0:0a:b0:de:a4:96:ca:7f:0a:53:35:0d:
         91:0c:54:6b:8c:a6:70:5e:35:5f:e5:94:a2:7e:0c:1b:c4:57:
         2f:4b:c2:52:0f:34:6f:e1:72:e4:82:89:ac:5e:48:9a:77:dd:
         f0:bb:2e:a3:e4:3b:cb:62:47:4f:56:66:16:f4:fe:35:19:21:
         1d:1f:2e:3d:75:08:94:7f:a1:9a:f2:80:95:e5:f3:a9:81:fa:
         04:33:df:ed:1b:48:de:4c:33:69:4d:80:e6:da:bd:c4:f0:b2:
         4f:e6:70:86:e9:56:72:eb:a5:a5:7d:bc:c3:98:ed:0b:7d:22:
         61:d6:a4:fb:67:16:22:1c:77:ee:1b:3c:98:df:e8:c6:75:13:
         95:29:7c:99:e7:9f:a4:61:25:1b:6b:cd:10:fe:e9:79:b4:3c:
         75:ea:22:6d:18:42:c5:44:f8:b5:3c:88:94:9c:b5:c5:4e:18:
         9c:4e:60:24:aa:ec:ad:47:ae:9f:98:e3:b1:7e:38:2d:2f:33:
         0e:e5:0b:a8:aa:3d:ce:04:51:44:ee:39:b4:e8:97:1b:40:eb:
         59:96:48:94:f0:6d:7a:7e:72:37:a1:16:5a:f8:8f:f6:05:06:
         cc:96:27:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----