Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/CBFB5E548A4411F1BE53281ACF1D38B0.roa
File:                     CBFB5E548A4411F1BE53281ACF1D38B0.roa (raw, json)
Hash identifier:          IpRkc/eCZ12PyWVeOxAIwFy3gBAvmVRQx/VDfgfh9+4=
Subject key identifier:   AA:2C:B6:40:26:2B:73:91:0B:2B:4E:8B:27:D2:8C:06:A7:68:0D:A3
Certificate issuer:       /CN=F3682104AF/serialNumber=8B1026953ECF7C4CE139FE9A59BDD7228A153544
Certificate serial:       0979
Authority key identifier: 8B:10:26:95:3E:CF:7C:4C:E1:39:FE:9A:59:BD:D7:22:8A:15:35:44
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ixAmlT7PfEzhOf6aWb3XIooVNUQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/CBFB5E548A4411F1BE53281ACF1D38B0.roa
Signing time:             Tue 28 Jul 2026 05:25:51 +0000
ROA not before:           Tue 28 Jul 2026 05:25:47 +0000
ROA not after:            Fri 31 Jul 2043 05:25:47 +0000
asID:                     198949
IP address blocks:        105.48.0.0/12 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/ixAmlT7PfEzhOf6aWb3XIooVNUQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/ixAmlT7PfEzhOf6aWb3XIooVNUQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ixAmlT7PfEzhOf6aWb3XIooVNUQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 30 Jul 2026 06:39:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2425 (0x979)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682104AF, serialNumber=8B1026953ECF7C4CE139FE9A59BDD7228A153544
        Validity
            Not Before: Jul 28 05:25:47 2026 GMT
            Not After : Jul 31 05:25:47 2043 GMT
        Subject: CN=6a683d5f-7cfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:ec:e8:29:be:da:0a:b5:8e:37:94:3e:16:15:
                    f8:bc:65:6c:c6:99:ea:77:a0:26:f7:d1:c8:02:cc:
                    f6:96:23:8d:81:76:3c:69:1a:07:59:c5:7b:8f:93:
                    43:dd:e2:1f:f4:a9:e8:77:66:96:3a:10:8a:75:a0:
                    e0:dc:43:5b:26:52:31:2b:b2:18:df:05:8c:8f:8c:
                    f8:24:9c:66:15:54:8f:04:40:8c:5c:1e:fc:5c:54:
                    e6:cd:5a:58:50:28:37:74:7a:99:70:fc:34:77:1f:
                    9b:d8:20:eb:d8:de:22:08:a8:02:b8:e4:1c:a6:10:
                    07:79:76:4f:2d:d6:05:f4:f5:b9:9b:1f:31:6f:63:
                    cc:f0:6d:d3:88:ee:9a:c6:77:c0:cf:87:0f:35:2e:
                    5d:74:bf:44:db:23:8d:26:cd:71:fd:f4:45:6f:10:
                    fb:a2:b6:20:50:ba:9b:a2:c0:71:d6:f8:cd:4b:33:
                    71:26:5d:d8:65:73:0f:80:88:eb:e3:eb:fd:84:69:
                    38:4c:25:6d:1e:f0:76:a8:c4:ad:66:e3:fc:d4:e2:
                    7f:1a:f9:2c:bc:0a:51:a6:4e:be:26:2e:c3:75:f5:
                    65:91:97:b4:f9:2c:89:e8:8f:f8:66:d5:29:02:64:
                    eb:68:96:b5:f5:62:29:25:3c:db:f0:ab:a7:2b:ae:
                    73:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:2C:B6:40:26:2B:73:91:0B:2B:4E:8B:27:D2:8C:06:A7:68:0D:A3
            X509v3 Authority Key Identifier:
                keyid:8B:10:26:95:3E:CF:7C:4C:E1:39:FE:9A:59:BD:D7:22:8A:15:35:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/ixAmlT7PfEzhOf6aWb3XIooVNUQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ixAmlT7PfEzhOf6aWb3XIooVNUQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/CBFB5E548A4411F1BE53281ACF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  105.48.0.0/12

    Signature Algorithm: sha256WithRSAEncryption
         8a:aa:20:5e:39:aa:16:69:34:bf:79:41:5a:56:57:99:d9:a7:
         b9:42:3e:f6:25:ab:87:3b:0f:0b:15:68:22:b0:6e:0b:8b:30:
         23:ac:55:87:39:45:ba:e3:a5:1c:df:b0:77:dd:fd:8a:5d:97:
         08:16:ca:b0:59:59:7a:2c:fe:78:f4:95:4a:07:d1:2e:c9:86:
         1e:e5:5b:85:af:5a:47:f7:cc:47:d7:91:ee:b3:a1:50:36:0c:
         10:e3:d8:ca:50:19:e9:de:aa:5c:9e:f3:2c:ca:2f:26:12:1a:
         d7:99:07:ef:94:f7:2f:21:d5:9c:ec:b8:01:d1:28:03:89:8e:
         a8:6a:79:be:11:a2:75:6d:8a:98:d6:93:41:63:88:59:3b:af:
         49:3e:28:a5:c2:b1:86:ee:85:55:f2:a9:f4:cc:18:3a:ab:44:
         e3:54:a6:d0:a3:a4:2a:55:35:71:9b:5c:80:e7:12:9c:09:da:
         c4:3e:26:50:09:4f:e2:14:2f:bd:3a:3b:a8:2b:9a:6a:eb:9b:
         14:e5:d9:90:13:30:9c:0e:37:9d:3e:81:96:d6:19:65:5b:1b:
         88:fe:ad:aa:4d:a3:d5:b6:2a:ed:ba:2e:fc:65:78:7a:43:49:
         eb:6b:fe:5b:a2:90:bb:60:db:87:e9:2f:64:5e:ea:05:51:c6:
         db:d8:d2:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----