Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3686F75/A60780961D3511ECB510340AD8A014CE/BE375CAA962911F1878869DCCE1D38B0.roa
File:                     BE375CAA962911F1878869DCCE1D38B0.roa (raw, json)
Hash identifier:          Y3X1SBiD4AkB1iF8TfEGnqcGwMoyf7vwpW8s0D8Pl5I=
Subject key identifier:   F0:97:84:6B:8F:F1:FD:0F:CB:DD:EA:4D:9A:67:28:F2:E1:0E:18:53
Certificate issuer:       /CN=F3686F75AF/serialNumber=D99770F8F9B62DD036EDE741F2702CDDD640DE1E
Certificate serial:       072A
Authority key identifier: D9:97:70:F8:F9:B6:2D:D0:36:ED:E7:41:F2:70:2C:DD:D6:40:DE:1E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/2Zdw-Pm2LdA27edB8nAs3dZA3h4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3686F75/A60780961D3511ECB510340AD8A014CE/BE375CAA962911F1878869DCCE1D38B0.roa
Signing time:             Wed 12 Aug 2026 08:42:26 +0000
ROA not before:           Wed 12 Aug 2026 08:42:22 +0000
ROA not after:            Tue 31 Dec 2030 08:42:22 +0000
asID:                     327866
IP address blocks:        196.49.13.0/24 maxlen: 24
                          196.223.41.0/24 maxlen: 24
                          2001:43f8:a10::/48 maxlen: 48
                          2001:43f8:a11::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3686F75/A60780961D3511ECB510340AD8A014CE/2Zdw-Pm2LdA27edB8nAs3dZA3h4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3686F75/A60780961D3511ECB510340AD8A014CE/2Zdw-Pm2LdA27edB8nAs3dZA3h4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/2Zdw-Pm2LdA27edB8nAs3dZA3h4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 02:24:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1834 (0x72a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3686F75AF, serialNumber=D99770F8F9B62DD036EDE741F2702CDDD640DE1E
        Validity
            Not Before: Aug 12 08:42:22 2026 GMT
            Not After : Dec 31 08:42:22 2030 GMT
        Subject: CN=6a7c31f2-0068
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:23:2d:cc:c7:de:c7:25:bb:5e:a1:af:fc:a1:
                    c2:da:92:95:3a:61:de:3a:de:25:9e:55:11:a0:dd:
                    ce:7f:2e:7e:09:f1:4c:b6:24:f6:0e:50:04:0a:58:
                    ad:9a:33:c0:62:eb:bc:fa:b5:fc:cf:19:40:1e:0c:
                    82:20:5d:01:ab:7f:23:f7:31:72:cf:90:94:dd:68:
                    d7:8f:e9:6c:0c:21:8d:a1:44:cd:6f:01:d7:02:8c:
                    35:a1:ce:02:f0:af:f4:22:83:bb:9c:51:cc:03:65:
                    38:db:b4:c2:eb:75:5f:a4:1f:42:bf:a4:a3:26:4f:
                    5e:24:92:57:72:5c:3d:f6:e4:1a:0b:a4:69:db:92:
                    5f:22:2f:2d:22:5e:b7:f0:1f:fa:d1:48:ab:4b:33:
                    6f:b0:4d:95:6d:e3:74:55:7f:84:ee:b5:a6:6f:0e:
                    51:29:7d:05:6d:1e:04:e2:13:08:14:63:fe:80:34:
                    93:da:f5:a6:a5:da:d8:ac:ec:da:f3:d5:03:90:ab:
                    18:d4:2c:ac:a3:71:ae:83:7b:3d:be:f9:28:29:a3:
                    6c:19:79:68:fe:8e:78:14:45:1c:60:80:24:ae:ec:
                    30:24:80:22:f6:7d:aa:9f:3e:9c:0a:ef:e8:b1:23:
                    82:14:aa:82:8b:37:26:a4:f3:a0:1f:f8:37:42:1e:
                    80:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:97:84:6B:8F:F1:FD:0F:CB:DD:EA:4D:9A:67:28:F2:E1:0E:18:53
            X509v3 Authority Key Identifier:
                keyid:D9:97:70:F8:F9:B6:2D:D0:36:ED:E7:41:F2:70:2C:DD:D6:40:DE:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3686F75/A60780961D3511ECB510340AD8A014CE/2Zdw-Pm2LdA27edB8nAs3dZA3h4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2Zdw-Pm2LdA27edB8nAs3dZA3h4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3686F75/A60780961D3511ECB510340AD8A014CE/BE375CAA962911F1878869DCCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.49.13.0/24
                  196.223.41.0/24
                IPv6:
                  2001:43f8:a10::/47

    Signature Algorithm: sha256WithRSAEncryption
         11:ed:5f:a2:58:f1:f4:b0:e5:ea:87:c5:18:5a:66:2c:7a:ef:
         77:05:60:74:5c:19:ba:cb:1a:a4:ee:97:fc:81:c0:60:f4:eb:
         03:c7:03:f8:76:90:95:c5:e4:4e:43:dc:63:55:cf:84:14:83:
         91:a1:ce:d0:2f:98:32:7a:07:5c:ae:aa:8a:dd:8e:51:93:93:
         18:25:ad:b0:62:0f:b6:de:7e:4d:0d:ed:ad:4e:fe:11:44:9a:
         45:17:a3:49:a0:88:d5:3d:71:34:0b:fc:64:56:c5:1a:d8:71:
         9a:33:2a:00:24:16:fb:91:51:f0:1e:02:3a:0f:92:98:1b:30:
         66:5b:2f:d3:f0:a1:a6:c5:5d:f3:fa:33:64:60:06:af:18:04:
         0a:b0:81:a1:1b:36:6c:f2:94:2e:83:94:75:1d:b9:62:c4:cd:
         e9:e2:8c:1c:93:82:89:95:93:e4:2d:cb:0e:b6:bf:19:a2:fb:
         12:88:fd:24:e5:fc:48:de:5e:8c:44:5f:4d:c3:5d:b0:90:6d:
         59:e0:ea:9f:21:40:df:1a:b3:06:0e:f7:5e:a1:53:89:3f:09:
         04:a8:21:00:53:32:7f:d3:70:3a:d2:a4:9b:09:80:08:bd:98:
         e0:31:35:56:b9:f8:1e:be:c8:fd:c6:cb:12:e3:6b:98:1d:44:
         75:11:91:9a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----