Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3693944/16AA8A44207611ECB3060925D8A014CE/9E1E04DAC42A11F195A36CD8CE1D38B0.roa
File:                     9E1E04DAC42A11F195A36CD8CE1D38B0.roa (raw, json)
Hash identifier:          N2Ari3VqP125GfUVmY/HdUpQCynCdIpetGzSelUfNiY=
Subject key identifier:   81:91:95:CA:80:95:AD:93:43:DD:E1:8E:E1:B5:29:41:7A:AA:60:DF
Certificate issuer:       /CN=F3693944AF/serialNumber=D181E91ED173F64D7BF82D8E0BEF994D5986DF52
Certificate serial:       0768
Authority key identifier: D1:81:E9:1E:D1:73:F6:4D:7B:F8:2D:8E:0B:EF:99:4D:59:86:DF:52
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/0YHpHtFz9k17-C2OC--ZTVmG31I.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3693944/16AA8A44207611ECB3060925D8A014CE/9E1E04DAC42A11F195A36CD8CE1D38B0.roa
Signing time:             Fri 09 Oct 2026 21:44:35 +0000
ROA not before:           Sat 10 Oct 2026 21:44:28 +0000
ROA not after:            Fri 10 Oct 2031 21:44:28 +0000
asID:                     329191
IP address blocks:        2c0f:1900::/32 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3693944/16AA8A44207611ECB3060925D8A014CE/0YHpHtFz9k17-C2OC--ZTVmG31I.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3693944/16AA8A44207611ECB3060925D8A014CE/0YHpHtFz9k17-C2OC--ZTVmG31I.mft
                          rsync://rpki.afrinic.net/repository/afrinic/0YHpHtFz9k17-C2OC--ZTVmG31I.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 16 Oct 2026 00:11:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1896 (0x768)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3693944AF, serialNumber=D181E91ED173F64D7BF82D8E0BEF994D5986DF52
        Validity
            Not Before: Oct 10 21:44:28 2026 GMT
            Not After : Oct 10 21:44:28 2031 GMT
        Subject: CN=6ac96043-1742
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:dd:72:3e:88:6b:c0:ba:e1:87:40:3e:83:3e:
                    37:13:d5:d5:80:5e:09:e9:82:2b:b3:29:c4:a5:4e:
                    d7:6f:db:ce:e3:d5:b5:98:5f:13:ac:d5:40:2a:6d:
                    27:af:ee:22:24:92:b9:e9:02:21:f4:8d:51:9c:1d:
                    bc:d0:05:fa:f1:e7:6a:88:71:d3:3b:d8:22:77:f6:
                    db:7a:58:1c:6a:b5:60:b6:2b:7f:8f:c6:7e:48:7f:
                    16:a6:5a:37:f0:6b:a6:11:ea:a8:5e:09:a9:61:2e:
                    b5:42:3f:9f:4c:fe:0d:00:5c:dc:2c:3d:1f:ef:c8:
                    fa:5e:54:06:4b:00:2d:3b:0d:9e:6a:33:f9:56:6b:
                    db:13:8f:cb:0f:83:cc:dc:bc:3e:bd:9c:ba:a5:11:
                    c0:e9:22:a7:f4:0b:03:05:21:5e:5f:2e:08:69:92:
                    af:5e:bf:2c:0d:3b:12:64:3d:d8:4b:8b:17:f9:36:
                    48:e1:30:76:40:0b:ba:3b:bd:07:27:e7:ea:f8:b7:
                    f2:28:0f:4d:49:ac:c9:3b:2d:cc:c3:35:c4:dc:74:
                    8b:24:13:af:1f:d3:a5:ff:ae:f9:70:f4:23:5b:2f:
                    45:cd:22:00:a9:93:3f:e5:d8:98:be:43:d4:e3:16:
                    17:ce:08:19:b1:c0:5d:e3:19:3c:7b:35:8d:c3:94:
                    a4:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:91:95:CA:80:95:AD:93:43:DD:E1:8E:E1:B5:29:41:7A:AA:60:DF
            X509v3 Authority Key Identifier:
                keyid:D1:81:E9:1E:D1:73:F6:4D:7B:F8:2D:8E:0B:EF:99:4D:59:86:DF:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3693944/16AA8A44207611ECB3060925D8A014CE/0YHpHtFz9k17-C2OC--ZTVmG31I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0YHpHtFz9k17-C2OC--ZTVmG31I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3693944/16AA8A44207611ECB3060925D8A014CE/9E1E04DAC42A11F195A36CD8CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:1900::/32

    Signature Algorithm: sha256WithRSAEncryption
         ab:73:a0:ef:19:ba:8c:c7:5c:c5:3f:68:2e:11:a1:73:61:d6:
         9f:38:3d:13:3c:eb:ff:32:bf:3b:52:5a:5b:04:c1:f4:0f:8a:
         64:4b:74:c2:bf:fd:a4:c0:2f:4d:3e:a1:00:b7:20:e9:14:88:
         a1:26:cd:30:3c:bd:45:9d:7d:b4:35:92:53:0d:ed:c6:dd:ad:
         a9:7e:f1:e4:d3:64:c5:2e:3a:eb:13:03:de:9d:40:4d:c7:7b:
         19:1c:bc:dd:81:9b:e9:77:42:13:e0:b2:7b:80:ff:39:d4:9c:
         62:87:f7:72:09:4f:a1:b6:e1:59:95:9b:4f:65:0a:c9:c3:0e:
         1b:16:74:a3:fc:cc:0f:3b:9c:50:c0:76:e7:46:3d:53:b6:5c:
         f9:10:4c:34:8b:1e:12:0c:25:90:c0:84:ea:81:22:66:c5:21:
         b9:89:de:6d:20:66:50:de:bf:c3:be:2e:f8:e1:45:08:c2:f6:
         cb:b0:b1:25:6b:b1:c4:2c:db:7f:49:68:7c:0c:b0:94:b8:06:
         eb:55:7d:1d:1b:0f:f8:f6:ec:42:e9:e4:68:2d:ea:6e:9f:ba:
         99:65:57:16:9e:3e:0f:c3:92:7e:6c:51:9f:44:cb:3b:f8:ea:
         08:98:7a:81:e0:27:d0:c9:c0:0e:36:71:e9:87:03:d2:9e:b4:
         0c:bb:bf:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----