Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/4C48DC2ABB4211F1A0983CADCE1D38B0.roa
File:                     4C48DC2ABB4211F1A0983CADCE1D38B0.roa (raw, json)
Hash identifier:          8rgcFVSm/Jjk1irQEfmnhYkRN0kGWaodsElRF3BBqPA=
Subject key identifier:   FA:92:2E:F9:49:C0:1D:74:1E:3B:F2:97:44:1E:B6:25:7B:78:32:CC
Certificate issuer:       /CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
Certificate serial:       08DF
Authority key identifier: 60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/4C48DC2ABB4211F1A0983CADCE1D38B0.roa
Signing time:             Mon 28 Sep 2026 13:41:25 +0000
ROA not before:           Mon 28 Sep 2026 13:41:21 +0000
ROA not after:            Sat 28 Sep 2030 13:41:21 +0000
asID:                     9009
IP address blocks:        102.215.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 11 Oct 2026 00:07:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2271 (0x8df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3614659AF, serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
        Validity
            Not Before: Sep 28 13:41:21 2026 GMT
            Not After : Sep 28 13:41:21 2030 GMT
        Subject: CN=6aba6e85-dbcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:08:9d:bc:39:47:b7:d5:1e:52:71:68:ad:fe:
                    20:6c:2c:ab:e5:d1:ea:0a:67:88:8c:06:ce:2d:1c:
                    ba:c3:6a:05:61:42:59:bb:b5:2d:26:c7:6e:fc:e7:
                    d1:69:d8:76:37:30:af:1d:9d:34:ea:b6:c1:11:d3:
                    82:5e:ac:d2:60:8b:2a:3e:8f:03:ad:72:58:e5:fe:
                    45:87:c2:ad:93:46:59:d6:55:1b:f0:d2:39:a1:1f:
                    ad:b4:49:7c:c4:67:ea:63:e2:f6:70:2f:d2:cc:31:
                    ac:fa:96:31:07:0d:1f:8f:78:58:db:db:b8:52:15:
                    ff:5c:5d:4d:6f:c4:e3:89:38:31:77:71:ec:c4:db:
                    6b:fa:6c:d9:9b:f6:06:d3:37:64:70:60:f7:96:40:
                    c0:1f:1a:e9:4e:dc:12:7a:15:81:df:5c:f8:68:0a:
                    b7:05:6f:ed:29:26:a6:59:5e:ea:ea:71:d3:e9:31:
                    fe:36:df:15:fd:d6:3b:d8:fa:32:5a:f5:da:cb:12:
                    03:6d:41:a9:64:e1:4d:93:49:91:eb:05:e7:59:39:
                    61:a4:77:aa:f3:49:b4:ff:a3:77:5b:ea:5f:a7:93:
                    89:c0:69:25:27:30:e6:6e:17:3a:1f:60:49:08:c2:
                    94:2d:c2:fe:80:5c:e2:0c:f2:22:ee:5d:e4:e8:b6:
                    73:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:92:2E:F9:49:C0:1D:74:1E:3B:F2:97:44:1E:B6:25:7B:78:32:CC
            X509v3 Authority Key Identifier:
                keyid:60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/4C48DC2ABB4211F1A0983CADCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.215.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:ef:07:ff:f1:a0:77:83:4b:47:c6:d9:8a:62:5d:79:03:f6:
         4c:2b:81:fd:f4:f8:49:c3:27:2f:75:d4:29:7e:12:74:5f:a0:
         9e:e5:9c:31:68:27:23:48:19:6f:07:ca:8e:be:36:21:ae:f5:
         df:82:3b:d0:a6:be:5f:9e:34:e5:0d:c1:f2:cd:04:54:05:d2:
         3f:20:91:66:34:14:41:2e:91:bf:46:c4:1f:58:16:a1:9a:1e:
         89:88:8f:33:cb:38:8f:81:d4:4f:44:a4:4a:65:7a:5d:98:36:
         b4:a4:92:cc:5c:6e:42:69:67:54:81:b6:2b:b5:e9:8f:0f:70:
         d2:3a:82:cb:49:3c:19:60:26:6a:9f:d6:93:a2:21:ae:9b:c9:
         e6:36:2f:6a:74:54:09:dc:b8:71:e7:c3:5a:fc:53:00:cb:33:
         43:10:16:d5:f4:fc:2a:b6:63:44:d6:d8:8d:f8:04:20:15:14:
         41:92:51:7d:0d:34:ac:b1:3d:a5:e0:9c:89:e9:9f:d9:b0:92:
         c2:41:25:05:a7:42:2e:74:69:5d:9e:2f:2d:d4:b2:a5:d2:cf:
         39:71:85:a6:10:9e:5c:dc:84:34:85:4c:82:a3:3f:63:3b:b0:
         96:2d:6a:05:21:6d:65:5f:41:4a:f2:5e:5f:10:ff:ec:a2:47:
         18:d7:72:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----