Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3623C61/D0EF4604DBB711F19A9F08D5CE1D38B0/7C3BD6C0DBC811F1A93C58BECE1D38B0.roa
File:                     7C3BD6C0DBC811F1A93C58BECE1D38B0.roa (raw, json)
Hash identifier:          ZLqjfNoHNi5w7WL9cOoeZtHBnYstuZYtJWiF2yvlm+s=
Subject key identifier:   BB:41:5A:29:BA:8C:35:80:8F:EF:69:63:80:90:30:60:64:04:C0:B1
Certificate issuer:       /CN=F3623C61AF/serialNumber=8FF2690486D60EC99DDCB76F09DBA00AD7079114
Certificate serial:       10
Authority key identifier: 8F:F2:69:04:86:D6:0E:C9:9D:DC:B7:6F:09:DB:A0:0A:D7:07:91:14
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/j_JpBIbWDsmd3LdvCdugCtcHkRQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3623C61/D0EF4604DBB711F19A9F08D5CE1D38B0/7C3BD6C0DBC811F1A93C58BECE1D38B0.roa
Signing time:             Sun 08 Nov 2026 23:02:35 +0000
ROA not before:           Sun 08 Nov 2026 23:02:31 +0000
ROA not after:            Tue 09 Nov 2027 23:02:31 +0000
asID:                     19905
IP address blocks:        196.46.22.0/24 maxlen: 24 (superfluous maxlen)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3623C61/D0EF4604DBB711F19A9F08D5CE1D38B0/j_JpBIbWDsmd3LdvCdugCtcHkRQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3623C61/D0EF4604DBB711F19A9F08D5CE1D38B0/j_JpBIbWDsmd3LdvCdugCtcHkRQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/j_JpBIbWDsmd3LdvCdugCtcHkRQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 16 Nov 2026 00:08:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16 (0x10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3623C61AF, serialNumber=8FF2690486D60EC99DDCB76F09DBA00AD7079114
        Validity
            Not Before: Nov  8 23:02:31 2026 GMT
            Not After : Nov  9 23:02:31 2027 GMT
        Subject: CN=6af0ff8b-95ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d3:72:de:44:4e:70:bc:7f:9a:03:59:87:18:
                    4a:c2:b1:70:a9:4d:b2:ec:df:5c:3b:4d:29:15:0e:
                    2f:f7:22:6c:c1:98:cd:91:da:c7:3b:5c:14:17:74:
                    23:70:9e:0e:5a:65:d2:fa:83:76:dc:b7:f2:d3:74:
                    ae:ea:db:31:85:ea:78:1c:f4:1d:73:4c:06:e7:cb:
                    b7:05:f5:d8:7d:1d:3a:2d:44:c9:a5:70:7a:c0:0d:
                    02:63:d7:a0:c9:cb:f2:fe:2d:a6:5b:b5:dc:ba:81:
                    e3:8b:4e:a9:b0:8d:57:8f:04:9c:39:cf:7c:99:47:
                    b7:02:d4:cc:92:81:0f:ac:95:a9:d8:46:1e:66:50:
                    c3:dc:00:b1:40:45:d5:f0:94:0a:63:8a:08:1d:8f:
                    ad:c1:7c:6a:48:79:36:61:63:42:0c:82:b6:9b:32:
                    22:f3:41:ce:21:17:3b:25:de:af:b2:84:7a:62:70:
                    61:11:fd:04:e5:81:a1:ba:55:a0:b3:ab:78:dd:c6:
                    fb:2e:5a:ba:69:43:ae:22:c6:a9:2f:2a:40:32:e4:
                    e2:99:c0:41:1e:30:0f:db:9d:dd:7d:46:82:7a:10:
                    41:3f:57:cd:15:67:9a:ad:2d:eb:32:7f:91:29:b3:
                    c1:df:0c:b8:7d:2b:39:14:ab:fe:61:99:bb:ec:eb:
                    1e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:41:5A:29:BA:8C:35:80:8F:EF:69:63:80:90:30:60:64:04:C0:B1
            X509v3 Authority Key Identifier:
                keyid:8F:F2:69:04:86:D6:0E:C9:9D:DC:B7:6F:09:DB:A0:0A:D7:07:91:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3623C61/D0EF4604DBB711F19A9F08D5CE1D38B0/j_JpBIbWDsmd3LdvCdugCtcHkRQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/j_JpBIbWDsmd3LdvCdugCtcHkRQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3623C61/D0EF4604DBB711F19A9F08D5CE1D38B0/7C3BD6C0DBC811F1A93C58BECE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.46.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:d5:c8:fa:0b:94:91:c3:7c:f6:fa:0a:7d:5d:fb:21:31:12:
         3b:b1:f5:00:94:5e:ec:73:5b:14:72:71:d0:83:38:c9:b6:b0:
         cf:c7:9e:8b:ea:95:87:c3:49:6f:78:50:f4:38:3e:fd:84:8f:
         eb:46:ac:6a:85:70:33:13:b8:a1:ba:ac:d2:ef:f7:b0:c1:63:
         8d:6f:1f:ec:9f:9d:56:b6:e4:13:ce:7c:40:04:cd:67:60:94:
         c2:d8:b1:d6:c4:00:dc:34:9a:f9:c4:7c:27:57:30:0b:e5:d3:
         b4:74:b5:ac:49:df:7e:64:d4:0e:a7:03:08:40:b5:9c:b3:d8:
         a5:9b:b6:35:6d:d2:57:a9:0a:0a:6b:8b:28:b2:20:95:f9:b6:
         77:86:f4:4d:4c:6a:62:d9:9e:aa:c7:bf:66:0a:43:37:26:bd:
         40:5c:82:d5:3b:7e:a6:85:14:90:0d:58:69:0a:65:89:08:8f:
         28:1e:fb:70:54:68:8b:7a:d3:97:b3:0d:ef:aa:1e:77:24:e3:
         7d:78:0a:d4:55:84:5b:8e:dc:53:19:38:e6:24:10:91:35:e1:
         93:39:ac:a7:4c:66:22:da:cb:5e:6c:bf:ef:42:5e:c3:f1:cb:
         f3:f7:77:86:e0:55:3a:f2:88:cb:02:af:b9:aa:ff:65:f9:f2:
         c2:94:83:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----