Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363851F/60CED0808E4511F0836A03DDDAE4EC9C/1D4D8DF2948E11F0B452D891DAE4EC9C.roa
File:                     1D4D8DF2948E11F0B452D891DAE4EC9C.roa (raw, json)
Hash identifier:          OuWnxGMsi+N68YBaQGVBDnElhmxNz5fFdYcNWKXx/mE=
Subject key identifier:   AC:02:5F:74:CD:0F:58:68:9A:F1:EE:43:9B:E7:C4:EE:C0:36:72:0D
Certificate issuer:       /CN=F363851FAF/serialNumber=EF4CA1217E6AE3A8E1981811935B71CEE1D6E585
Certificate serial:       0B
Authority key identifier: EF:4C:A1:21:7E:6A:E3:A8:E1:98:18:11:93:5B:71:CE:E1:D6:E5:85
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/70yhIX5q46jhmBgRk1txzuHW5YU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363851F/60CED0808E4511F0836A03DDDAE4EC9C/1D4D8DF2948E11F0B452D891DAE4EC9C.roa
Signing time:             Thu 18 Sep 2025 12:50:55 +0000
ROA not before:           Thu 18 Sep 2025 12:50:49 +0000
ROA not after:            Tue 31 Mar 2026 12:50:49 +0000
asID:                     329609
IP address blocks:        102.204.255.1/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363851F/60CED0808E4511F0836A03DDDAE4EC9C/70yhIX5q46jhmBgRk1txzuHW5YU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363851F/60CED0808E4511F0836A03DDDAE4EC9C/70yhIX5q46jhmBgRk1txzuHW5YU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/70yhIX5q46jhmBgRk1txzuHW5YU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 22 Oct 2025 00:06:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11 (0xb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363851FAF, serialNumber=EF4CA1217E6AE3A8E1981811935B71CEE1D6E585
        Validity
            Not Before: Sep 18 12:50:49 2025 GMT
            Not After : Mar 31 12:50:49 2026 GMT
        Subject: CN=68cc002f-3a40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:38:f9:aa:30:92:01:b3:27:83:7c:50:6d:92:
                    3e:22:90:9c:a6:e5:f0:26:4c:e6:6b:15:5b:11:21:
                    5a:ac:98:45:5c:ca:ae:58:39:64:aa:fb:2e:9e:ad:
                    10:25:69:ed:3f:5b:55:4b:52:a4:d2:cf:99:67:a8:
                    59:bb:7e:0b:6d:ef:84:44:83:4b:df:9c:5a:4e:40:
                    a0:4b:e0:6a:e4:69:24:d5:e0:6b:4a:42:90:4c:c8:
                    a9:66:98:c9:d9:2b:a6:a0:98:b7:d9:29:af:ca:6b:
                    2b:c8:01:bb:d5:2a:34:f3:c5:99:e8:5c:81:ce:f0:
                    3e:4f:d5:c2:d1:cf:3d:a4:8e:fd:b0:68:f6:97:17:
                    af:0d:d5:80:d8:14:26:ad:b5:75:72:b7:1d:b9:1d:
                    e2:30:97:62:e3:66:3e:67:80:23:f8:ca:73:a1:29:
                    79:93:1b:ea:89:d5:b2:52:3b:ee:68:d2:7c:9b:21:
                    00:79:5d:0d:64:f4:b4:ea:4d:d5:83:01:6c:55:69:
                    59:3e:55:51:7b:d1:3c:46:79:d9:10:87:79:3e:25:
                    ba:d6:98:39:17:67:54:be:8d:62:05:14:1f:0e:d2:
                    bc:29:0d:03:08:49:63:b6:19:67:b4:c9:25:2c:d7:
                    ef:05:97:33:8a:17:55:86:fb:d8:d4:c6:13:af:33:
                    64:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:02:5F:74:CD:0F:58:68:9A:F1:EE:43:9B:E7:C4:EE:C0:36:72:0D
            X509v3 Authority Key Identifier:
                keyid:EF:4C:A1:21:7E:6A:E3:A8:E1:98:18:11:93:5B:71:CE:E1:D6:E5:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363851F/60CED0808E4511F0836A03DDDAE4EC9C/70yhIX5q46jhmBgRk1txzuHW5YU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/70yhIX5q46jhmBgRk1txzuHW5YU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363851F/60CED0808E4511F0836A03DDDAE4EC9C/1D4D8DF2948E11F0B452D891DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.204.255.1/32

    Signature Algorithm: sha256WithRSAEncryption
         76:84:62:99:a0:d1:18:d2:0d:16:ce:5c:e7:02:29:7f:cb:cb:
         f7:82:f0:fa:f4:72:fc:df:13:d8:87:1a:06:14:19:4b:75:d4:
         1e:c5:ba:ae:23:dc:a6:a1:20:3a:d8:08:01:4e:e9:cb:a2:15:
         7a:e1:88:3b:74:78:92:9e:03:f6:59:e9:92:87:e9:f3:fa:5b:
         bc:a0:52:6c:b9:98:c3:15:5b:65:5f:2e:7f:99:2b:f0:97:fd:
         c1:13:ec:ca:97:58:4c:4b:f0:fd:8d:51:33:40:cc:c9:df:91:
         f3:3c:2f:de:22:73:8d:6a:15:ec:84:c1:4d:91:38:98:b2:76:
         34:c0:b7:f4:1a:b1:f7:be:c2:d2:d2:2c:66:d1:31:07:86:27:
         4e:95:16:f7:09:29:cf:1b:1e:44:38:4c:70:a2:e0:4e:3a:f3:
         2f:49:5e:dd:e9:5c:d5:59:69:b5:a0:45:61:94:d7:ef:09:4a:
         79:2b:fb:0c:c8:4c:8b:f6:14:e0:9e:b1:49:5a:f1:c2:5c:42:
         d0:b5:91:96:b5:aa:50:02:dc:88:16:a0:aa:a3:35:66:a2:d6:
         fd:4a:47:7b:03:94:94:33:1a:e3:92:f8:a5:ca:12:ff:53:8a:
         bd:82:ff:14:60:f1:65:a9:ab:88:cb:4b:63:5c:52:d6:e5:a5:
         9d:ee:65:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----