Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3639ADD/53984002DF7211F19676DCB5CE1D38B0/EE2C2160E05D11F1909BCEB6CE1D38B0.roa
File:                     EE2C2160E05D11F1909BCEB6CE1D38B0.roa (raw, json)
Hash identifier:          K4LaW12uPd+yb3Camq+yYdcR+g/hn2kuv0Vw1jQP52A=
Subject key identifier:   24:88:26:BE:B1:DA:55:57:D5:52:3A:B7:4F:6C:98:E7:8D:BE:AE:17
Certificate issuer:       /CN=F3639ADDAF/serialNumber=18B6789EC1631411D975A297FCFD57529BDCA67D
Certificate serial:       04
Authority key identifier: 18:B6:78:9E:C1:63:14:11:D9:75:A2:97:FC:FD:57:52:9B:DC:A6:7D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/GLZ4nsFjFBHZdaKX_P1XUpvcpn0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3639ADD/53984002DF7211F19676DCB5CE1D38B0/EE2C2160E05D11F1909BCEB6CE1D38B0.roa
Signing time:             Sat 14 Nov 2026 19:02:26 +0000
ROA not before:           Sat 14 Nov 2026 19:02:21 +0000
ROA not after:            Mon 13 Nov 2028 19:02:21 +0000
asID:                     329646
IP address blocks:        102.204.47.0/24 maxlen: 24 (superfluous maxlen)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3639ADD/53984002DF7211F19676DCB5CE1D38B0/GLZ4nsFjFBHZdaKX_P1XUpvcpn0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3639ADD/53984002DF7211F19676DCB5CE1D38B0/GLZ4nsFjFBHZdaKX_P1XUpvcpn0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/GLZ4nsFjFBHZdaKX_P1XUpvcpn0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 16 Nov 2026 19:02:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3639ADDAF, serialNumber=18B6789EC1631411D975A297FCFD57529BDCA67D
        Validity
            Not Before: Nov 14 19:02:21 2026 GMT
            Not After : Nov 13 19:02:21 2028 GMT
        Subject: CN=6af8b042-82e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:47:a0:65:89:91:62:7d:4f:6f:8e:41:9b:5f:
                    4c:e7:25:99:3f:fd:db:b6:7c:69:d3:ba:56:7a:78:
                    b4:90:01:f1:8d:c8:73:88:76:2a:bf:a4:13:61:5f:
                    f7:f6:6e:e3:67:c4:60:66:7b:89:81:02:9f:2f:3d:
                    85:54:02:00:c0:75:80:87:a4:0c:6d:9f:0f:2e:b9:
                    c1:f8:58:2d:9c:51:55:94:20:b6:3d:7a:16:87:76:
                    01:97:f3:8c:6f:e3:ce:61:7d:71:b9:d3:ff:f8:d8:
                    d8:29:94:8f:34:47:80:fc:d3:92:22:74:6e:b3:82:
                    5d:26:7d:28:f3:78:bb:ae:3b:fd:ff:af:c2:6a:4e:
                    ed:6b:c8:30:70:c2:b4:1b:ff:2e:01:6e:24:0e:d1:
                    ad:c2:84:33:75:5b:71:8d:f5:da:75:7f:5e:33:8f:
                    18:9c:d4:8f:08:95:81:af:b9:7f:f3:74:cc:19:c8:
                    ca:9e:65:32:56:3c:07:0f:83:8a:ee:e8:f9:94:1c:
                    6a:7e:f3:a3:ed:b6:4f:e8:89:20:22:c5:7a:41:b1:
                    89:9b:7f:4f:6f:3c:e3:de:ef:68:37:d7:fe:18:35:
                    40:95:ac:d1:86:0d:06:2f:f9:a3:d4:5f:80:56:e9:
                    4f:f1:4a:54:7c:39:21:90:1d:04:a0:73:c1:d6:8a:
                    ec:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:88:26:BE:B1:DA:55:57:D5:52:3A:B7:4F:6C:98:E7:8D:BE:AE:17
            X509v3 Authority Key Identifier:
                keyid:18:B6:78:9E:C1:63:14:11:D9:75:A2:97:FC:FD:57:52:9B:DC:A6:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3639ADD/53984002DF7211F19676DCB5CE1D38B0/GLZ4nsFjFBHZdaKX_P1XUpvcpn0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/GLZ4nsFjFBHZdaKX_P1XUpvcpn0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3639ADD/53984002DF7211F19676DCB5CE1D38B0/EE2C2160E05D11F1909BCEB6CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.204.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ef:1e:09:92:0c:c6:25:c4:07:21:83:e7:95:0e:f6:7a:36:e2:
         80:7d:f8:78:00:9c:81:6c:17:7f:fb:dc:af:84:8b:5a:85:c4:
         20:d8:b5:d0:23:ed:c6:b6:4f:84:dc:a3:8c:4d:a0:0d:f2:1b:
         e1:52:13:5f:d3:b5:71:47:d8:56:8d:ee:5a:dc:cf:50:dd:e3:
         68:ae:1e:81:e1:6d:cc:0c:c9:75:43:00:a5:5a:48:fe:aa:5e:
         3f:53:b8:23:ee:87:ce:c4:f6:b2:b2:30:96:82:27:a6:11:5a:
         98:52:79:66:3a:ee:0f:54:4a:00:f5:d3:c8:3a:19:65:d6:53:
         64:e9:93:b2:7c:bb:ac:2e:d4:dd:54:bf:51:26:17:47:e0:6b:
         71:b6:69:ec:e8:af:a3:4f:58:b9:bb:10:c4:16:35:8e:a1:c7:
         f7:7e:e9:ae:89:b7:fd:af:8c:de:3a:38:cd:91:0e:cb:a1:06:
         e7:fc:15:da:4a:33:15:ca:cb:a3:47:7c:a8:e6:3c:e4:cf:65:
         f4:42:6f:e8:e4:fe:bc:b8:37:90:d2:b2:34:58:40:0f:82:ca:
         4d:de:8f:6b:d4:5c:c4:65:dd:65:7b:a7:c5:cf:88:52:d2:8c:
         71:a1:1e:d2:3b:43:12:88:be:7e:9c:5d:05:fc:f6:d9:d9:7d:
         83:83:1d:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----