Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/CDBD3EF6B72611F1B31040EACE1D38B0.roa
File:                     CDBD3EF6B72611F1B31040EACE1D38B0.roa (raw, json)
Hash identifier:          6Fw5P+VS5pyB2U+RAAYWXsIi9yU8TrXga4dH8+Sgvy4=
Subject key identifier:   B9:60:BA:C6:5E:26:20:20:DB:27:12:93:D2:B3:D6:29:93:7A:AE:95
Certificate issuer:       /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial:       12D8
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/CDBD3EF6B72611F1B31040EACE1D38B0.roa
Signing time:             Wed 23 Sep 2026 08:14:32 +0000
ROA not before:           Wed 23 Sep 2026 08:14:28 +0000
ROA not after:            Thu 30 Sep 2027 08:14:28 +0000
asID:                     211422
IP address blocks:        102.135.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 02:38:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4824 (0x12d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
        Validity
            Not Before: Sep 23 08:14:28 2026 GMT
            Not After : Sep 30 08:14:28 2027 GMT
        Subject: CN=6ab38a68-5a98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:7e:95:79:ad:89:c4:7d:20:36:6a:b3:c7:4a:
                    ff:17:68:50:b9:5d:2f:f9:cb:bb:21:5a:14:d5:4e:
                    b7:44:c4:7e:cf:c7:15:25:58:b1:7a:af:8a:fd:6a:
                    20:76:42:08:9e:80:b6:23:04:89:56:cc:89:5f:51:
                    c0:99:a5:73:1c:d6:ec:0a:cb:42:15:4c:f5:9d:2a:
                    6a:57:70:f6:c8:11:12:33:44:98:e1:23:eb:4c:44:
                    3d:4a:77:94:57:b0:46:9f:24:19:e3:29:85:91:a8:
                    ee:5a:4a:11:f3:21:e1:b6:d4:30:9a:5a:5c:91:f2:
                    ba:a7:15:40:43:c3:8e:89:68:3b:32:08:d3:04:92:
                    42:9c:f5:fe:6e:12:43:5d:1c:e4:f4:bb:49:bd:4f:
                    ca:a6:8a:bc:00:53:8f:7d:41:d8:38:c8:cc:c3:d8:
                    e5:23:85:d3:27:ce:06:c9:52:6b:44:e3:71:76:63:
                    cd:89:7e:72:cd:0e:1f:bc:f1:3b:29:27:65:b9:ec:
                    d7:42:73:55:9e:78:41:45:82:a8:8d:e7:11:18:5b:
                    70:07:c7:49:c7:da:66:62:a8:df:83:ef:54:10:c6:
                    68:a7:d6:2e:7a:d9:70:d8:24:9c:ff:80:a8:ad:56:
                    bb:c9:37:ee:bf:90:dd:a9:49:f0:a0:29:25:da:f0:
                    82:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:60:BA:C6:5E:26:20:20:DB:27:12:93:D2:B3:D6:29:93:7A:AE:95
            X509v3 Authority Key Identifier:
                keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/CDBD3EF6B72611F1B31040EACE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.135.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:75:7e:86:a9:a0:bc:ef:d6:af:95:ee:e6:41:4e:26:f8:af:
         8b:d1:de:21:8a:a7:56:3d:42:94:8b:3e:eb:87:37:e0:0b:72:
         5b:13:a8:49:24:06:dd:57:0e:c6:13:f8:2d:99:39:f6:42:38:
         d1:4e:e4:25:e7:77:60:b3:4d:02:b8:31:13:ad:33:d0:3e:cc:
         af:14:70:55:fc:29:19:40:1e:0d:72:00:e2:bc:6e:21:44:72:
         c0:cd:8c:cc:f9:23:27:f9:5a:17:33:d6:04:74:08:4c:a2:f1:
         9c:71:ba:26:5f:c6:75:a4:a5:9a:6e:14:c6:fb:83:10:e8:b5:
         76:86:50:6f:af:a2:2a:1a:89:53:05:df:b8:2a:27:73:cd:a8:
         3e:c0:a9:a3:2d:9c:07:ef:9e:95:97:5e:8b:e0:1e:2c:e4:8f:
         f3:42:83:fe:c5:ba:c8:ed:8e:8a:7e:dd:6c:91:1d:74:05:41:
         3f:48:bb:b8:9f:4d:14:a3:e4:3e:56:78:eb:91:6f:9b:e4:83:
         6f:01:8c:f0:4f:35:10:87:26:65:49:45:54:39:88:bf:42:70:
         f7:8a:07:e1:3f:99:9c:f3:9d:13:c4:87:45:7b:09:21:6b:90:
         dd:c9:ca:83:ca:57:38:6a:12:38:84:48:e8:2f:95:bd:6b:a6:
         7a:ef:a9:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----