Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/DABA1CB6D5FB11F1834C98E8CE1D38B0.roa
File:                     DABA1CB6D5FB11F1834C98E8CE1D38B0.roa (raw, json)
Hash identifier:          uRf18HAjLoac4nNOzGftJ8i1/jqEC+RAaqx9Lccqe7U=
Subject key identifier:   25:C3:D2:ED:F1:AF:0A:0E:39:CC:6F:E7:73:03:C5:03:64:E2:6C:58
Certificate issuer:       /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial:       1365
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/DABA1CB6D5FB11F1834C98E8CE1D38B0.roa
Signing time:             Sun 01 Nov 2026 13:55:11 +0000
ROA not before:           Sun 01 Nov 2026 13:55:07 +0000
ROA not after:            Tue 30 Nov 2027 13:55:07 +0000
asID:                     29802
IP address blocks:        196.251.118.0/24 maxlen: 24 (superfluous maxlen)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 16 Nov 2026 00:08:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4965 (0x1365)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
        Validity
            Not Before: Nov  1 13:55:07 2026 GMT
            Not After : Nov 30 13:55:07 2027 GMT
        Subject: CN=6ae744bf-50ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:d9:eb:4f:25:09:8c:82:49:47:93:ac:e1:c3:
                    21:66:f8:b5:a1:bd:a4:be:d3:2c:b8:b9:98:b9:87:
                    09:69:77:ca:fb:a4:a9:a3:d4:af:19:30:e2:be:f5:
                    5c:9a:0d:17:83:76:ae:ca:b1:e9:95:4b:27:33:e6:
                    86:59:b0:4d:d3:5a:70:ab:79:b2:1d:a7:86:a1:c0:
                    6e:31:c1:2f:95:c1:21:b2:93:1b:66:11:f1:bb:1a:
                    34:76:36:23:72:fd:57:49:65:3c:3d:c2:58:da:a0:
                    b6:2b:23:74:9a:26:16:1a:9b:88:ac:09:0f:79:d7:
                    8b:ea:3d:21:19:3a:fd:62:5f:3f:fc:a3:6b:75:ee:
                    08:d5:d7:21:9e:0d:3c:63:3a:ce:cb:86:e1:37:de:
                    84:bf:46:ec:2b:1a:69:06:37:2f:f3:42:64:8a:d7:
                    d4:d4:c3:7f:e2:36:76:32:b0:f6:36:b2:ff:60:92:
                    f1:84:3c:c6:62:6d:f9:4f:85:c1:4e:d0:36:0e:f7:
                    78:9a:0b:60:c0:9f:5e:ba:04:09:e6:4e:d6:ad:76:
                    71:61:b0:17:db:b1:57:14:81:81:06:87:d0:d7:58:
                    9e:57:a2:d6:b0:e8:39:34:83:f0:b0:06:26:61:89:
                    90:87:c4:73:99:68:bd:4d:18:a6:51:11:fa:b7:23:
                    13:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:C3:D2:ED:F1:AF:0A:0E:39:CC:6F:E7:73:03:C5:03:64:E2:6C:58
            X509v3 Authority Key Identifier:
                keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/DABA1CB6D5FB11F1834C98E8CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.251.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:c9:bc:8c:86:ee:cc:f9:f1:a6:df:62:d3:88:96:40:e4:ad:
         fa:3a:85:8f:b5:af:c6:a5:4e:e1:ca:16:63:f4:28:64:ba:bb:
         77:7d:13:c1:c5:a9:ac:d3:ad:3b:d8:8a:dd:5f:27:2d:4b:22:
         74:62:4c:06:3b:ef:63:35:db:13:24:b4:69:c8:76:d8:8b:9f:
         c2:58:5c:d6:61:94:b5:62:7c:9a:1e:b7:65:1d:91:6e:01:92:
         01:2c:f2:84:e5:d2:0c:5e:cd:e7:21:c6:75:f1:3a:79:5a:fe:
         54:5e:ea:4c:fd:05:18:46:9f:c0:43:fa:c5:23:34:80:64:1b:
         08:a8:71:3c:48:76:5a:30:12:44:2f:c1:42:39:90:4c:4c:6d:
         ef:76:f9:34:23:a8:84:d4:f6:37:8f:2d:6b:fa:dd:0c:a1:52:
         69:2e:17:6e:d7:a0:4d:1d:1d:57:06:a0:7f:c7:0f:68:0f:10:
         0d:92:a6:d3:a1:61:c0:97:9a:5d:1f:79:df:66:22:bb:89:b7:
         b0:53:ca:61:19:b1:8d:1a:be:af:63:18:94:7a:59:e2:0d:36:
         66:25:a9:af:80:ff:f3:66:9e:60:99:8e:a2:64:c3:c0:69:34:
         e0:f3:66:13:cd:a2:7b:a4:bd:2a:15:bb:b8:9a:96:6a:76:a8:
         51:3f:a1:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----