Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/DBBF5B70D9F311F1A6BA5ED7CE1D38B0.roa
File:                     DBBF5B70D9F311F1A6BA5ED7CE1D38B0.roa (raw, json)
Hash identifier:          2LpteGuRIveACvMeIK/F2fYF6oMtdlj9631mSlprzZ8=
Subject key identifier:   14:AB:CD:FA:AD:B7:C4:6E:E4:91:89:F8:DA:5D:E3:62:6E:DB:2B:3B
Certificate issuer:       /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial:       136D
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/DBBF5B70D9F311F1A6BA5ED7CE1D38B0.roa
Signing time:             Fri 06 Nov 2026 15:08:01 +0000
ROA not before:           Fri 06 Nov 2026 15:07:56 +0000
ROA not after:            Tue 30 Nov 2027 15:07:56 +0000
asID:                     147281
IP address blocks:        102.135.13.0/24 maxlen: 24 (superfluous maxlen)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 17 Nov 2026 00:08:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4973 (0x136d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
        Validity
            Not Before: Nov  6 15:07:56 2026 GMT
            Not After : Nov 30 15:07:56 2027 GMT
        Subject: CN=6aeded51-9473
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:ad:89:24:9f:c4:71:8f:00:30:cb:d2:cc:4c:
                    11:3f:88:32:3b:1c:76:58:fd:b2:1e:d6:46:02:b4:
                    2a:1e:a4:80:02:22:83:b5:1b:81:6b:66:8b:d4:7b:
                    ce:66:cf:98:4f:00:f6:17:ec:62:05:9e:9e:35:3e:
                    52:42:62:a0:dc:bc:24:55:4a:bd:80:62:09:0a:f2:
                    00:3b:e2:a6:7c:b2:c1:c9:55:bd:5a:46:94:8b:e1:
                    5b:05:a8:99:80:1a:55:32:b1:da:70:18:21:02:1d:
                    3f:bd:07:ef:bb:c6:ca:af:98:43:3a:d1:e4:ed:f4:
                    1c:0d:3a:c8:3d:b0:d7:8f:4b:60:0d:4f:b3:6c:be:
                    23:09:6c:67:ce:2e:96:25:4a:2d:8e:eb:57:d5:bd:
                    63:42:cd:9f:61:ab:74:9e:e0:30:da:d2:36:53:14:
                    27:08:f0:ac:3b:a7:8c:5d:24:dc:98:4c:11:b9:6c:
                    03:74:e4:18:b2:4a:ed:70:4e:fb:f5:1b:8f:d4:2f:
                    df:2b:ef:d7:07:cc:22:4f:bb:b5:78:0e:d1:6d:fe:
                    97:ce:f5:69:65:d9:38:9c:74:97:3e:24:79:f6:36:
                    af:94:29:fb:ac:98:ea:fe:be:81:df:3b:eb:46:b2:
                    08:63:01:0c:b7:e2:39:9b:43:0f:12:84:40:5f:25:
                    38:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:AB:CD:FA:AD:B7:C4:6E:E4:91:89:F8:DA:5D:E3:62:6E:DB:2B:3B
            X509v3 Authority Key Identifier:
                keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/DBBF5B70D9F311F1A6BA5ED7CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.135.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:54:93:2b:28:89:12:15:2c:be:03:d0:04:7e:6f:56:8b:07:
         5c:3f:bc:31:5c:b1:f6:ac:ca:e0:b7:86:d3:8f:8d:ac:4f:92:
         03:c2:a9:c3:fc:a1:b5:19:54:e0:22:19:a8:bf:41:d6:42:ac:
         73:a0:2f:dd:d8:28:e9:3f:b0:16:24:f0:82:df:8a:d0:b5:cb:
         64:3d:73:30:e8:04:69:99:96:0e:7c:d8:14:2f:55:ea:e6:cd:
         17:1b:9c:db:4d:bc:4f:af:98:19:98:87:0a:3d:60:e9:b2:5c:
         d4:f1:05:00:1b:32:86:f9:85:9c:8c:e6:72:3e:ff:fb:7e:99:
         03:9a:09:22:59:4c:14:44:27:b8:18:72:5a:ce:5e:5e:68:25:
         88:61:c2:55:27:1a:88:70:a1:3e:92:50:5d:ee:ea:cc:1b:32:
         dd:5c:e3:f4:ee:93:a9:a2:6b:98:89:b2:ff:e3:21:71:86:f7:
         bb:c4:1a:6d:11:75:0e:52:86:48:33:26:04:ee:e0:f7:0d:03:
         a1:ea:c2:8e:cb:b2:48:60:e0:ee:33:1a:4d:6f:59:74:c6:ba:
         7c:d4:25:1a:5b:d6:14:ee:56:72:eb:38:50:da:9b:c2:f6:9b:
         03:51:8b:19:0c:40:bc:ef:61:88:eb:f5:7b:8b:61:01:96:13:
         ee:c6:47:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----