Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/E114CCF6D5FA11F18E6F9FE3CE1D38B0.roa
File:                     E114CCF6D5FA11F18E6F9FE3CE1D38B0.roa (raw, json)
Hash identifier:          GD2L6a0qShHrcvnO4iWvGWM6otqIBffiQ/IrS6tnXEw=
Subject key identifier:   5C:8B:0A:11:DE:9A:EF:97:CD:53:F2:6E:79:A3:CD:9C:A8:71:7E:71
Certificate issuer:       /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial:       1351
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/E114CCF6D5FA11F18E6F9FE3CE1D38B0.roa
Signing time:             Sun 01 Nov 2026 13:48:12 +0000
ROA not before:           Sun 01 Nov 2026 13:48:07 +0000
ROA not after:            Tue 30 Nov 2027 13:48:07 +0000
asID:                     29802
IP address blocks:        196.251.65.0/24 maxlen: 24 (superfluous maxlen)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 17 Nov 2026 00:08:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4945 (0x1351)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
        Validity
            Not Before: Nov  1 13:48:07 2026 GMT
            Not After : Nov 30 13:48:07 2027 GMT
        Subject: CN=6ae7431c-7381
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c5:d7:1d:6d:d8:ee:65:94:5b:db:9d:10:97:
                    c4:01:bb:6b:f8:46:4b:20:72:db:38:52:7a:46:98:
                    70:b8:41:0c:8c:f9:60:fd:87:f3:c8:de:8b:5b:aa:
                    cf:f1:b4:22:e7:7c:78:cb:83:12:a9:a5:1e:b7:16:
                    12:43:13:2d:23:7e:ea:e2:42:27:0c:20:eb:24:06:
                    59:71:e3:41:c3:6b:5c:9d:6e:a5:e8:a4:a3:ac:40:
                    ff:23:69:d5:48:45:9b:ba:ee:9d:bc:6a:be:13:75:
                    6c:db:ca:1a:99:9f:72:75:ca:9e:95:04:91:82:23:
                    27:97:9e:c8:e5:9b:60:ec:45:20:3e:0b:ed:ce:dc:
                    3e:48:01:70:dc:c8:5d:1b:3c:87:0f:b4:17:5d:79:
                    0f:c3:fa:bc:2e:b3:76:ee:fb:ad:d0:d4:a9:97:cf:
                    8e:12:cb:6c:89:b9:41:00:7e:b7:61:00:83:d1:6b:
                    48:1a:5c:96:97:a1:21:31:b7:cf:b8:9d:cd:32:c6:
                    61:67:07:da:d4:4e:a6:b6:2c:89:55:d0:e6:f4:bc:
                    6e:ae:eb:e3:93:bc:d3:6d:2f:2c:59:58:92:97:75:
                    f8:a6:7d:00:56:d7:14:a3:80:ce:d2:6d:56:52:13:
                    6d:b4:dc:87:f0:3f:54:0c:72:67:c8:2a:29:16:1f:
                    1b:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:8B:0A:11:DE:9A:EF:97:CD:53:F2:6E:79:A3:CD:9C:A8:71:7E:71
            X509v3 Authority Key Identifier:
                keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/E114CCF6D5FA11F18E6F9FE3CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.251.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c0:fb:6d:a4:03:4e:c1:b1:22:ad:e9:0a:09:fb:d5:18:51:b4:
         89:5f:9d:3e:5a:26:0e:36:95:3a:7d:26:7b:b1:44:f7:51:9b:
         76:4a:ac:44:6f:10:10:73:68:36:db:78:69:9b:0c:84:ff:3c:
         b8:0a:33:96:47:0a:2d:d8:2b:38:9d:58:70:4a:91:9c:07:f4:
         39:28:10:18:87:9e:5a:59:6f:c8:f4:dd:1c:5a:41:cc:34:63:
         11:d0:a6:01:4d:3c:af:9b:0e:38:b9:9b:e5:da:21:84:a1:d2:
         15:c5:82:68:0d:f5:3d:1b:2b:17:86:dc:04:b6:86:b3:d0:fa:
         e2:21:0c:81:0f:c0:41:46:39:09:79:a1:57:25:c9:2e:21:0b:
         85:95:b2:97:81:84:93:a4:13:bd:83:00:8f:86:d8:88:36:99:
         58:ba:f1:88:3c:6e:38:dd:c7:0f:9a:d8:2b:62:6c:ae:b3:fb:
         22:53:c6:a3:fd:f0:2b:2c:a6:68:1e:b5:d9:62:1d:a1:34:52:
         20:10:30:fe:b7:3c:4b:34:46:fc:33:08:70:c0:af:88:1a:78:
         6b:2a:ce:74:e2:8d:80:3e:db:7b:81:3d:49:71:0a:45:8b:d8:
         ea:cf:2a:ad:51:15:82:38:d6:a3:0a:14:45:2f:23:9a:7e:dc:
         1e:02:75:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----