Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F363BEDE/69F538C474C511EFB86D2C93762E951A/646E159AD43D11F18BE1240CCF1D38B0.roa
File:                     646E159AD43D11F18BE1240CCF1D38B0.roa (raw, json)
Hash identifier:          7KCP4dY+bvXJujSVoPK1huKNkw9wMsylcfCuwnhFh4I=
Subject key identifier:   09:19:1A:F5:B6:B4:7D:E7:7A:3A:8D:B0:FD:EF:FE:A5:4F:E2:16:B9
Certificate issuer:       /CN=F363BEDERI/serialNumber=A722B0A0E365A0ADC3D9EEB3CCBFCC062D90EFA9
Certificate serial:       0315
Authority key identifier: A7:22:B0:A0:E3:65:A0:AD:C3:D9:EE:B3:CC:BF:CC:06:2D:90:EF:A9
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/pyKwoONloK3D2e6zzL_MBi2Q76k.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BEDE/69F538C474C511EFB86D2C93762E951A/646E159AD43D11F18BE1240CCF1D38B0.roa
Signing time:             Fri 30 Oct 2026 08:39:17 +0000
ROA not before:           Fri 30 Oct 2026 08:39:13 +0000
ROA not after:            Wed 30 Oct 2030 08:39:13 +0000
asID:                     37515
IP address blocks:        213.150.208.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363BEDE/69F538C474C511EFB86D2C93762E951A/pyKwoONloK3D2e6zzL_MBi2Q76k.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363BEDE/69F538C474C511EFB86D2C93762E951A/pyKwoONloK3D2e6zzL_MBi2Q76k.mft
                          rsync://rpki.afrinic.net/repository/ripe/pyKwoONloK3D2e6zzL_MBi2Q76k.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 17 Nov 2026 00:45:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 789 (0x315)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BEDERI, serialNumber=A722B0A0E365A0ADC3D9EEB3CCBFCC062D90EFA9
        Validity
            Not Before: Oct 30 08:39:13 2026 GMT
            Not After : Oct 30 08:39:13 2030 GMT
        Subject: CN=6ae457b5-0f0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:2b:dd:51:ca:76:ee:05:00:78:94:c0:66:ad:
                    37:50:ab:6d:9b:2b:0e:74:40:e0:a5:c9:92:f4:7a:
                    8a:53:93:d3:e0:d0:ae:9e:22:26:43:68:6d:db:69:
                    0e:26:5f:f1:87:e5:5d:6a:1c:74:8b:3d:25:c4:ca:
                    f4:45:52:b7:03:10:2c:c0:da:ad:d9:e8:94:93:8b:
                    f0:72:54:72:ad:b6:c0:1e:68:21:82:b9:21:be:da:
                    b6:8d:e3:b5:3f:dc:db:19:29:6a:7f:2b:a2:05:d4:
                    16:9f:53:aa:4a:f0:d2:f6:80:24:7c:d9:22:27:fc:
                    4e:eb:79:35:a0:4d:5d:12:ee:20:8f:2d:7a:01:52:
                    67:11:ce:c8:88:20:4c:da:4e:06:b4:6e:a2:72:a3:
                    c7:1a:a5:3e:ba:f0:fe:aa:f0:de:df:c9:4e:02:2c:
                    f1:ae:23:a8:e5:85:11:af:88:9c:04:7d:89:15:99:
                    c5:2d:f8:77:69:9b:44:02:39:e5:50:be:b1:7f:00:
                    49:37:73:f1:81:85:c3:cc:35:08:35:0c:ec:4c:cc:
                    3b:60:76:21:61:5a:52:bd:85:e3:85:5f:64:64:d8:
                    c1:a5:ba:68:79:ca:1c:e3:42:55:91:b1:23:dd:56:
                    01:45:88:a7:a0:6a:9a:5a:50:97:ee:e1:fe:df:ba:
                    b9:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:19:1A:F5:B6:B4:7D:E7:7A:3A:8D:B0:FD:EF:FE:A5:4F:E2:16:B9
            X509v3 Authority Key Identifier:
                keyid:A7:22:B0:A0:E3:65:A0:AD:C3:D9:EE:B3:CC:BF:CC:06:2D:90:EF:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BEDE/69F538C474C511EFB86D2C93762E951A/pyKwoONloK3D2e6zzL_MBi2Q76k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/pyKwoONloK3D2e6zzL_MBi2Q76k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BEDE/69F538C474C511EFB86D2C93762E951A/646E159AD43D11F18BE1240CCF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.150.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         8f:86:5d:ea:7d:af:0a:bc:47:18:0f:49:5c:fd:b1:a9:2f:5f:
         16:9b:3b:17:14:c4:b2:3d:4b:df:5b:48:85:51:8e:8e:3b:ed:
         12:da:79:ae:f7:9f:73:c3:04:09:bb:ea:fb:54:10:b4:9a:1c:
         9d:c0:b3:5a:0b:35:bd:c1:bc:a4:db:f1:2d:07:61:59:3b:5a:
         f7:eb:f2:fa:76:c0:b4:4e:14:a6:0d:60:40:a1:59:fc:23:a6:
         1e:7b:77:c0:fc:e9:fd:82:2f:56:65:b2:da:84:4f:e0:35:12:
         79:a9:ae:03:b4:a5:10:00:8f:ec:74:d4:e9:41:05:83:04:33:
         69:37:d3:cd:1c:6a:03:a9:d5:7d:5e:1f:07:06:e9:f4:02:e5:
         6d:7b:87:c8:a8:6a:fc:38:f5:42:0f:ef:a9:01:70:00:e4:04:
         0d:be:c7:06:01:e4:f7:5f:91:52:95:97:b6:d1:00:3b:40:c6:
         f7:e5:49:0f:1f:6e:3a:8d:6d:90:b5:10:d8:43:9b:ee:27:47:
         0a:8c:f1:00:0b:ac:34:2f:cc:1d:60:33:79:f5:64:86:24:16:
         3d:d2:a5:aa:12:07:17:0c:73:ab:cc:d8:2f:25:91:bc:86:51:
         61:b8:83:71:82:26:c4:34:02:45:5d:23:9e:4f:e8:8e:e3:4b:
         64:f9:95:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----