Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/143A53EAB33111F1B7A450FECE1D38B0.roa
File:                     143A53EAB33111F1B7A450FECE1D38B0.roa (raw, json)
Hash identifier:          w+7R4h4SQkdl9ohhYzFMna7o4YZ67QJgHrDKmuvj/mk=
Subject key identifier:   67:F5:3A:8E:EC:BB:DC:A8:14:B3:08:95:EC:40:B9:0E:2F:3C:2B:A7
Certificate issuer:       /CN=F364712FAF/serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
Certificate serial:       0904
Authority key identifier: 3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/143A53EAB33111F1B7A450FECE1D38B0.roa
Signing time:             Fri 18 Sep 2026 07:18:00 +0000
ROA not before:           Fri 18 Sep 2026 07:17:56 +0000
ROA not after:            Wed 31 Dec 2036 07:17:56 +0000
asID:                     29975
IP address blocks:        105.251.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 03 Oct 2026 00:07:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2308 (0x904)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364712FAF, serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
        Validity
            Not Before: Sep 18 07:17:56 2026 GMT
            Not After : Dec 31 07:17:56 2036 GMT
        Subject: CN=6aace5a8-0269
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:94:e1:fa:61:ae:d5:f3:84:c1:d7:cf:25:62:
                    94:02:da:f7:9b:ab:fb:c9:86:ca:4c:69:be:6e:bf:
                    77:83:0d:ec:b9:b8:fd:23:71:35:cd:e9:d7:aa:a1:
                    52:0b:ee:c2:84:08:f4:a3:fb:7d:fe:15:d8:02:4d:
                    f9:f4:3a:f8:7b:d7:e3:58:36:c8:2e:c5:25:95:b9:
                    71:59:25:c3:0f:34:0e:4a:42:4d:61:46:3b:41:23:
                    29:f5:37:e0:82:a8:4d:93:4b:e7:af:06:84:69:1e:
                    55:65:96:0d:82:ab:57:11:c6:21:2b:fe:61:e0:7d:
                    d8:40:40:3a:94:5b:25:55:c0:aa:46:01:ad:50:d5:
                    18:45:c5:56:f6:13:52:da:c4:5f:c0:a5:91:a6:01:
                    5f:ff:9e:a4:a0:cd:1f:5a:a5:d6:2c:b5:40:38:93:
                    0c:0a:e6:3b:e2:a3:60:22:94:b2:df:1b:11:8c:c3:
                    de:fe:f8:cd:c2:f0:30:2c:dc:18:3f:92:7b:0d:4d:
                    0b:59:db:43:fb:c8:9b:87:35:ab:59:35:af:84:72:
                    d5:b2:05:62:39:17:9f:48:4b:d8:b0:1e:ab:10:3e:
                    65:76:1b:03:a5:55:18:f1:ab:eb:23:85:41:a8:85:
                    14:75:c0:e0:fc:74:d6:56:3a:89:19:c1:d8:c3:df:
                    46:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:F5:3A:8E:EC:BB:DC:A8:14:B3:08:95:EC:40:B9:0E:2F:3C:2B:A7
            X509v3 Authority Key Identifier:
                keyid:3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/143A53EAB33111F1B7A450FECE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  105.251.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         64:96:3a:e0:83:37:f2:f0:16:84:c1:ff:d3:18:94:62:b1:06:
         0a:2a:a2:e9:e4:48:5c:15:4a:42:b6:a4:18:64:41:4b:6f:be:
         ea:5f:83:4b:e5:ea:47:f8:ce:29:90:29:fc:26:7b:d7:12:38:
         0c:b0:b1:45:7a:93:6d:8c:00:6c:23:f1:81:8b:e3:89:7b:52:
         20:89:50:88:52:0f:fa:4f:31:03:f1:5f:b6:fb:71:bb:de:02:
         c7:85:93:95:2f:71:33:64:5f:48:c9:71:16:02:be:62:a0:19:
         dc:3e:8b:6a:ae:bb:52:bf:95:fc:e2:dc:da:13:29:03:1d:72:
         8a:d5:13:9e:c1:b4:04:1f:46:d5:59:e6:f6:be:22:aa:e1:a4:
         0e:1d:53:f7:20:64:99:44:8d:ab:ea:43:28:08:3c:09:f1:dd:
         47:2d:af:3b:c3:ff:7e:b8:ab:66:9e:51:cc:54:8a:b5:84:b7:
         86:7f:58:4c:b0:31:8a:0d:47:07:48:a2:bc:ba:c3:4f:ba:cf:
         8a:64:e5:50:d4:42:4b:13:e2:33:8d:8e:87:c4:be:74:48:b1:
         39:2f:88:3f:70:23:d3:b9:d5:77:ba:41:40:f8:db:6e:37:1a:
         15:92:7b:34:1f:d0:2d:f7:cc:b6:f5:87:b7:fc:eb:a2:e9:70:
         d7:8f:c7:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----