Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F366FE6C/B3374424131B11EBA4121A39F8AEA228/69691B06B32911F19D1DC1D0CE1D38B0.roa
File:                     69691B06B32911F19D1DC1D0CE1D38B0.roa (raw, json)
Hash identifier:          vK7XUK3u9Wq4n4aCldwnq1lQVYjE9TxqKIXqdg64R9U=
Subject key identifier:   87:E1:6A:58:78:56:A6:79:63:7F:EE:3D:1D:3F:1A:F5:7A:9D:05:E2
Certificate issuer:       /CN=F366FE6CAF/serialNumber=4A1FE76B4DFB0173B6F31B7F36A5A982E08D9C19
Certificate serial:       08F6
Authority key identifier: 4A:1F:E7:6B:4D:FB:01:73:B6:F3:1B:7F:36:A5:A9:82:E0:8D:9C:19
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Sh_na037AXO28xt_NqWpguCNnBk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366FE6C/B3374424131B11EBA4121A39F8AEA228/69691B06B32911F19D1DC1D0CE1D38B0.roa
Signing time:             Fri 18 Sep 2026 06:23:07 +0000
ROA not before:           Fri 18 Sep 2026 06:23:03 +0000
ROA not after:            Thu 18 Sep 2036 06:23:03 +0000
asID:                     328748
IP address blocks:        102.207.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366FE6C/B3374424131B11EBA4121A39F8AEA228/Sh_na037AXO28xt_NqWpguCNnBk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366FE6C/B3374424131B11EBA4121A39F8AEA228/Sh_na037AXO28xt_NqWpguCNnBk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Sh_na037AXO28xt_NqWpguCNnBk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Sep 2026 00:07:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2294 (0x8f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366FE6CAF, serialNumber=4A1FE76B4DFB0173B6F31B7F36A5A982E08D9C19
        Validity
            Not Before: Sep 18 06:23:03 2026 GMT
            Not After : Sep 18 06:23:03 2036 GMT
        Subject: CN=6aacd8cb-d5b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:ae:69:99:58:24:79:d8:3f:4a:af:a7:00:79:
                    9b:ec:2a:44:36:d0:4d:39:2e:92:72:55:85:cb:83:
                    d5:e3:f3:70:d5:a6:ae:41:79:41:ff:b4:69:46:d4:
                    90:4a:9e:1e:2b:53:b1:8b:6a:30:ec:3d:39:03:bf:
                    d5:c6:97:f5:6e:a6:75:ca:0b:92:ff:3b:42:d7:b1:
                    22:d1:2b:ce:75:2d:9a:bf:72:59:f0:ad:88:17:a6:
                    04:f1:4a:6b:2b:d4:f7:8e:b9:87:e1:1f:d3:55:19:
                    42:7a:d8:21:d6:c6:da:f8:24:15:97:6e:77:d9:9f:
                    00:53:5f:92:9c:be:1a:3b:b1:cf:0e:d7:82:8a:1d:
                    0a:c2:0d:95:dd:94:cf:1b:ee:db:d3:32:c3:74:29:
                    a9:11:66:ed:a2:64:ae:29:0e:dd:82:28:ac:ba:d3:
                    b6:a0:fd:43:b4:a7:7d:1b:3d:06:37:ae:dc:8c:98:
                    ec:aa:a0:e5:23:95:ff:a6:68:d2:37:25:43:b0:89:
                    8c:c4:5b:30:4a:c7:b1:57:ac:cd:6a:66:28:c1:dc:
                    48:b2:8a:25:fa:9a:a2:f8:f2:92:64:c8:af:72:6c:
                    be:9a:57:db:b7:1d:05:7f:5e:df:53:4e:1a:16:1f:
                    eb:cf:60:3c:c6:fb:29:06:31:e8:d3:56:d4:3b:86:
                    6f:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:E1:6A:58:78:56:A6:79:63:7F:EE:3D:1D:3F:1A:F5:7A:9D:05:E2
            X509v3 Authority Key Identifier:
                keyid:4A:1F:E7:6B:4D:FB:01:73:B6:F3:1B:7F:36:A5:A9:82:E0:8D:9C:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366FE6C/B3374424131B11EBA4121A39F8AEA228/Sh_na037AXO28xt_NqWpguCNnBk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Sh_na037AXO28xt_NqWpguCNnBk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366FE6C/B3374424131B11EBA4121A39F8AEA228/69691B06B32911F19D1DC1D0CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.207.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:0f:7c:f0:23:22:0c:e6:0c:bf:36:54:09:4b:23:e8:9b:93:
         47:18:28:69:92:bc:9c:60:8c:9b:32:24:a7:6a:33:36:0e:8e:
         91:b6:c3:2c:ff:ac:69:09:24:ba:d5:0c:a2:52:58:e6:1f:28:
         06:7f:20:34:fc:fc:fa:b1:53:9f:71:37:04:92:4c:20:a0:71:
         d9:18:96:3f:46:9d:15:2a:6e:fa:51:00:94:57:64:f5:c8:d3:
         d0:45:5c:99:aa:33:fe:af:b6:68:00:17:d7:43:75:bc:28:1f:
         ba:53:66:5b:3f:f8:d5:6b:dd:55:95:20:46:16:e6:04:0c:fe:
         86:67:ca:8d:cd:91:a0:b3:95:1c:2c:37:39:b0:7f:b8:3a:4b:
         fc:1a:93:69:88:e4:91:1b:1c:e0:82:32:78:4d:e2:41:d9:ab:
         46:94:37:c4:41:4e:5f:0e:1d:a1:3a:9b:0e:ab:75:f7:61:0f:
         1e:0a:f3:7d:35:4d:49:12:8f:63:ab:fe:b4:44:88:03:15:cf:
         12:0b:73:6e:23:1a:34:be:cc:4d:04:68:37:8b:42:1c:e6:2e:
         c0:4c:1a:d3:5f:61:c6:3a:d4:ed:25:62:15:59:0b:ea:0c:74:
         b8:3f:69:4f:31:e0:30:dc:cb:69:9c:56:9e:df:2c:7b:9d:f8:
         a5:dc:b0:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----