Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/EB2924E8C70011F186FFCEE7CE1D38B0.roa
File:                     EB2924E8C70011F186FFCEE7CE1D38B0.roa (raw, json)
Hash identifier:          rH15xsJcNWuS18QMJMwjOMJ5t1u8f74L0Bqu8JkVwnk=
Subject key identifier:   C1:BA:9B:84:93:8C:71:F2:11:84:72:45:04:C7:01:E8:2C:FA:8A:2D
Certificate issuer:       /CN=F367B216AF/serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Certificate serial:       0A6A
Authority key identifier: 2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/EB2924E8C70011F186FFCEE7CE1D38B0.roa
Signing time:             Tue 13 Oct 2026 12:23:39 +0000
ROA not before:           Tue 13 Oct 2026 12:23:32 +0000
ROA not after:            Mon 13 Oct 2036 12:23:32 +0000
asID:                     33763
IP address blocks:        197.102.80.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 16 Nov 2026 00:08:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2666 (0xa6a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367B216AF, serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
        Validity
            Not Before: Oct 13 12:23:32 2026 GMT
            Not After : Oct 13 12:23:32 2036 GMT
        Subject: CN=6ace22cb-d882
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ee:78:2d:93:b9:2a:64:df:53:40:b0:30:99:
                    56:6e:d2:6f:68:0c:d6:f4:14:db:fa:8b:c7:ee:ea:
                    11:dd:b5:a9:19:cc:12:41:ff:12:37:0a:50:8a:43:
                    be:81:0f:18:2d:a9:85:1d:bb:38:f8:47:ee:e7:44:
                    01:50:f6:32:d8:e6:24:ce:c6:d8:2a:7d:1e:9b:7b:
                    06:89:b8:9b:fe:41:10:9c:29:3e:8f:3c:55:63:e2:
                    6f:fb:03:7a:2d:09:cb:da:d2:05:b8:9d:0e:2f:eb:
                    bb:3d:aa:2e:f4:4c:a2:07:0b:6a:10:fa:40:95:64:
                    c4:49:fa:13:2e:3b:d1:f2:68:fe:40:42:d6:25:3c:
                    a8:cb:34:d2:8d:84:f3:c8:d4:9f:e2:db:9a:19:87:
                    90:4d:db:29:c5:d8:a7:e4:49:e8:bb:18:4f:e5:fd:
                    6f:a2:c8:04:ce:d0:d6:52:af:56:5c:9c:6b:42:e3:
                    36:af:1a:4e:10:4d:83:28:ec:75:a2:9a:00:44:62:
                    81:3f:73:40:18:18:20:19:3d:26:a8:47:c5:db:63:
                    2b:72:8e:74:42:d5:77:87:44:b3:f6:9e:e8:3c:cf:
                    a7:04:e0:a3:5c:70:40:8c:67:92:2e:d8:30:98:29:
                    c4:d3:70:58:7c:ab:03:26:3e:6d:46:7d:b9:a2:48:
                    97:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:BA:9B:84:93:8C:71:F2:11:84:72:45:04:C7:01:E8:2C:FA:8A:2D
            X509v3 Authority Key Identifier:
                keyid:2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/EB2924E8C70011F186FFCEE7CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  197.102.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         71:1c:a9:35:5b:23:45:08:b9:de:57:61:ec:af:ec:17:72:48:
         30:0b:31:6e:36:5c:30:35:b1:d9:1c:25:f8:5c:41:27:e8:25:
         4b:6b:ff:ae:20:07:f9:6f:73:de:db:02:0a:56:b8:a2:d6:8d:
         02:55:75:c6:c3:06:54:9e:06:26:56:1a:ee:df:96:c1:4c:7d:
         cf:04:cc:d6:4d:19:46:af:ce:0a:92:76:58:be:66:f0:b5:b7:
         d1:c2:52:af:1c:dd:d0:24:0e:0b:7c:bc:47:ed:1b:ca:49:e6:
         5a:67:a4:25:80:67:dd:0c:c9:07:fe:12:92:8c:1d:ba:60:b8:
         40:7f:3f:9f:81:6d:60:3d:c8:7e:5e:e2:85:5e:a9:94:ac:1e:
         cd:c0:63:41:1e:f9:a0:ef:e4:d6:24:3b:50:67:9e:d0:2a:5b:
         e0:22:d1:d0:4f:36:1a:e6:6d:e0:55:80:b5:2f:ca:41:46:0f:
         a2:7c:56:1a:e7:e9:2e:a2:b0:6a:94:b3:9e:63:f2:65:42:42:
         59:a4:33:89:53:02:18:8e:ea:9c:18:aa:47:58:b1:86:bc:9b:
         e6:ac:8c:7f:64:13:67:8c:c0:0a:3b:42:c2:9b:c5:a7:db:6c:
         0c:0a:46:3c:ca:8a:d4:22:b6:00:d0:fb:2b:45:dd:ba:c9:fd:
         a4:d2:c6:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----