Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0295DF5EC95E11F19B43D2D4CE1D38B0.roa
File:                     0295DF5EC95E11F19B43D2D4CE1D38B0.roa (raw, json)
Hash identifier:          kwsRtS0qxIthIxOpobm22/C/ilz+BmM36HC7k9YUsDo=
Subject key identifier:   78:4A:03:C1:3D:00:07:F9:7B:C3:8E:88:1A:E8:63:4D:DE:0D:C8:CA
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EE68
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0295DF5EC95E11F19B43D2D4CE1D38B0.roa
Signing time:             Fri 16 Oct 2026 12:35:03 +0000
ROA not before:           Fri 16 Oct 2026 12:34:59 +0000
ROA not after:            Thu 12 Nov 2026 12:34:59 +0000
asID:                     218391
IP address blocks:        154.193.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 20 Oct 2026 00:07:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126568 (0x1ee68)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct 16 12:34:59 2026 GMT
            Not After : Nov 12 12:34:59 2026 GMT
        Subject: CN=6ad219f7-1754
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:26:7f:f3:a3:7a:05:d9:6f:4d:6c:fd:a4:53:
                    ff:01:de:c1:50:ae:2b:2d:79:45:e4:f8:0d:34:83:
                    4e:85:58:ff:5b:b7:28:9b:40:9f:db:55:68:25:ce:
                    4b:1b:28:6a:50:1a:6d:4c:4f:03:19:f1:94:30:a3:
                    a1:a2:2d:ae:4c:a2:f6:76:c1:ee:0d:10:dc:e5:88:
                    f7:13:f7:67:56:db:5f:b4:22:c5:07:d2:81:0b:be:
                    53:fa:ab:78:97:ae:cb:db:d4:7c:d2:85:8b:11:17:
                    6c:1b:ec:40:8e:a4:a7:95:ac:6b:93:8e:dc:76:06:
                    67:0c:61:22:ee:8d:ee:9c:55:47:ea:0d:51:25:8e:
                    df:53:b1:17:26:71:7b:b9:d1:25:20:18:66:cc:f0:
                    30:a0:96:98:d4:ee:2f:11:b9:55:67:d5:da:d4:8d:
                    c4:60:41:3f:fb:7c:f5:97:0b:cb:c7:56:c9:30:62:
                    e0:5e:62:75:7a:28:46:0f:ce:a3:5a:ae:f1:01:08:
                    ef:30:d1:8d:0d:8b:60:07:a0:e2:80:e5:e3:7d:ea:
                    3b:2f:f5:8c:f7:be:30:5a:06:cb:26:33:f2:38:c1:
                    b3:48:85:dc:83:3f:ba:58:ea:fe:3a:5e:77:1c:bd:
                    54:22:d1:94:cd:da:a0:32:4d:36:4b:11:9c:ed:1a:
                    4b:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:4A:03:C1:3D:00:07:F9:7B:C3:8E:88:1A:E8:63:4D:DE:0D:C8:CA
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0295DF5EC95E11F19B43D2D4CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.193.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:6f:61:14:10:27:83:d4:76:1f:41:e0:15:4a:b0:1a:4e:1d:
         43:af:74:d0:2a:ed:44:e5:7e:18:6a:4a:1e:3f:ee:6f:e8:46:
         90:19:c3:4c:09:e4:a4:cf:e5:95:e7:1c:f7:e2:c6:6a:c7:d3:
         36:c9:2b:9e:79:dc:58:22:65:e3:fd:59:36:05:f2:a7:3e:3a:
         3f:93:78:b1:e3:71:f7:10:39:d9:da:c0:7f:06:8f:c0:ff:6b:
         4c:ae:16:c2:e4:aa:b3:83:78:00:f4:de:ac:d2:06:c5:2a:11:
         06:21:8c:ed:cd:e5:03:2b:ff:23:78:6f:93:f9:ab:b5:17:f5:
         2f:4e:d3:cb:f9:68:5f:9a:01:eb:d0:88:f4:49:15:82:f4:94:
         c2:00:98:10:7c:92:e5:aa:ed:90:12:63:df:b4:fd:d3:7d:6b:
         be:1e:98:f0:58:5b:9a:96:18:20:7b:30:73:90:6c:39:d0:65:
         3b:a1:3a:d2:41:8d:6d:0f:39:74:e3:84:ec:5b:c4:29:70:90:
         18:da:17:ff:d7:08:30:f6:9a:f8:54:73:37:42:46:c7:1a:4b:
         21:6b:fc:39:4e:df:c4:17:21:1a:d4:66:40:ef:0d:3e:45:59:
         53:8d:0f:79:32:a4:d3:6c:3a:b2:ac:56:6b:10:b3:2f:67:a8:
         49:91:a3:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----