Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/088F17CACB9011F1996649ADCE1D38B0.roa
File:                     088F17CACB9011F1996649ADCE1D38B0.roa (raw, json)
Hash identifier:          UiVyR32nRQ6Jggy2O15KF5nw1zTov8HHjvCqjWrTAuw=
Subject key identifier:   16:6D:C6:76:FA:B1:D8:CC:7A:14:F9:4B:51:B4:9D:49:2E:41:D0:0A
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EED1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/088F17CACB9011F1996649ADCE1D38B0.roa
Signing time:             Mon 19 Oct 2026 07:38:11 +0000
ROA not before:           Mon 19 Oct 2026 07:38:06 +0000
ROA not after:            Thu 26 Nov 2026 07:38:06 +0000
asID:                     136809
IP address blocks:        154.80.144.0/24 maxlen: 24
                          154.80.145.0/24 maxlen: 24
                          154.80.146.0/24 maxlen: 24
                          154.80.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 28 Oct 2026 08:53:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126673 (0x1eed1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct 19 07:38:06 2026 GMT
            Not After : Nov 26 07:38:06 2026 GMT
        Subject: CN=6ad5c8e3-5503
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:5f:04:e0:41:84:5c:3c:89:68:08:38:02:4e:
                    b3:95:32:77:92:00:d4:a0:cb:b9:29:48:98:b6:4b:
                    b7:56:31:8e:ee:b9:ee:22:74:80:80:4a:52:33:ca:
                    ac:b1:6f:e8:f3:48:8e:db:fa:ea:29:f5:0c:ba:c2:
                    1a:e1:25:14:1c:af:6e:30:3c:2e:e5:b0:4a:3e:fa:
                    ab:b9:a8:b8:41:54:c4:0c:2a:0e:26:c6:10:c1:91:
                    a2:13:44:bf:40:46:c7:25:a8:59:81:cd:51:6b:cf:
                    a4:23:13:f0:9a:45:74:70:d9:60:60:a9:51:d1:df:
                    6d:db:57:b4:94:78:47:49:5c:28:d4:01:97:39:26:
                    18:00:9e:6e:e7:95:0f:8b:55:ce:2f:36:73:9a:07:
                    0d:31:1d:71:73:eb:3a:b8:6c:d8:19:25:03:e0:0f:
                    38:76:65:59:00:3a:7b:fa:95:8d:4f:ed:5b:5f:32:
                    2e:1a:74:ec:f3:77:47:04:1f:3e:7f:4c:92:25:42:
                    91:6b:49:a4:dc:36:8d:f1:65:82:15:80:54:c8:3d:
                    b8:3f:3e:90:b5:2f:87:c1:4b:c4:b8:ff:08:78:b3:
                    0f:24:94:cf:4e:5f:3a:40:09:04:ac:c6:72:ac:74:
                    27:54:b2:ce:84:e2:df:03:a4:24:5f:6e:35:76:80:
                    86:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:6D:C6:76:FA:B1:D8:CC:7A:14:F9:4B:51:B4:9D:49:2E:41:D0:0A
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/088F17CACB9011F1996649ADCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.80.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7c:e6:f7:38:46:c9:39:75:53:ce:52:61:b4:d0:2b:48:6f:ea:
         99:a0:34:4a:24:0f:3a:39:2c:b5:78:d7:b4:b1:79:6b:7a:1a:
         92:3b:dd:b7:09:2f:3d:90:2f:98:be:65:3e:8e:77:16:b3:87:
         53:ea:7b:3f:25:37:4c:11:11:c6:f9:4d:2d:84:e5:e7:0f:0f:
         5d:29:19:2b:2c:4f:08:48:ff:16:f1:94:43:95:ea:3c:50:a4:
         6b:81:5a:d3:74:eb:ba:9c:40:f8:d7:6a:89:53:af:bc:42:d9:
         e5:e9:be:07:8e:07:14:45:61:22:c9:bd:2c:cb:bc:e2:12:a4:
         05:62:e9:38:86:33:ab:d6:07:b8:5b:78:f7:4e:5e:b8:3d:1e:
         12:8b:57:40:64:54:74:98:4a:c7:01:f7:b4:92:5f:20:0a:df:
         1f:03:c2:79:c9:65:27:0e:15:10:70:e8:e3:04:6e:a9:b0:09:
         d3:2b:3c:cc:9b:f4:85:40:26:fe:3c:1c:4c:d4:e4:c3:58:f3:
         09:f7:e5:33:9d:0a:87:3b:05:90:62:fa:40:38:aa:08:37:fa:
         c5:2b:29:8a:b4:f8:69:fb:99:a8:db:39:54:bb:44:2f:aa:6d:
         f4:23:0f:b1:ae:3b:a9:a5:bf:99:3e:cb:9c:a3:2b:78:44:b3:
         96:59:87:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----