Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0ADF05C2C39211F181182BFDCE1D38B0.roa
File:                     0ADF05C2C39211F181182BFDCE1D38B0.roa (raw, json)
Hash identifier:          wK1N5Lzy7HpnjL5x4tFVVTyXgJmooTKYFNDImRLHwl4=
Subject key identifier:   62:F8:6A:FD:8A:DD:B2:C0:80:32:61:EF:28:E0:F1:DB:4E:C1:80:FE
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01ECE8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0ADF05C2C39211F181182BFDCE1D38B0.roa
Signing time:             Fri 09 Oct 2026 03:32:24 +0000
ROA not before:           Fri 09 Oct 2026 03:32:20 +0000
ROA not after:            Fri 16 Oct 2026 03:32:20 +0000
asID:                     17497
IP address blocks:        154.90.174.0/23 maxlen: 24
                          154.90.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126184 (0x1ece8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct  9 03:32:20 2026 GMT
            Not After : Oct 16 03:32:20 2026 GMT
        Subject: CN=6ac86048-150d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:97:91:28:6a:4d:0d:c2:cd:97:74:81:5e:6e:
                    10:e9:3e:34:a7:a7:4e:03:f9:5e:6c:13:0e:ce:6b:
                    f8:0e:db:98:0f:e2:1d:26:b1:10:c5:ba:9e:69:55:
                    23:b8:77:f2:c1:be:70:bc:a3:20:c9:8c:f3:c7:92:
                    47:27:3d:bf:48:0b:6c:10:35:f9:f2:c0:93:a6:47:
                    d3:d4:ba:04:5e:36:1e:0d:d4:86:f4:de:1a:df:58:
                    72:f2:e0:67:71:96:2c:e3:3d:02:5d:ac:5c:76:1a:
                    7c:42:9d:4f:c9:ce:5b:92:d4:3d:30:06:50:74:07:
                    bc:ac:d0:da:47:2f:5a:91:83:ee:4e:ed:e8:c1:87:
                    24:c1:c1:af:9f:32:5c:95:a5:fe:58:9d:c0:be:bc:
                    6f:2a:5f:07:ab:7f:28:0b:93:1e:7a:17:79:90:92:
                    e3:64:1e:75:9c:48:4e:da:d4:f5:7a:52:16:22:d5:
                    87:18:1a:0d:cf:ca:02:27:a8:8f:d1:f7:4e:bd:eb:
                    04:ba:82:2d:51:3f:d5:dd:23:63:94:97:d7:73:80:
                    5a:e0:11:98:f4:7d:44:71:c1:45:2d:4d:66:78:08:
                    46:fb:e4:2a:39:24:ed:82:ad:b3:08:3a:42:f4:4d:
                    34:c4:39:42:ac:e7:69:20:07:9b:9c:40:c4:29:f1:
                    1e:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:F8:6A:FD:8A:DD:B2:C0:80:32:61:EF:28:E0:F1:DB:4E:C1:80:FE
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0ADF05C2C39211F181182BFDCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.90.174.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5d:f0:3c:2f:ca:68:ba:22:cc:da:4e:f8:f1:8a:29:13:06:86:
         d9:48:df:f0:ee:dc:3a:76:4d:78:ca:22:ec:38:f4:c3:48:5e:
         e7:fa:16:50:69:ab:86:9e:65:c1:90:3a:7c:7f:2d:b2:5b:9a:
         8c:5e:91:95:bc:eb:8e:79:5c:6e:23:e4:83:04:b5:2b:51:b4:
         47:fa:3e:29:bd:36:ab:a8:e8:05:6a:86:f1:d7:19:90:08:31:
         e3:5b:c0:3c:ab:70:72:dd:35:21:d8:4e:05:81:04:bb:7e:47:
         3c:86:58:38:0a:3c:f7:03:5a:9d:ac:a5:37:af:4a:65:7e:e7:
         b7:ab:50:0e:83:63:a5:f7:5f:7f:b9:10:89:49:da:59:8e:a1:
         df:46:e1:9b:b2:9f:71:2f:9c:73:cc:47:7c:ec:09:14:3a:71:
         9b:ac:ac:6f:e9:ac:6c:8c:98:56:f5:92:c8:f7:08:77:73:bf:
         89:27:12:42:79:f3:bd:d8:11:9a:9b:4f:fa:d7:16:fb:a9:0c:
         4f:b5:86:49:cb:c4:27:df:35:a3:dc:bb:a9:44:60:da:81:d9:
         ed:90:44:14:64:d7:32:53:6d:96:53:98:35:65:96:34:1d:5f:
         4c:2e:1f:bb:42:79:06:04:26:da:2e:fd:0d:e3:c6:d6:7d:dd:
         b0:e0:06:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----