Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0FA76A82B7E811F1A9AF84D8CE1D38B0.roa
File:                     0FA76A82B7E811F1A9AF84D8CE1D38B0.roa (raw, json)
Hash identifier:          FQxaKwtjQ2PGtyQjgiD6j4f4PdPDmlsEJATLfDVDv3U=
Subject key identifier:   61:41:07:03:C1:E3:22:03:D8:52:B9:9C:1E:9C:3E:D6:7B:A0:21:02
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EA83
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0FA76A82B7E811F1A9AF84D8CE1D38B0.roa
Signing time:             Thu 24 Sep 2026 07:17:55 +0000
ROA not before:           Thu 24 Sep 2026 07:17:51 +0000
ROA not after:            Mon 02 Nov 2026 07:17:51 +0000
asID:                     198486
IP address blocks:        154.83.182.0/24 maxlen: 24
                          154.83.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125571 (0x1ea83)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 24 07:17:51 2026 GMT
            Not After : Nov  2 07:17:51 2026 GMT
        Subject: CN=6ab4cea3-6246
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:6e:f7:a1:dd:a8:ca:9f:69:00:11:5d:0d:71:
                    69:28:34:de:6b:b3:d6:8f:32:24:a9:a8:f5:f8:ca:
                    c5:d8:a9:05:7a:65:bf:1c:8f:1f:e2:88:c5:cf:5b:
                    8e:04:c6:fc:ea:46:5d:d8:8d:7c:30:84:e3:a6:6f:
                    50:ee:8b:78:c9:d2:d3:98:3c:d1:9a:c4:6c:5d:20:
                    cf:97:dc:88:23:64:e8:73:f5:a9:86:4b:20:79:e8:
                    be:61:44:d9:fd:38:c1:c8:08:24:c3:fe:cc:65:fc:
                    78:5a:70:8c:17:de:6e:68:ac:5a:58:a0:35:be:cc:
                    a1:35:d0:fc:07:8f:54:26:f8:77:84:da:e2:b1:a8:
                    68:82:5e:d7:78:05:91:cf:4d:64:ff:d8:73:07:a5:
                    2f:2b:10:4f:57:5c:af:75:9e:22:ab:0d:38:b1:53:
                    b6:cd:c9:58:15:a0:30:18:40:ad:2b:14:e3:9e:db:
                    6c:32:ae:2c:e7:cb:b1:42:0c:01:81:2d:39:3b:a4:
                    b9:76:3f:6d:6d:70:94:d3:7a:5c:fc:33:02:a1:72:
                    bc:3b:73:99:52:67:f0:6a:f9:62:29:be:4c:65:b8:
                    fe:a6:d2:7d:81:6a:90:04:06:51:20:f2:18:e4:12:
                    9f:a6:f3:01:ec:68:c4:c3:a7:5b:d5:69:23:f9:fa:
                    47:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:41:07:03:C1:E3:22:03:D8:52:B9:9C:1E:9C:3E:D6:7B:A0:21:02
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0FA76A82B7E811F1A9AF84D8CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.83.182.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9d:bb:57:a6:2d:dd:f3:da:f7:0c:ee:ee:97:d4:8b:e3:bf:eb:
         f3:d3:fd:f9:cd:d9:b6:1e:19:03:54:28:07:bc:63:9b:54:db:
         29:79:d5:47:fa:0d:0a:aa:a1:c7:c2:79:4d:d6:46:b0:be:12:
         bb:70:40:04:45:c0:f8:ed:d9:02:89:06:b8:b8:fb:fb:a5:99:
         16:2a:00:36:2a:ea:60:02:2c:dc:fa:8f:be:73:12:be:30:5c:
         3d:60:72:07:bd:95:b2:6d:1b:8f:e5:a6:88:1f:1b:fc:90:e3:
         fb:63:bb:ec:91:c4:82:93:e3:f3:21:b4:96:03:8d:4f:5b:1a:
         ab:2c:28:ab:3f:40:a3:ce:66:c9:92:f9:be:ec:39:55:19:ed:
         b8:82:c9:99:f4:04:d3:2d:d5:90:fc:92:b1:c6:5f:99:40:a3:
         11:d8:3f:18:d1:eb:9c:c4:53:85:78:ba:4d:2f:81:5b:4c:89:
         52:bc:9d:a5:66:0e:71:90:51:54:92:2a:44:2b:b9:10:9a:ec:
         8a:4b:5a:d1:42:11:09:5c:4a:ed:bd:11:e4:b9:d0:87:41:83:
         9f:1d:b7:db:ad:ae:8f:42:ac:f5:4b:89:1e:12:e8:eb:08:cd:
         bc:29:da:08:e1:45:bd:7c:e1:b3:8f:86:62:f5:cd:81:cc:9b:
         d9:41:7b:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----