Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0FB3EF0EBF3C11F18AC4771CCF1D38B0.roa
File:                     0FB3EF0EBF3C11F18AC4771CCF1D38B0.roa (raw, json)
Hash identifier:          iQX66cZAg1PtB0CVJQYFGBEuqGgOqb6pd16rttfO5ng=
Subject key identifier:   E5:92:38:6A:39:A5:92:01:38:C9:9D:06:51:F3:15:DF:1C:DC:CF:56
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EC1C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0FB3EF0EBF3C11F18AC4771CCF1D38B0.roa
Signing time:             Sat 03 Oct 2026 15:06:51 +0000
ROA not before:           Sat 03 Oct 2026 15:06:47 +0000
ROA not after:            Tue 13 Oct 2026 15:06:47 +0000
asID:                     213169
IP address blocks:        154.83.91.0/24 maxlen: 24
                          154.83.92.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125980 (0x1ec1c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct  3 15:06:47 2026 GMT
            Not After : Oct 13 15:06:47 2026 GMT
        Subject: CN=6ac11a0b-33a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:96:3c:74:50:2c:3a:c3:3c:9f:60:e6:8c:20:
                    27:84:58:ac:eb:d3:e1:83:5e:1e:23:36:f0:37:ed:
                    d8:50:ac:e8:72:5d:a3:41:79:33:6a:ee:0f:8a:98:
                    90:a2:61:c6:0d:2f:86:48:e1:3c:be:1b:8b:24:f7:
                    3c:5c:d9:42:e8:7a:db:56:0d:f9:8d:33:72:56:84:
                    6a:b2:20:b9:31:61:05:ed:82:98:5a:52:c8:99:39:
                    07:dd:c8:89:9d:80:e6:ed:37:a9:32:7c:6b:e8:95:
                    18:1b:2c:aa:6d:15:b9:c9:47:5f:9e:21:33:f6:da:
                    88:0b:8e:7d:ee:7a:e0:97:fe:9a:8e:21:67:e5:fb:
                    28:59:d3:69:9f:27:fd:97:0a:93:3d:9d:a1:c7:fb:
                    cf:a5:a0:d4:44:8c:a6:a8:ed:03:f6:15:71:cd:ad:
                    3a:7d:67:d7:f8:67:7a:47:30:5b:b7:0a:5f:b9:68:
                    8b:80:84:e6:bc:93:65:65:71:db:14:b5:a9:95:fc:
                    eb:b8:9d:a2:a2:e0:b3:82:47:0d:4c:05:14:36:ff:
                    46:0d:69:07:d6:f3:00:60:6d:6e:56:03:98:3a:1f:
                    72:5e:bd:27:d6:36:1f:d9:50:7e:e4:97:ab:67:e5:
                    61:44:af:f3:ca:8d:65:d5:97:15:2f:68:4a:71:20:
                    c8:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:92:38:6A:39:A5:92:01:38:C9:9D:06:51:F3:15:DF:1C:DC:CF:56
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0FB3EF0EBF3C11F18AC4771CCF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.83.91.0-154.83.95.255

    Signature Algorithm: sha256WithRSAEncryption
         b0:03:36:a5:3e:02:77:08:96:9b:91:20:ca:b1:86:82:be:f3:
         9f:e7:be:6f:90:78:48:f8:f6:2f:9f:eb:0e:f1:ba:b5:01:6e:
         cf:36:ca:87:f0:31:af:71:f4:42:f3:50:0d:cc:ab:98:73:52:
         32:be:4c:02:a4:a3:a3:c7:60:22:6b:06:13:87:a8:89:3f:a0:
         75:d8:90:48:76:64:3d:cb:3f:77:3d:12:77:13:e3:e7:e0:62:
         02:86:41:79:27:fc:83:4f:df:92:74:b2:ef:0c:3e:15:c3:f8:
         8d:ba:f8:10:70:2f:67:69:9f:31:98:b3:02:90:a5:5c:f1:fe:
         23:71:dc:4d:53:16:55:b5:3d:c8:8f:1a:46:bc:81:d5:d9:3d:
         c5:7c:f3:03:6b:c3:91:8c:0d:95:fc:07:23:3d:88:f2:d7:a3:
         7c:75:cc:e5:21:c2:35:34:ee:af:10:89:cc:24:da:d2:58:3b:
         eb:9f:25:d1:e4:78:2d:55:60:4c:6c:df:14:ad:21:19:b2:e2:
         c7:5a:d7:bc:8d:d4:1b:bc:c9:0e:07:ed:5e:e0:9a:78:15:87:
         d2:ad:42:18:68:23:30:2c:f6:80:43:b8:00:00:47:67:d6:d3:
         13:db:c3:14:d4:15:1c:9b:bd:4d:6a:39:f3:ea:0a:55:3f:77:
         05:66:f7:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----