Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/11F5CF18C00811F1A6B215D1CE1D38B0.roa
File:                     11F5CF18C00811F1A6B215D1CE1D38B0.roa (raw, json)
Hash identifier:          2K4vfu27UGCK8p9nrRkJgUCgMf+RoXK/3ZbqS9wOwXs=
Subject key identifier:   AE:89:C0:A9:26:EF:78:08:2D:72:08:E0:F8:98:EC:E9:72:E5:F5:A4
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EC27
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/11F5CF18C00811F1A6B215D1CE1D38B0.roa
Signing time:             Sun 04 Oct 2026 15:27:12 +0000
ROA not before:           Sun 04 Oct 2026 15:27:08 +0000
ROA not after:            Tue 03 Nov 2026 15:27:08 +0000
asID:                     17497
IP address blocks:        154.193.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125991 (0x1ec27)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct  4 15:27:08 2026 GMT
            Not After : Nov  3 15:27:08 2026 GMT
        Subject: CN=6ac27050-c080
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:74:bd:e8:95:54:6e:32:63:52:95:03:83:cd:
                    22:0a:30:c4:36:7f:61:30:50:27:b3:14:19:9a:f2:
                    0e:a0:2e:ba:64:e7:84:5a:af:c1:63:8c:7e:f6:c0:
                    2d:0c:39:be:87:a6:d1:84:50:31:f1:5f:1a:f6:5b:
                    7d:34:a2:14:b1:15:56:9b:a8:24:d6:3b:27:ee:00:
                    03:ad:d0:47:e8:0b:0e:cd:ca:ef:82:7e:81:4f:24:
                    77:7f:81:86:5a:00:8c:ef:cc:b3:d6:76:71:4c:16:
                    c5:9a:2c:45:5a:65:70:06:6e:4a:40:eb:de:ff:a3:
                    ea:84:1f:c7:b2:2a:cb:84:19:7a:6c:91:4f:17:05:
                    e5:50:e7:7a:a1:f3:23:fe:19:12:ce:8e:21:b9:6e:
                    64:fe:c8:d9:a9:e3:21:38:e2:c9:9a:7e:f6:5a:31:
                    da:5e:d8:37:e6:b5:ea:3a:dc:39:31:de:e3:f5:c7:
                    5e:6b:66:84:cb:19:28:28:62:14:85:80:af:71:4a:
                    0e:ed:c5:42:83:b5:38:e6:0b:62:d5:db:e3:ef:ea:
                    6a:91:d2:94:14:e7:e3:55:4a:50:d3:5f:be:e1:82:
                    4a:51:13:e9:ae:3b:0b:a5:da:5a:6d:5a:b2:02:fa:
                    42:c4:64:d8:9a:eb:3e:0b:27:71:05:c4:3d:eb:88:
                    a9:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:89:C0:A9:26:EF:78:08:2D:72:08:E0:F8:98:EC:E9:72:E5:F5:A4
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/11F5CF18C00811F1A6B215D1CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.193.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cd:2e:67:3f:46:9b:c8:93:95:3b:2c:e5:2c:ee:cb:fe:82:a6:
         8f:07:8a:3c:34:68:af:a5:c8:fc:6e:30:79:e5:a2:59:bc:1e:
         b7:1a:28:41:2a:95:03:54:76:9c:5d:7e:ca:ab:ed:f6:e6:3e:
         bd:55:59:e3:27:a1:df:54:30:53:9d:ee:a9:5e:ce:8e:96:e6:
         1a:82:b3:10:9e:4e:85:2d:ee:e3:ac:70:c6:98:26:ca:f9:1f:
         65:c9:d5:c5:ca:b0:cf:82:6b:f4:21:19:83:ba:62:7d:fc:a4:
         c6:91:45:ef:57:03:40:a0:39:65:f4:85:af:04:be:46:9f:e2:
         44:d9:87:3c:15:ee:3e:62:90:f6:0c:0e:44:e6:cd:ce:bb:27:
         d5:72:03:cf:80:d9:c5:59:33:12:c0:36:67:26:03:d3:2d:a2:
         43:bb:94:24:21:65:80:ea:69:e2:1f:a2:fc:06:19:9b:e5:c5:
         dc:34:73:cb:52:e9:27:ad:8b:e0:7a:64:5a:4d:ff:6d:e1:d2:
         55:1e:34:1f:95:0b:18:29:2a:2b:58:49:f7:05:3a:8f:27:ab:
         63:10:33:ab:36:cd:87:79:eb:8b:a8:37:9f:2f:ba:ef:2c:b0:
         5b:e7:e5:a3:dd:f3:41:6c:c4:7e:ff:2f:ca:7c:0e:93:b5:d2:
         d0:34:da:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----