Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/122E8B24C30411F19BE677E7CE1D38B0.roa
File:                     122E8B24C30411F19BE677E7CE1D38B0.roa (raw, json)
Hash identifier:          wdBen2nbt/2uu0iLxc0AfVV9ZrsxMWqys7u12/B0s/Y=
Subject key identifier:   D6:AD:0B:25:03:CC:F0:BC:45:62:83:E2:2C:5F:60:A6:76:18:34:BA
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01ECE1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/122E8B24C30411F19BE677E7CE1D38B0.roa
Signing time:             Thu 08 Oct 2026 10:36:08 +0000
ROA not before:           Thu 08 Oct 2026 10:36:03 +0000
ROA not after:            Tue 20 Oct 2026 10:36:03 +0000
asID:                     17557
IP address blocks:        154.198.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126177 (0x1ece1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct  8 10:36:03 2026 GMT
            Not After : Oct 20 10:36:03 2026 GMT
        Subject: CN=6ac77218-4ef2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:32:8a:7f:4b:a3:4b:d1:43:53:93:fa:6d:27:
                    bd:51:5a:2f:48:a7:25:c1:9f:e6:db:09:9b:03:ed:
                    32:25:3c:6f:12:5b:06:d9:1e:fd:0c:a4:85:35:02:
                    4c:e6:c0:00:1e:03:b2:78:da:49:a7:3b:d1:37:ab:
                    e7:16:c6:ed:ea:19:a2:7a:f6:19:c2:72:a0:ed:e5:
                    7e:65:66:b6:62:f5:ee:5a:8a:3f:13:d0:3a:79:6d:
                    e7:b9:b6:7c:fe:2a:74:7b:b8:d7:2c:02:3b:f4:39:
                    dd:ae:9e:89:27:69:10:b3:14:d5:65:2d:91:4b:42:
                    79:0b:9b:47:9a:6a:68:21:0d:57:12:c5:98:c0:04:
                    f9:ff:f5:79:36:da:ff:ee:7a:1e:fe:b5:17:b9:b0:
                    af:6a:b0:b0:6a:b9:3c:61:de:7c:6b:68:a7:24:1b:
                    aa:0e:3a:4f:b5:3d:7a:a9:5d:a6:e8:6b:70:86:09:
                    bd:01:70:7a:4c:75:4b:ab:3f:8c:fe:e5:30:43:2b:
                    6c:e7:1e:e8:85:55:10:c5:5e:e0:25:44:9b:7f:2e:
                    37:fa:7a:99:e6:4f:08:1b:4b:dc:d8:4d:9b:3b:72:
                    33:74:6f:69:36:5b:3b:a5:8e:2e:99:3f:97:03:a6:
                    ae:27:27:4f:f9:b3:b8:9e:62:0d:f4:63:15:53:a6:
                    4e:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:AD:0B:25:03:CC:F0:BC:45:62:83:E2:2C:5F:60:A6:76:18:34:BA
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/122E8B24C30411F19BE677E7CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.198.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:79:c5:67:c1:43:87:43:bf:34:8f:8c:83:65:f9:49:2c:ed:
         4c:70:41:ea:f1:51:48:e4:55:ac:8e:fe:7b:14:b2:e4:92:d2:
         b0:41:c2:64:10:44:28:30:94:aa:7c:5c:c4:82:f5:0f:fb:dc:
         61:55:22:ca:4f:ff:04:60:18:98:97:ec:e4:6f:34:b5:5d:43:
         3d:01:a6:dc:0d:32:66:7e:ef:61:06:58:3a:03:6c:1a:9f:4a:
         a2:af:df:93:ac:e7:46:7c:94:6c:e5:76:2b:4a:54:48:82:e3:
         a3:d3:bf:e6:08:3f:9f:61:1d:b8:92:29:87:b1:11:9b:fd:4d:
         b7:9e:6c:fc:a6:3b:41:60:39:c3:ca:81:d9:f6:2e:40:41:d8:
         df:85:92:5c:d0:f6:39:a3:d9:6b:82:94:a9:6e:59:39:ba:4a:
         39:ec:0a:00:ca:e3:4e:84:28:96:64:ea:05:24:ed:b6:5c:35:
         c6:c7:6a:dc:17:ea:02:d9:75:37:73:56:93:89:34:47:45:71:
         14:df:bd:fb:60:39:ba:ab:ad:50:95:56:c8:ca:48:1d:51:c1:
         be:54:6d:14:4b:d0:72:8e:e6:fd:5d:5f:44:dd:32:57:d4:9d:
         55:0c:72:bc:ff:64:ac:dc:39:45:64:fb:20:a5:0c:99:cd:35:
         c0:58:f4:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----