Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1C8EE2CCC2F411F199775501CF1D38B0.roa
File:                     1C8EE2CCC2F411F199775501CF1D38B0.roa (raw, json)
Hash identifier:          AXRZqWVWTjf8mtJBrhXYdHV4mjUGFHb5li8WfKqGVNA=
Subject key identifier:   8C:8A:34:01:B1:86:80:59:43:39:C0:D2:4F:6A:FB:E1:FE:B5:22:13
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01ECCB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1C8EE2CCC2F411F199775501CF1D38B0.roa
Signing time:             Thu 08 Oct 2026 08:41:53 +0000
ROA not before:           Thu 08 Oct 2026 08:41:49 +0000
ROA not after:            Mon 02 Nov 2026 08:41:49 +0000
asID:                     214483
IP address blocks:        154.86.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126155 (0x1eccb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct  8 08:41:49 2026 GMT
            Not After : Nov  2 08:41:49 2026 GMT
        Subject: CN=6ac75751-306f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:fd:98:1e:0e:52:ef:45:05:f6:29:f7:f4:b9:
                    a1:85:a6:1a:57:0a:53:5e:a2:bb:ae:7b:fb:5d:00:
                    ab:28:fe:43:c7:a0:c8:98:9d:16:4f:93:7b:77:69:
                    49:0e:6e:86:33:9f:73:d3:f9:75:b6:b0:0e:03:67:
                    c5:7b:10:1e:c6:1b:f2:e3:0a:bf:92:88:84:08:4c:
                    95:e2:0b:b8:42:fd:5a:3c:84:70:48:a4:bd:ea:df:
                    27:08:21:02:4b:6c:8b:46:26:da:93:b3:4e:78:1b:
                    90:d0:4a:2e:b9:fc:9d:1e:e1:bc:72:84:3b:96:34:
                    b4:8f:61:da:e3:26:fa:f8:f4:62:8a:b4:10:56:b3:
                    55:7d:9d:9b:95:28:f0:e3:23:3a:47:0e:6b:48:16:
                    57:a2:aa:a6:a5:be:7a:cc:a2:7f:7b:14:df:57:3b:
                    9b:bd:a4:9c:69:5d:a7:26:d6:c9:a1:29:02:52:c3:
                    f6:d5:d0:77:ae:16:84:21:69:34:b6:71:9e:0e:33:
                    26:6b:69:3c:23:48:ca:15:02:27:a9:2a:1e:cc:39:
                    03:f7:98:0d:94:75:0d:64:11:32:5d:c0:d4:9f:dd:
                    07:bc:06:d0:33:7d:ac:6f:83:9e:c7:81:5b:b3:20:
                    11:1d:7e:22:78:cf:2c:01:d4:c0:6c:85:59:38:4b:
                    55:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:8A:34:01:B1:86:80:59:43:39:C0:D2:4F:6A:FB:E1:FE:B5:22:13
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1C8EE2CCC2F411F199775501CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.86.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ba:1b:a0:72:2c:2e:82:3a:cb:62:8c:b8:9b:4f:c1:2d:54:81:
         f5:d5:5e:41:9e:9b:24:38:4a:d8:e1:9d:53:cf:1b:a9:ff:5e:
         e2:f6:ac:18:39:6c:7a:22:94:db:91:9a:57:17:80:a9:78:4f:
         15:9c:d2:01:9f:2d:18:7e:70:b1:75:d7:ed:05:e7:e6:51:a7:
         c1:9b:ea:4d:01:ce:02:7d:36:e9:ab:7c:6a:24:91:d9:57:df:
         01:1f:95:12:d2:5c:49:03:29:bc:a9:b2:d5:1a:2f:f7:98:31:
         1c:fc:0f:a9:cd:d1:bd:24:f3:bf:4e:c7:c7:0c:d0:ff:7c:f2:
         fa:ff:2e:7b:bf:12:8a:93:e0:39:3e:55:01:56:03:15:a5:87:
         cc:34:8f:48:33:96:ac:d6:51:56:b8:8d:51:ea:da:03:88:19:
         46:e0:c4:a3:d4:82:6c:f4:ec:c7:61:2b:67:a7:68:f7:f2:9e:
         d6:ff:74:f0:73:20:9d:ec:ed:5d:63:96:7c:cd:4e:52:33:fa:
         e6:fe:05:03:cf:51:37:ba:a7:d8:b2:4b:36:54:c9:69:8e:20:
         e0:fd:08:c8:d3:6a:dc:b5:11:ed:0f:1e:98:d5:93:ae:b8:40:
         5c:30:70:1b:1f:cd:84:2a:ba:ee:da:b8:73:9d:77:60:60:04:
         17:fc:f8:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----