Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1FFAD974C3BD11F1B6B00FA1CE1D38B0.roa
File:                     1FFAD974C3BD11F1B6B00FA1CE1D38B0.roa (raw, json)
Hash identifier:          ESo1uH22Q1YvwfozNZv/Tiw5CeUkf59HyImstT4Tn80=
Subject key identifier:   DC:1D:C4:DD:E6:27:4F:CC:DF:0E:B0:89:4A:4C:31:30:9B:64:4E:CD
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01ED0A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1FFAD974C3BD11F1B6B00FA1CE1D38B0.roa
Signing time:             Fri 09 Oct 2026 08:40:48 +0000
ROA not before:           Fri 09 Oct 2026 08:40:43 +0000
ROA not after:            Mon 19 Oct 2026 08:40:43 +0000
asID:                     4760
IP address blocks:        154.81.80.0/20 maxlen: 24
                          154.88.80.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126218 (0x1ed0a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct  9 08:40:43 2026 GMT
            Not After : Oct 19 08:40:43 2026 GMT
        Subject: CN=6ac8a890-ea5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:8a:28:67:40:a4:78:1c:3e:fe:00:e8:f7:21:
                    bf:a5:dc:cb:b5:7c:98:5a:99:82:d3:4b:c6:fe:c5:
                    71:a1:2c:cd:7d:51:50:d8:bf:e9:04:eb:d5:24:bf:
                    c7:8b:4b:72:4c:84:f4:a3:cd:5d:48:64:ae:89:c6:
                    d5:b2:d0:13:e0:0b:0b:3b:9f:8e:c0:20:71:34:49:
                    ab:22:6c:b7:9c:db:ae:ca:c0:77:09:af:07:75:39:
                    21:b1:ce:e7:1d:ac:d7:e4:0c:62:8f:54:1a:8a:bc:
                    61:ec:a6:c2:95:10:9d:61:fc:66:08:e1:e1:35:ba:
                    10:72:da:3f:96:fa:df:61:a2:02:b9:8e:c4:ce:36:
                    86:b5:e9:1e:16:03:e3:58:96:ca:63:1c:ec:8f:ce:
                    1b:35:76:90:7c:57:74:5e:8f:3c:04:fe:84:df:28:
                    f5:db:a9:e6:7c:a5:02:ea:0c:a6:a2:ca:ba:0e:04:
                    45:f2:02:97:bc:f3:8e:b1:ac:e7:e6:8f:14:6a:28:
                    11:7b:9e:da:77:18:37:8a:97:c7:1c:7e:fe:a2:cb:
                    7e:48:6e:dd:7b:7f:e6:ff:e6:3a:6d:fd:51:c6:28:
                    3f:8e:3e:2a:48:6f:ee:22:27:a6:34:6c:6e:e7:6f:
                    65:90:bb:02:64:99:69:21:76:b9:62:c7:0b:fd:13:
                    fa:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:1D:C4:DD:E6:27:4F:CC:DF:0E:B0:89:4A:4C:31:30:9B:64:4E:CD
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1FFAD974C3BD11F1B6B00FA1CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.81.80.0/20
                  154.88.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         23:23:7a:c8:ac:90:0a:7c:9c:10:c9:95:21:a3:ae:47:d1:bc:
         56:76:c3:72:5b:43:b5:bf:8e:fe:89:86:96:7b:35:f9:73:17:
         a5:12:5e:cb:25:df:3f:9c:5e:7c:4a:b6:be:f6:45:5e:04:95:
         8a:5e:cf:c0:c8:91:8c:62:47:26:d9:70:12:2d:68:94:bb:4a:
         c7:f0:da:35:96:22:c8:0a:e7:7a:5e:df:33:32:bb:5d:41:fd:
         86:b5:a2:11:60:0a:ea:c5:69:4e:6f:a9:c2:a9:a9:d0:4e:fb:
         7d:5f:d2:ee:5e:47:ea:d4:a0:40:7b:10:01:d8:f6:b7:9e:3f:
         c9:6e:03:e4:fe:32:c6:1b:0a:b5:67:2c:c1:1e:b9:c1:dd:ee:
         13:f7:6a:02:27:47:c4:66:e6:c4:37:64:4a:b4:35:73:70:cf:
         59:87:7e:41:19:80:ed:14:41:36:1b:3b:13:49:a5:fe:07:2d:
         b9:ca:6a:d2:cd:46:16:cd:c0:33:23:ea:28:47:42:9c:f5:0b:
         91:a2:bc:1c:f8:eb:e4:06:05:a9:59:5d:eb:b6:da:aa:19:36:
         86:7e:83:43:1c:49:12:a2:8a:97:b1:3e:af:e0:53:ee:45:ef:
         e6:be:7c:aa:cd:3b:dc:3c:8b:67:2f:a9:9e:a7:6c:23:ff:cc:
         dd:28:4c:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----