Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/256D885AC60D11F192978AB8CE1D38B0.roa
File:                     256D885AC60D11F192978AB8CE1D38B0.roa (raw, json)
Hash identifier:          0CMEtpLCD6MiXzJ+Pedxwh4GC5dEYDGQ5/wh07beQdI=
Subject key identifier:   6B:60:38:A8:F7:E8:C1:CC:85:AD:CB:CF:C3:14:88:F0:1A:11:7E:00
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EDAF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/256D885AC60D11F192978AB8CE1D38B0.roa
Signing time:             Mon 12 Oct 2026 07:18:39 +0000
ROA not before:           Mon 12 Oct 2026 07:18:34 +0000
ROA not after:            Sun 10 Oct 2027 07:18:34 +0000
asID:                     17557
IP address blocks:        154.198.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 17 Oct 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126383 (0x1edaf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct 12 07:18:34 2026 GMT
            Not After : Oct 10 07:18:34 2027 GMT
        Subject: CN=6acc89cf-98e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a3:c9:9a:e3:6a:75:e8:dc:d0:74:85:57:20:
                    2b:03:34:b4:7e:59:f8:cb:88:b6:6e:3e:e2:b9:b5:
                    c3:ed:87:e5:18:4c:ca:0b:60:35:85:38:a2:02:fd:
                    ad:34:0b:10:2b:33:b2:83:16:c8:91:62:0c:49:77:
                    f5:b1:96:63:10:11:a4:2f:21:f2:89:57:ac:fb:1d:
                    12:e6:ec:b4:76:c6:ff:16:86:a7:b5:28:8c:3c:46:
                    6b:29:41:18:61:6c:65:0e:b1:1b:b9:f4:d6:7a:73:
                    75:b7:a0:57:3e:cb:c6:b0:4c:ec:3f:f5:a4:b8:7a:
                    ee:97:07:6e:f9:fc:e9:67:ca:63:17:5b:57:56:c9:
                    95:e8:04:15:7f:e8:34:56:ef:7a:f7:de:f8:fa:e4:
                    99:81:20:65:db:e4:fe:e1:f9:2f:16:d9:46:5f:38:
                    b3:e8:79:52:64:1f:e1:ea:bd:90:e5:7f:2b:9f:b3:
                    a5:d0:c4:d7:3c:7b:1a:d7:a5:c3:51:bb:72:e2:c3:
                    47:6f:d5:3a:7e:f7:a5:c0:c8:db:7e:19:6f:46:53:
                    78:6d:86:28:53:46:97:8a:1b:bf:43:4f:8c:35:42:
                    7e:11:bf:40:ce:c4:fd:0a:a2:43:18:1c:09:4c:52:
                    d8:f0:cc:75:68:29:36:07:f2:12:de:18:88:48:36:
                    2b:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:60:38:A8:F7:E8:C1:CC:85:AD:CB:CF:C3:14:88:F0:1A:11:7E:00
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/256D885AC60D11F192978AB8CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.198.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:42:cd:b6:7a:5f:03:b7:0d:ac:ee:03:7b:3a:0d:4f:ce:06:
         9e:18:fe:b1:d6:bc:e4:b1:9f:1f:29:31:b5:dc:7c:a5:31:25:
         d8:7a:da:ab:94:56:7d:c5:a4:aa:47:e7:e0:e4:15:65:04:6c:
         7d:fa:28:48:38:20:b0:b1:32:fb:bb:2f:e3:0a:b7:5d:a3:14:
         0d:cc:c8:de:58:ad:a9:e0:c0:72:bf:20:c6:83:2c:88:f6:b1:
         0e:45:43:85:4b:96:3c:04:b3:8a:c2:14:9d:0a:33:09:1f:3a:
         d6:5a:61:2a:6f:9d:3a:7d:58:8d:25:e2:74:9d:6b:81:3d:6d:
         79:0a:dd:fb:8f:2b:ad:9e:c6:f6:f2:54:94:c8:45:91:d4:b2:
         12:27:13:34:95:82:4d:ca:34:c0:61:0a:a0:87:26:26:c8:e4:
         14:f4:d7:af:2f:2d:a5:ac:c3:69:d7:69:68:33:f7:31:ed:d4:
         b6:34:ed:2c:85:1a:80:59:a9:e2:57:d1:0d:da:10:48:a1:49:
         65:84:45:f3:68:48:70:9d:cc:82:e4:b5:32:8d:2a:bd:e4:34:
         82:6a:46:52:5a:88:a1:61:14:ef:30:b4:9d:5d:48:b5:62:9b:
         15:f5:0d:95:c7:5d:3b:e0:7a:37:09:95:a4:cb:a7:ae:d0:1e:
         77:1a:0f:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----