Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2762981CBE3311F1863B31E6CE1D38B0.roa
File:                     2762981CBE3311F1863B31E6CE1D38B0.roa (raw, json)
Hash identifier:          7UKjtYmGVyLCUZETWU5Q990qcWRKvxLnhHGa/o1F4O0=
Subject key identifier:   D9:BC:58:9A:47:BC:9F:E8:E7:56:20:22:4D:77:BD:03:F3:37:7B:23
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EBCF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2762981CBE3311F1863B31E6CE1D38B0.roa
Signing time:             Fri 02 Oct 2026 07:30:34 +0000
ROA not before:           Fri 02 Oct 2026 07:30:30 +0000
ROA not after:            Mon 09 Nov 2026 07:30:30 +0000
asID:                     135377
IP address blocks:        154.202.65.0/24 maxlen: 24
                          154.202.66.0/23 maxlen: 24
                          154.202.66.0/24 maxlen: 24
                          154.202.67.0/24 maxlen: 24
                          154.202.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125903 (0x1ebcf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct  2 07:30:30 2026 GMT
            Not After : Nov  9 07:30:30 2026 GMT
        Subject: CN=6abf5d9a-b97e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:ab:84:30:24:5f:21:3b:f8:fe:ae:9b:0a:53:
                    53:a3:b9:0e:9f:ca:c8:9d:10:40:4f:bd:56:9d:58:
                    87:9c:30:ad:a1:e9:84:de:8d:88:8e:7d:24:87:90:
                    ab:10:85:95:99:f2:8a:fa:6f:15:f9:1e:6b:7e:64:
                    b3:ef:90:24:1a:90:d6:ce:ed:fa:1b:7f:b3:10:2d:
                    f1:bc:4e:72:30:b5:b5:b1:99:6c:c2:a1:46:92:b3:
                    70:e4:c8:0f:0d:62:6a:bc:7d:32:69:c2:21:f6:98:
                    db:84:6c:94:75:e0:52:92:3f:f3:9d:6b:48:58:c3:
                    29:0f:01:9b:13:76:49:e5:e2:40:53:d5:7e:47:43:
                    43:26:55:f3:a6:51:e9:73:9d:e9:8b:5a:0d:de:f8:
                    7c:5e:d9:80:f2:9f:a8:ec:fb:75:8a:03:a6:14:4a:
                    33:43:4f:d2:ca:04:1c:9a:de:fc:39:19:9a:80:46:
                    06:8d:85:29:30:7a:e5:fe:c9:66:c8:f3:bc:34:76:
                    e5:09:9b:44:8d:6d:80:61:18:60:2d:6d:2a:04:e3:
                    2c:6c:d4:53:65:e2:bc:7e:8e:7e:3e:02:cf:89:28:
                    b5:a2:b3:ad:8d:3c:3f:81:7b:d0:61:23:db:39:1f:
                    58:a7:a1:7d:1a:98:ec:24:7a:dc:0b:68:af:27:04:
                    6c:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:BC:58:9A:47:BC:9F:E8:E7:56:20:22:4D:77:BD:03:F3:37:7B:23
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2762981CBE3311F1863B31E6CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.202.65.0-154.202.68.255

    Signature Algorithm: sha256WithRSAEncryption
         53:39:f4:dd:17:5b:5d:86:52:da:cd:eb:08:0e:5d:40:97:14:
         4b:74:df:e4:42:74:8c:80:7e:b3:04:0e:17:48:4e:a1:e4:a6:
         38:85:3f:15:72:39:dc:5a:0a:29:44:90:77:94:59:32:56:07:
         28:09:f1:b9:e1:47:6c:b5:f6:13:3d:ed:72:d6:dd:32:f8:d7:
         13:5d:80:be:b9:a1:2e:f7:6f:bc:57:b9:d0:df:fb:92:ac:e4:
         18:9b:c4:02:e5:f3:fc:7b:26:fe:8e:6e:30:31:8d:49:33:b0:
         41:2b:e6:5d:24:47:87:0d:8a:d3:49:0a:fd:bc:e8:2a:46:06:
         d4:77:02:70:c1:5e:89:a7:fd:4d:b3:39:cd:8d:6b:41:45:76:
         55:9d:b5:e9:ac:e3:c7:cc:f3:08:1f:d3:37:e5:3c:90:bd:98:
         ab:4a:ca:31:b2:ed:4b:3d:ea:91:b2:c3:4c:77:c4:99:30:b3:
         f8:a3:b4:16:3f:89:7e:b0:fc:de:73:6e:04:e3:22:b2:aa:18:
         99:0c:0b:94:61:6e:f3:d1:9f:da:c3:dd:29:17:d4:a4:2e:b3:
         ba:09:af:3b:7c:bc:96:b5:9b:84:f4:19:03:3d:a2:3f:b5:d0:
         ee:4a:c1:ce:2f:d4:27:8e:08:be:79:d1:f6:9d:c0:c7:56:b8:
         32:f8:fb:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----