Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/27E1A18EC48C11F191D9B0E6CE1D38B0.roa
File:                     27E1A18EC48C11F191D9B0E6CE1D38B0.roa (raw, json)
Hash identifier:          TDrtitcR+HP02yIr2KM8NBIoRPg2foIdK0oc8HJCvZg=
Subject key identifier:   99:0A:B3:AE:E9:07:08:9B:48:1C:5A:F1:3F:20:F0:65:27:6F:6E:FB
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01ED3D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/27E1A18EC48C11F191D9B0E6CE1D38B0.roa
Signing time:             Sat 10 Oct 2026 09:22:47 +0000
ROA not before:           Sat 10 Oct 2026 09:22:43 +0000
ROA not after:            Mon 16 Nov 2026 09:22:43 +0000
asID:                     401434
IP address blocks:        154.85.16.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126269 (0x1ed3d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct 10 09:22:43 2026 GMT
            Not After : Nov 16 09:22:43 2026 GMT
        Subject: CN=6aca03e7-c092
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:42:56:c0:32:b7:5d:c6:25:e4:3f:4c:a8:f6:
                    f8:e3:54:8e:84:c6:32:da:93:d4:1f:73:d4:29:5c:
                    7c:01:1c:f0:7a:0a:e5:a1:ba:b2:57:eb:33:92:42:
                    40:39:51:9d:7a:eb:8b:38:c1:1e:e2:15:62:d5:2e:
                    1f:8c:a6:1c:39:ed:87:56:11:6c:24:d9:17:06:1b:
                    72:20:f1:5b:13:af:9b:05:31:97:59:e4:05:df:cc:
                    db:54:68:4b:62:6b:f2:09:10:1f:b3:85:30:92:8b:
                    25:80:df:6b:c9:9b:22:22:23:86:c8:86:20:55:38:
                    fe:9e:75:fc:0a:a0:25:e7:7b:2d:fe:a4:2f:0d:3f:
                    fb:69:92:99:16:3c:e9:98:9f:ac:4d:b2:c7:35:ab:
                    d8:6e:d2:1b:26:42:9f:4d:51:e9:ca:ef:46:fb:60:
                    53:50:6e:c5:5c:12:14:4b:79:5b:52:43:d7:41:7a:
                    7c:06:79:61:f4:58:46:60:f5:4e:f7:b4:ef:19:3e:
                    ea:20:e4:75:38:4f:68:5a:a6:8e:25:d9:cd:49:da:
                    c3:8d:37:4f:9b:31:aa:26:a7:bb:8c:45:db:69:9c:
                    2d:fa:a3:d1:c3:09:8d:3a:04:95:80:47:ec:c4:cc:
                    82:78:c7:36:78:c5:94:c7:0a:00:82:ca:2a:72:4a:
                    13:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:0A:B3:AE:E9:07:08:9B:48:1C:5A:F1:3F:20:F0:65:27:6F:6E:FB
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/27E1A18EC48C11F191D9B0E6CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.85.16.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3b:59:fb:b3:94:53:c7:2c:ca:a0:a5:8b:c4:25:75:05:95:07:
         4b:34:25:da:17:bf:66:95:5c:a9:5b:35:82:8b:5c:95:10:13:
         2a:f4:9e:61:24:2b:d7:af:ef:b3:6f:af:fc:56:43:42:40:2e:
         77:9a:2a:2a:19:b9:16:78:35:dc:31:cc:ce:19:79:ef:09:f4:
         e4:67:bb:b6:ef:38:0b:7a:1e:44:cd:7e:2b:7f:0d:66:d6:a4:
         1e:96:50:11:35:3d:76:8f:32:65:f1:54:3e:40:c5:c1:62:d3:
         e1:16:e1:32:4d:6d:cd:76:02:f8:00:27:ba:09:fa:20:8d:e0:
         79:4d:85:53:41:49:79:19:ac:9d:76:8f:82:13:ba:72:4d:33:
         ca:5f:ef:a5:02:bb:57:15:76:3c:48:60:34:24:92:10:32:01:
         62:bb:69:cd:75:54:a8:97:68:89:b4:f9:36:2a:7a:46:74:42:
         29:45:90:ae:26:3d:f6:d2:f6:e0:d0:b9:64:45:60:d1:ee:8d:
         76:64:33:67:f1:ca:fc:0a:ef:9d:9c:3a:99:c6:f7:23:5e:17:
         82:4f:bf:ad:e7:f6:26:1b:5e:7c:b5:26:55:91:bb:e8:2a:8a:
         b8:10:f4:7c:f4:82:71:d1:ed:19:8c:d8:64:8e:21:56:58:52:
         8a:f8:98:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----