Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2A000ECAC08F11F1B3E7F9CCCE1D38B0.roa
File:                     2A000ECAC08F11F1B3E7F9CCCE1D38B0.roa (raw, json)
Hash identifier:          HfLhj08+1amsfinQueLYESxpSiWMQW8oFYJrWqJLm4k=
Subject key identifier:   C9:C9:42:A6:70:FA:0B:94:F6:BD:25:28:17:B1:6C:25:B2:D1:C9:E3
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EC40
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2A000ECAC08F11F1B3E7F9CCCE1D38B0.roa
Signing time:             Mon 05 Oct 2026 07:34:14 +0000
ROA not before:           Mon 05 Oct 2026 07:34:11 +0000
ROA not after:            Thu 15 Oct 2026 07:34:11 +0000
asID:                     26617
IP address blocks:        154.202.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126016 (0x1ec40)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct  5 07:34:11 2026 GMT
            Not After : Oct 15 07:34:11 2026 GMT
        Subject: CN=6ac352f6-a847
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:09:16:46:43:7e:8f:b4:39:5d:72:4a:84:87:
                    d1:a6:ea:f8:ec:b8:d9:09:1c:69:4a:c6:d1:85:f1:
                    f9:c3:cd:61:5c:d1:0d:bf:f9:4c:3c:59:8c:67:26:
                    88:e8:28:b2:5d:8f:48:43:e9:40:03:20:3d:8e:41:
                    5d:76:78:15:cd:68:0d:4b:1d:a6:47:21:99:33:09:
                    f1:95:d0:ce:07:fd:38:21:5a:9e:20:49:e3:13:a7:
                    66:a6:b5:67:5b:df:9b:ad:6f:66:02:b5:c8:aa:6e:
                    da:e6:ab:e3:9f:18:ce:88:bd:83:b5:eb:36:8b:d3:
                    96:f0:63:0d:8c:2f:58:cf:4e:a2:da:1f:19:31:8b:
                    88:e0:ef:92:48:4a:b7:b8:03:ad:69:7b:f7:c9:b0:
                    69:f5:3f:aa:69:5e:98:b0:cd:44:05:a7:30:ac:53:
                    79:16:da:7b:5c:43:c9:4d:29:3d:96:59:ab:bb:4a:
                    57:1a:fd:00:26:c9:1d:fb:e9:72:09:c0:39:86:cb:
                    f7:6a:cc:eb:9a:d5:31:63:83:01:ec:5f:8a:f6:3b:
                    52:78:7e:47:6f:37:47:ae:32:71:d4:fe:c7:23:1d:
                    1c:f1:c4:b1:ab:51:0c:62:ef:05:d7:34:a5:2d:6f:
                    e1:18:09:c6:8f:93:35:4b:40:91:2f:f7:90:29:fb:
                    15:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:C9:42:A6:70:FA:0B:94:F6:BD:25:28:17:B1:6C:25:B2:D1:C9:E3
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2A000ECAC08F11F1B3E7F9CCCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.202.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:4f:c8:08:b9:d7:f2:de:f9:c4:04:b9:66:88:bb:47:f2:76:
         c1:37:a7:be:67:82:35:d9:e4:f8:59:be:d0:a2:71:d4:2e:bb:
         88:63:79:b4:34:fe:b0:43:09:df:ac:65:4f:86:6b:eb:70:fe:
         bc:19:d7:ca:b4:08:b2:f9:27:f7:4a:e3:d1:6c:10:a3:f5:a1:
         44:7f:2d:54:cc:db:7f:38:82:ef:8c:0e:7d:38:d3:02:98:4c:
         ab:70:dd:e7:f4:ac:0e:ce:3e:8a:be:9a:88:9e:16:6d:d1:aa:
         bf:c8:34:2b:9f:17:e3:3f:0a:51:0c:05:1e:e4:6d:56:d8:2a:
         36:00:b6:b8:bd:e2:fc:65:8f:55:b4:59:dd:93:eb:75:a2:2f:
         bd:1b:5e:68:15:d0:fd:ed:3a:b7:0b:73:8d:fe:33:b5:0b:e4:
         c1:66:a5:6e:ad:5f:33:1c:13:02:a2:03:89:bb:ec:7e:44:d7:
         b5:33:42:f9:f2:c7:94:86:f6:b0:6a:26:c1:be:cd:3a:fd:8e:
         0e:a0:56:b5:73:60:be:61:21:13:a9:23:bc:d3:9d:1a:fe:d7:
         fa:0d:a8:05:37:7e:1b:57:ea:46:56:62:dd:dc:18:22:ab:17:
         c1:3a:9d:a1:b1:cb:f7:e0:b4:fa:86:58:9a:a9:ee:df:43:6e:
         05:9d:94:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----