Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2AE60566C3B311F1A5180DE0CE1D38B0.roa
File:                     2AE60566C3B311F1A5180DE0CE1D38B0.roa (raw, json)
Hash identifier:          k/UzLmML2WXC/xETzhvNNkmbd6KhHisL9Xdi/0DzZtk=
Subject key identifier:   A3:CE:D2:FF:CF:61:15:5D:FB:20:97:90:54:24:50:69:D2:6E:DC:2E
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01ECFA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2AE60566C3B311F1A5180DE0CE1D38B0.roa
Signing time:             Fri 09 Oct 2026 07:29:31 +0000
ROA not before:           Fri 09 Oct 2026 07:29:27 +0000
ROA not after:            Thu 05 Nov 2026 07:29:27 +0000
asID:                     264605
IP address blocks:        154.88.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126202 (0x1ecfa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct  9 07:29:27 2026 GMT
            Not After : Nov  5 07:29:27 2026 GMT
        Subject: CN=6ac897db-0a14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f4:5d:4c:dc:e6:62:64:68:fa:b6:8f:4a:07:
                    0b:d4:eb:b5:49:bb:f2:f9:39:f6:82:2c:ce:14:84:
                    ff:ab:7d:5d:22:6a:5f:5a:aa:14:64:0d:89:68:c0:
                    71:2d:78:87:d7:39:c2:36:de:90:f4:fb:ba:da:70:
                    8d:aa:3f:c2:cf:ab:63:1f:88:c0:f2:5f:6a:7f:93:
                    df:08:a9:ca:cd:fe:f2:a0:7e:40:89:e9:3c:32:7b:
                    17:ea:07:c3:e3:8f:38:9d:6b:2f:ca:dc:b3:fa:c5:
                    3c:ac:cb:7a:98:54:a4:09:58:44:47:fd:84:a4:af:
                    2a:8d:bc:42:e8:e6:7d:4e:2f:25:af:99:5a:0c:05:
                    b5:7e:09:65:69:14:8b:f8:23:9b:9e:cf:6e:38:86:
                    89:a8:4c:cb:6d:0e:bd:12:68:f6:b6:15:9e:3d:1b:
                    b5:6e:ab:98:85:5d:c1:02:55:7b:3e:d7:43:14:6b:
                    76:18:88:5f:a5:cc:93:d5:1e:51:5c:7e:4b:e5:63:
                    94:64:01:75:51:cf:65:eb:1f:0b:01:33:ca:a3:50:
                    2d:1a:3a:88:be:36:ec:72:30:60:f6:9b:ea:f3:18:
                    d9:7e:d9:0e:62:11:df:39:93:0d:69:39:27:46:3c:
                    3d:4a:7f:d9:f3:e2:75:b8:df:32:a2:cd:94:f7:8d:
                    9a:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:CE:D2:FF:CF:61:15:5D:FB:20:97:90:54:24:50:69:D2:6E:DC:2E
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2AE60566C3B311F1A5180DE0CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.88.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         aa:fd:da:e9:85:5a:39:6a:5e:06:65:59:df:68:bd:69:98:e4:
         de:4e:82:27:da:23:7b:a9:6d:6a:36:32:c0:d7:8d:3f:29:09:
         a1:7c:b4:99:c0:74:38:0b:89:03:e0:18:fd:24:9b:a8:7b:57:
         fd:10:a9:43:29:b6:65:3d:ae:66:b9:27:c8:1f:9f:0a:e8:98:
         82:6c:f4:60:63:cd:b0:09:91:d2:5c:76:c8:cd:56:58:37:78:
         aa:4e:c9:e6:c8:51:e5:8c:c7:d6:0f:01:43:8a:4f:77:b6:5a:
         db:9d:f6:ac:1c:ed:d8:6a:43:24:17:a4:b6:9b:e1:d4:69:58:
         4f:5d:5b:ef:80:bf:db:f6:a3:dd:4c:80:bd:02:46:74:95:5a:
         90:08:3a:a0:df:51:9c:10:5d:3e:00:bb:11:df:d3:fe:60:46:
         be:a1:89:55:4e:11:bb:e8:92:21:cd:63:89:f1:a8:85:36:b2:
         28:be:f6:31:12:13:ef:35:c3:64:52:73:0a:bf:fb:b8:97:a6:
         cc:cb:e0:60:cb:99:11:c8:28:ba:31:b9:d2:9e:86:cc:e4:70:
         db:14:3f:5a:9c:62:d5:65:e6:af:08:ad:2d:b0:2d:94:ad:2c:
         98:aa:00:7b:a2:c7:04:f4:fb:fd:ef:1c:d4:63:74:39:5b:bd:
         cb:b1:99:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----