Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2BCC2D86B7E011F189FC2CA6CE1D38B0.roa
File:                     2BCC2D86B7E011F189FC2CA6CE1D38B0.roa (raw, json)
Hash identifier:          Xo2UUdhsTGyklOR2ViMq0UNLtrgka8FwpqSNCmi1nys=
Subject key identifier:   E8:BE:58:6B:13:68:2B:04:D6:FB:80:A3:7D:C5:29:3E:44:A0:A5:80
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EA65
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2BCC2D86B7E011F189FC2CA6CE1D38B0.roa
Signing time:             Thu 24 Sep 2026 06:21:26 +0000
ROA not before:           Thu 24 Sep 2026 06:21:22 +0000
ROA not after:            Sat 31 Oct 2026 06:21:22 +0000
asID:                     273656
IP address blocks:        154.216.129.0/24 maxlen: 24
                          154.216.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 14 Oct 2026 00:07:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125541 (0x1ea65)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 24 06:21:22 2026 GMT
            Not After : Oct 31 06:21:22 2026 GMT
        Subject: CN=6ab4c166-9a62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b4:0a:44:60:14:77:bd:91:5f:e4:8e:b1:a5:
                    0b:4a:6d:87:f4:6e:2d:47:6c:80:1e:90:6f:74:96:
                    aa:a6:73:04:03:8c:8f:e0:a5:87:ef:ca:13:68:74:
                    06:f9:75:a7:9e:40:6a:5e:d2:6f:5f:44:11:a4:82:
                    d4:13:48:c9:0e:f2:48:bb:61:72:91:44:52:52:21:
                    ec:29:23:eb:79:ce:62:bd:f8:41:57:01:43:be:6f:
                    61:b8:94:64:24:d8:99:16:99:3e:b6:b0:90:03:e6:
                    d4:91:5d:97:7b:4d:73:d7:48:94:b7:92:a8:db:5b:
                    58:3e:7b:5e:64:73:6e:c6:8f:68:a6:d4:b9:44:b4:
                    56:d9:09:a9:9b:4b:c8:95:ea:77:94:a7:3b:42:86:
                    40:15:e5:38:f3:80:e1:f3:9a:cb:af:ae:7e:52:71:
                    9a:5a:e8:a8:b6:05:e8:78:51:b2:5d:65:5e:3c:60:
                    95:74:5e:d7:fb:05:c7:6d:c0:d2:73:1a:11:d2:9f:
                    97:22:8f:bb:71:c0:d1:61:6d:3c:2d:52:34:4d:ec:
                    dc:0e:c1:1e:a3:cf:d4:4c:12:2a:ab:26:65:b8:99:
                    95:b6:cb:79:c8:5f:24:fa:ba:21:2f:8c:77:98:1d:
                    c3:65:8f:09:4e:ae:e1:8a:a6:7a:51:44:fd:67:c4:
                    e9:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:BE:58:6B:13:68:2B:04:D6:FB:80:A3:7D:C5:29:3E:44:A0:A5:80
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2BCC2D86B7E011F189FC2CA6CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.216.129.0-154.216.130.255

    Signature Algorithm: sha256WithRSAEncryption
         65:f8:db:2b:78:a9:2f:53:5c:07:97:89:59:e3:1d:dd:7a:32:
         03:65:3f:1b:03:a8:6b:43:ec:ea:fa:1e:22:22:3f:53:30:46:
         59:d2:cd:0b:c6:3f:a1:03:d2:71:ba:52:39:4e:2e:f8:4a:0e:
         01:e0:25:7e:ce:31:89:d8:ee:42:2d:dc:c8:f7:06:82:c0:b7:
         db:82:5c:cc:82:b9:85:e9:68:17:c8:a5:c4:fb:ec:29:c5:aa:
         b9:d3:f1:49:a6:c9:a2:91:b6:78:50:b9:0a:c1:13:38:7b:de:
         ee:d0:3b:fd:40:86:7b:59:b7:b0:6f:56:b2:be:cf:c8:49:cd:
         a7:34:a7:63:57:d2:00:30:75:53:ff:99:ad:9b:08:cc:ef:7d:
         3f:fd:7a:0f:f0:45:12:aa:68:09:bb:ea:55:58:32:3a:b7:5a:
         1d:f8:5a:07:35:45:4c:36:b3:33:60:bd:6a:3d:0c:0b:d6:66:
         d0:e2:d0:16:b7:ca:69:f8:82:57:a4:78:d4:2f:4b:af:f3:15:
         98:f0:70:24:c5:df:e7:82:68:9f:2c:60:f5:22:71:07:6e:ba:
         22:83:b3:7e:e8:80:90:ef:9a:cb:2e:6f:d2:09:50:b3:b1:c7:
         6e:0d:1f:82:01:19:6b:fe:e5:a1:2e:3e:39:75:eb:a5:ce:13:
         b6:e0:5e:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----