Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2CB75340C61011F1A7611CCDCE1D38B0.roa
File:                     2CB75340C61011F1A7611CCDCE1D38B0.roa (raw, json)
Hash identifier:          z17w3Cp4ELsQVzoN1GJpWrRBZpGaby3GkaV37oUFz4o=
Subject key identifier:   FF:97:6E:47:00:56:7C:6D:E5:B6:2F:57:FD:CE:6B:67:EA:38:72:20
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EDB5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2CB75340C61011F1A7611CCDCE1D38B0.roa
Signing time:             Mon 12 Oct 2026 07:40:20 +0000
ROA not before:           Mon 12 Oct 2026 07:40:15 +0000
ROA not after:            Sun 22 Nov 2026 07:40:15 +0000
asID:                     22516
IP address blocks:        154.86.192.0/18 maxlen: 24
                          154.90.224.0/19 maxlen: 24
                          154.91.224.0/19 maxlen: 24
                          154.93.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 17 Oct 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126389 (0x1edb5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct 12 07:40:15 2026 GMT
            Not After : Nov 22 07:40:15 2026 GMT
        Subject: CN=6acc8ee4-bb2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:28:db:f6:ae:7c:9a:45:f9:06:3c:c7:a3:79:
                    cc:94:d6:2f:00:e0:ef:3d:0a:34:eb:ed:be:f5:58:
                    e7:d6:43:f7:72:5e:e1:f9:70:5e:d2:50:da:42:87:
                    9b:24:85:c3:f0:9b:49:ff:73:3d:dc:c4:d8:a7:9c:
                    75:f1:65:f9:66:b8:c9:a5:58:3a:fe:d1:58:61:89:
                    3c:89:5a:a3:ab:0c:e0:c1:ba:08:73:8a:81:1f:17:
                    99:7a:df:57:8d:49:de:18:cc:64:8a:59:00:e4:f2:
                    ba:ae:74:39:e3:ed:ac:6c:1b:6c:a0:62:d7:6b:f2:
                    dc:17:bd:65:a6:06:66:eb:6c:b9:5d:62:9c:0a:50:
                    59:6d:dd:a4:3e:4c:9c:0e:1f:e9:80:6d:3d:8c:f8:
                    71:df:34:70:f7:6f:0e:d0:fe:d3:a6:21:65:b1:d1:
                    80:7f:bf:4c:60:4a:9e:55:1c:f2:61:51:f7:4b:1c:
                    95:d7:58:3e:00:97:f3:d2:00:9c:25:73:ff:35:e3:
                    0e:2b:16:06:db:af:08:92:f4:8e:9c:cd:08:bb:13:
                    8b:95:73:2d:b0:ef:42:ab:b9:89:68:0a:5d:54:86:
                    d7:29:50:c0:fa:c4:a2:e4:9a:d2:f9:17:3b:32:b7:
                    2d:dd:87:c3:8f:6c:57:ed:7b:b3:56:9b:8a:f1:a5:
                    ea:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:97:6E:47:00:56:7C:6D:E5:B6:2F:57:FD:CE:6B:67:EA:38:72:20
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2CB75340C61011F1A7611CCDCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.86.192.0/18
                  154.90.224.0/19
                  154.91.224.0/19
                  154.93.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         0a:c8:58:7a:51:73:b7:1d:26:54:76:27:8b:02:81:39:e1:ce:
         12:05:ce:3b:82:9a:20:56:e4:a7:72:ae:e4:8a:d2:58:85:46:
         db:e6:27:77:43:54:73:ff:8b:f0:05:04:a3:b5:2a:b2:8c:c2:
         da:39:44:09:86:c8:04:63:05:62:73:2c:9a:3a:be:72:84:95:
         ce:a0:e3:4c:15:a4:ef:34:13:6b:e5:2e:ea:6a:26:1b:14:52:
         67:2a:c8:4b:7f:ab:1d:f7:67:14:02:84:9d:dd:3f:0e:2c:1b:
         63:c3:26:4a:f6:37:d7:ed:70:26:95:37:b9:95:78:a3:69:44:
         23:d5:0b:4c:c4:0a:ff:a3:70:42:f2:2c:4e:ed:1f:ef:f5:35:
         ac:10:76:94:36:e6:ab:f4:47:b1:e5:96:42:64:53:e7:20:fd:
         55:fd:4f:03:31:f1:3c:7f:db:45:30:73:8b:cb:ea:0d:3d:50:
         1f:04:58:39:3d:bd:88:98:71:84:4b:ec:a4:1b:5e:00:2a:a9:
         01:27:cb:6d:e0:25:97:a9:10:a8:b3:e1:f4:0e:2e:5a:88:17:
         66:3c:2e:67:81:70:67:7e:b4:82:6d:09:14:69:8f:ad:ca:e0:
         8d:5b:23:a3:3b:37:8e:e1:37:a2:a7:b3:9e:15:d4:a3:77:42:
         e1:04:40:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----