Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/31847F7AC61911F181E6A903CF1D38B0.roa
File:                     31847F7AC61911F181E6A903CF1D38B0.roa (raw, json)
Hash identifier:          +9w4Nz6aBLz1D6thWjq/R57jPUthb6+blo12XBOW9GE=
Subject key identifier:   23:D2:5D:05:7B:66:05:86:E8:99:90:36:E8:2B:39:ED:71:F4:F2:D8
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EDB9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/31847F7AC61911F181E6A903CF1D38B0.roa
Signing time:             Mon 12 Oct 2026 08:44:54 +0000
ROA not before:           Mon 12 Oct 2026 08:44:48 +0000
ROA not after:            Wed 18 Nov 2026 08:44:48 +0000
asID:                     25198
IP address blocks:        154.88.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 17 Oct 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126393 (0x1edb9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct 12 08:44:48 2026 GMT
            Not After : Nov 18 08:44:48 2026 GMT
        Subject: CN=6acc9e05-c736
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:39:39:e6:cc:ae:72:b4:49:99:77:22:47:79:
                    82:d7:9b:eb:56:17:b6:5d:98:cd:fc:5d:3d:e8:c4:
                    fd:8e:f7:92:d2:2b:fe:cf:68:9b:c0:bc:ed:51:17:
                    5a:03:24:a2:3e:f1:fc:4d:7e:db:a9:d3:11:75:a7:
                    91:0e:48:e0:d3:a5:d0:46:44:44:b8:6d:3e:b9:05:
                    8b:0c:64:33:49:ee:c0:aa:69:4c:0f:d1:e2:a5:02:
                    ca:f9:36:69:ab:ee:a0:af:10:73:f9:9a:33:03:79:
                    0d:13:cc:5a:58:db:ae:81:f1:14:c4:a9:6a:2f:d5:
                    b5:c0:0f:ab:09:5f:56:06:f3:52:c6:39:e4:6a:8c:
                    9b:9c:a0:5b:48:e5:c9:bd:ee:c1:25:34:2a:f0:b7:
                    fa:df:a2:75:43:fd:0c:2d:b8:5c:c8:9f:a5:e9:3d:
                    db:83:54:c5:e3:8f:1e:14:2e:13:17:50:31:24:64:
                    b6:21:e6:68:83:4e:02:af:8a:d3:9a:62:4c:db:4c:
                    a9:74:7c:a2:95:6b:c5:d5:77:70:79:8c:be:c7:a7:
                    bb:8a:a0:99:39:3f:05:e5:b7:e5:d6:fe:4e:d0:f7:
                    ae:fd:52:ea:4c:bd:e9:ab:4d:6f:30:76:5c:54:69:
                    00:5a:4f:78:29:b6:8c:6c:d3:f6:cc:70:ca:09:fc:
                    1c:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:D2:5D:05:7B:66:05:86:E8:99:90:36:E8:2B:39:ED:71:F4:F2:D8
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/31847F7AC61911F181E6A903CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.88.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b4:63:7d:20:2b:e8:e3:83:8e:fe:a6:ac:79:ed:8b:b9:2d:66:
         1e:d7:64:e0:14:33:37:f7:3b:24:e1:c3:4e:07:51:a6:fc:5b:
         ab:0c:d3:f2:fb:f9:7c:47:75:68:e6:cb:db:5d:86:b9:15:5d:
         b3:fb:7c:8e:b7:1e:8c:5e:b8:d3:78:e1:65:20:7f:c4:e8:f4:
         64:b2:bd:3a:94:9f:3d:ef:e3:91:6b:8b:4e:05:97:bf:be:01:
         0c:4d:b5:ae:e2:4d:ab:58:f1:db:0b:d5:05:d9:e8:a0:11:64:
         1b:6d:33:2e:65:2c:cf:25:af:c6:23:87:32:2a:68:03:08:ed:
         31:87:71:7f:f1:9e:82:73:e6:ea:6b:f4:57:c2:ff:ac:f2:0f:
         34:4b:06:d8:fa:67:ff:69:93:6b:8d:a6:f6:50:a1:43:49:29:
         67:c2:4a:07:fe:b5:ae:7e:8e:aa:dc:9c:d6:86:ab:ea:0c:95:
         4f:1f:bd:26:64:96:b8:93:61:ec:24:e6:dc:e3:1c:af:f9:c5:
         8a:a2:26:d7:67:ca:ce:e8:8e:36:1a:cd:ad:c8:8c:2c:f7:71:
         ec:a7:d2:40:41:9e:1e:15:73:30:7f:79:9b:3f:8b:95:6d:d0:
         ac:91:71:c3:f2:61:15:96:31:fb:aa:55:57:a4:cf:1b:8f:cc:
         48:39:0b:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----