Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/34806BBCC70411F1B95250FDCE1D38B0.roa
File:                     34806BBCC70411F1B95250FDCE1D38B0.roa (raw, json)
Hash identifier:          5TGcBqTrUx1VMUfsSWtE7GiaBYnWkA1x6JkjWXAGm4c=
Subject key identifier:   88:F3:70:17:D3:A3:62:53:AB:E5:1B:29:BE:11:27:99:26:60:28:5D
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EDD4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/34806BBCC70411F1B95250FDCE1D38B0.roa
Signing time:             Tue 13 Oct 2026 12:47:10 +0000
ROA not before:           Tue 13 Oct 2026 12:47:05 +0000
ROA not after:            Thu 22 Oct 2026 12:47:05 +0000
asID:                     17497
IP address blocks:        154.81.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 17 Oct 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126420 (0x1edd4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct 13 12:47:05 2026 GMT
            Not After : Oct 22 12:47:05 2026 GMT
        Subject: CN=6ace284e-e6bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:65:74:98:86:e9:95:db:21:58:98:e9:18:3e:
                    32:e2:15:52:0d:89:7d:ad:16:f0:45:3f:cd:41:c4:
                    0f:fd:f9:f9:d5:60:5e:5e:67:cf:46:36:53:0e:33:
                    10:20:72:4e:1d:ba:c9:62:5c:eb:81:67:72:dd:29:
                    d5:44:5c:85:6d:e0:3f:6c:32:9e:3e:85:10:dd:55:
                    7d:91:62:6f:88:4c:0a:26:60:03:d0:cc:fa:21:11:
                    06:43:87:48:bb:88:2f:e3:6b:23:e2:6a:6d:5e:12:
                    58:b9:38:ad:6a:ff:c8:6b:48:a5:08:c2:b7:25:46:
                    af:54:61:11:2b:e0:18:46:25:04:02:96:6c:4c:b3:
                    a2:07:1e:6e:36:e7:aa:23:8e:5e:2a:c9:73:32:37:
                    99:76:1a:ba:87:b9:1f:eb:b8:29:4b:20:00:f0:99:
                    74:90:02:3e:0a:45:e7:7a:3d:b7:17:a5:01:54:fd:
                    df:13:ff:51:33:3a:f4:50:50:b2:46:fd:4e:92:df:
                    16:4b:46:bd:5e:ad:60:a2:ce:e6:d1:17:02:ff:f6:
                    62:21:4c:90:34:a4:1d:c7:69:8f:44:7e:e6:03:f8:
                    86:c8:1e:34:b5:67:dd:2c:e5:e3:f5:85:82:f2:6a:
                    4d:4b:e8:88:1c:d8:8b:ea:c4:43:7c:c8:87:84:d2:
                    b7:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:F3:70:17:D3:A3:62:53:AB:E5:1B:29:BE:11:27:99:26:60:28:5D
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/34806BBCC70411F1B95250FDCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.81.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:24:f5:70:4e:88:b6:b9:a5:73:54:6e:3b:01:34:f4:16:55:
         7c:fa:e4:c0:a6:f1:93:7e:df:5f:c2:db:81:de:1e:fe:3e:aa:
         2e:78:ab:58:1e:a5:af:94:83:6c:5f:ad:8b:22:56:8a:a6:62:
         16:6e:d3:8e:90:c3:0c:73:59:fc:c1:17:5a:d8:a7:3a:46:01:
         9a:f6:78:37:25:f6:7d:f4:12:b7:fe:f5:62:4a:4c:a7:75:ae:
         e7:fc:76:33:ac:03:85:8d:c4:9d:82:11:e6:87:6b:70:41:90:
         49:4f:94:c0:04:be:3e:6e:ef:e1:0d:ae:89:1c:f6:bf:b7:22:
         3e:3b:8e:df:91:c7:d6:59:46:9d:90:37:a4:b2:52:c9:51:bb:
         ed:b9:30:1d:47:ef:5a:75:cf:50:cb:7c:b7:07:73:5f:df:ec:
         64:80:1e:82:79:75:d4:6a:cb:38:3e:9f:55:70:84:42:99:80:
         37:97:53:88:ff:4b:17:eb:42:48:c8:b9:b3:77:9a:b3:13:65:
         58:48:9f:f3:3b:87:b6:1a:91:ad:3c:5e:d8:16:e7:47:76:54:
         e6:a6:cf:b3:93:c2:e0:84:97:3e:05:a8:8c:53:a2:52:64:5a:
         bf:e7:42:68:a2:97:a9:f0:3c:3c:87:40:52:7e:82:ba:6a:6c:
         16:fe:92:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----