Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3C5BB070C53411F191F470B0CE1D38B0.roa
File:                     3C5BB070C53411F191F470B0CE1D38B0.roa (raw, json)
Hash identifier:          wGpZ7ti9lnBVYm4jzmY11ApvoHkAZwW+KKQaXlazx3M=
Subject key identifier:   70:4A:B5:2A:73:8E:D3:53:0E:AA:7E:61:64:75:F0:75:E5:3D:A5:F5
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01ED76
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3C5BB070C53411F191F470B0CE1D38B0.roa
Signing time:             Sun 11 Oct 2026 05:25:57 +0000
ROA not before:           Sun 11 Oct 2026 05:25:52 +0000
ROA not after:            Mon 09 Nov 2026 05:25:52 +0000
asID:                     49581
IP address blocks:        154.86.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126326 (0x1ed76)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct 11 05:25:52 2026 GMT
            Not After : Nov  9 05:25:52 2026 GMT
        Subject: CN=6acb1de5-a0ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:60:e0:95:da:d1:98:55:7a:85:8e:15:10:77:
                    fd:a6:6b:0b:e6:20:1f:80:60:b1:cc:62:83:20:d9:
                    b1:33:17:a5:0d:fa:19:e5:be:63:66:3a:e8:19:23:
                    68:a8:ff:61:77:cc:81:2a:65:a4:79:28:b1:16:0e:
                    46:d0:13:59:61:cb:87:32:cd:5c:99:80:9a:e1:e1:
                    ec:97:4c:55:17:c5:49:86:24:fa:29:f7:59:0f:bf:
                    05:71:c7:fe:5e:78:98:8c:e1:8f:43:5f:5b:25:d9:
                    e6:03:eb:4d:78:33:78:d8:5f:ca:d9:c5:6c:f6:11:
                    79:14:ac:ba:a8:ef:f6:a1:c1:95:70:f5:24:bc:f5:
                    03:dc:07:3e:10:a8:e9:47:0c:69:32:d8:cf:1c:b1:
                    52:94:5d:1f:83:97:e2:9b:16:99:53:b5:f6:84:48:
                    93:f8:9c:aa:b6:4f:e6:22:8a:f3:dd:25:47:0e:28:
                    89:1e:f3:c0:73:ea:c6:6b:ed:48:c6:61:30:de:e7:
                    bd:e0:70:f3:95:c0:52:c0:9e:92:c1:ee:fc:9d:98:
                    3c:42:a2:06:a3:16:5c:36:e7:a8:6a:40:41:10:ff:
                    76:e5:e7:28:d7:0d:e3:ba:e2:1d:24:4c:e5:9e:bd:
                    44:6a:a4:02:fa:e9:c4:7a:44:b8:12:a3:ee:90:74:
                    8c:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:4A:B5:2A:73:8E:D3:53:0E:AA:7E:61:64:75:F0:75:E5:3D:A5:F5
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3C5BB070C53411F191F470B0CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.86.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:2d:56:be:66:c1:6a:7e:dd:bf:e7:84:dc:3e:ce:ee:77:fd:
         0f:e5:1f:63:b2:13:d9:53:5f:d3:ed:ea:39:4d:5c:39:24:59:
         72:be:af:b3:d0:90:2c:f7:f6:63:f1:ff:03:76:5c:8c:12:df:
         0d:eb:06:60:c4:16:40:07:c3:bc:08:a8:f6:ab:3e:34:e8:ab:
         af:06:b2:d2:d2:84:bd:bc:80:47:09:20:3b:34:e8:c5:38:47:
         3c:b9:d6:4b:8b:d5:97:6a:91:1e:cf:59:fb:c8:86:f2:ee:ef:
         a4:ea:5a:04:1a:64:82:f3:d9:35:c0:96:33:6d:8d:c7:68:6c:
         b1:84:8b:24:3a:38:e6:83:33:1b:a6:ac:28:5f:42:1a:b7:c7:
         12:45:13:ae:cc:3e:bb:df:da:a3:6b:26:68:0d:b7:b7:6f:a7:
         78:9d:58:fc:bb:c0:06:4a:fc:e7:78:fe:ae:51:7b:70:df:58:
         9d:2b:e6:2b:16:ea:36:25:aa:e4:1e:b6:c8:f1:ce:d9:c7:39:
         fa:ff:30:71:7d:11:e2:d1:54:39:6a:b1:3f:5a:03:22:97:99:
         0e:e1:bb:81:fb:98:d5:25:8e:c3:6e:4b:3e:c5:71:2d:96:96:
         a8:b7:75:40:e1:d1:b1:b4:83:7d:1d:c0:33:8f:d5:48:68:b9:
         5f:9f:61:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----