Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3DDF35B8C57D11F1B2DA6604CF1D38B0.roa
File:                     3DDF35B8C57D11F1B2DA6604CF1D38B0.roa (raw, json)
Hash identifier:          mDWRCrP42SdwVE5QyqMhRXiRCgcm0ewwzYz1P4Qkwjs=
Subject key identifier:   94:84:7A:67:11:41:3A:1F:E4:90:44:70:94:A3:BF:8D:E0:6E:CA:69
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01ED94
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3DDF35B8C57D11F1B2DA6604CF1D38B0.roa
Signing time:             Sun 11 Oct 2026 14:08:33 +0000
ROA not before:           Sun 11 Oct 2026 14:08:28 +0000
ROA not after:            Tue 20 Oct 2026 14:08:28 +0000
asID:                     153671
IP address blocks:        154.196.170.0/23 maxlen: 24
                          154.196.248.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 20 Oct 2026 00:07:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126356 (0x1ed94)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct 11 14:08:28 2026 GMT
            Not After : Oct 20 14:08:28 2026 GMT
        Subject: CN=6acb9861-675b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:5d:61:b0:75:01:6e:42:b9:0d:aa:83:d8:ba:
                    2f:35:58:77:0f:5d:83:9f:f8:d8:2a:f2:79:04:a5:
                    43:89:1a:85:85:6c:d6:b6:0b:c6:1d:af:77:e0:97:
                    b7:be:46:ba:04:df:f9:bb:02:6a:ad:51:a3:e4:ae:
                    46:63:78:49:18:7d:be:05:3b:52:b2:f7:e4:78:69:
                    40:9b:0e:1d:8a:a1:b3:10:7b:cd:04:24:f4:78:33:
                    7d:79:a0:77:46:cb:82:c9:d3:be:db:ae:59:47:88:
                    42:3c:51:d0:76:bf:96:a7:5e:9a:16:ea:5b:75:f1:
                    78:90:86:fe:25:db:df:a4:83:ef:9c:e3:d6:0d:83:
                    4a:82:08:bc:d9:ef:c8:50:a1:20:5e:ea:23:4f:f0:
                    7d:ba:8e:c4:48:3e:2f:6e:10:7a:cc:e8:68:cb:f4:
                    9b:4f:a1:45:87:73:6f:f9:32:57:eb:e7:7c:fa:2d:
                    98:1a:d5:00:ba:da:28:2f:e2:75:12:0c:5e:53:3c:
                    b3:2a:4b:63:84:21:de:18:dd:b0:ce:75:40:40:83:
                    a1:cd:b1:a8:b9:a3:0c:cc:99:e1:ed:e6:9d:d7:62:
                    91:d2:d9:ed:a6:3b:65:7a:18:1e:2d:ea:a5:d7:af:
                    df:f6:67:06:12:4f:e7:f0:98:f7:c9:4c:7b:64:92:
                    42:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:84:7A:67:11:41:3A:1F:E4:90:44:70:94:A3:BF:8D:E0:6E:CA:69
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3DDF35B8C57D11F1B2DA6604CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.196.170.0/23
                  154.196.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         51:39:c9:a4:cc:72:68:ee:63:82:e1:2a:c5:36:47:79:23:8c:
         25:9b:68:2a:18:db:6f:9b:36:da:d5:8d:69:86:71:43:be:28:
         3a:e8:11:cf:88:bd:db:4f:d5:ce:de:50:8d:17:81:33:d7:25:
         13:4a:3c:84:01:58:35:e8:24:d6:4f:ad:ce:dd:b4:e2:ef:f1:
         64:2a:54:31:de:81:56:6d:31:fd:bb:e1:fa:8b:55:a3:a9:4c:
         f2:05:c1:de:92:fc:1d:91:e9:09:b0:69:f7:be:a1:01:5a:50:
         3c:db:38:9e:02:45:d7:e7:ac:f5:ad:af:3b:4f:c7:eb:6a:12:
         fb:a7:81:f9:7f:6d:fe:47:5c:f5:69:dd:28:7d:0c:ee:65:3f:
         a1:3a:0f:6a:cd:7e:50:b5:6f:c6:b0:c6:78:b2:17:6d:d2:2b:
         58:57:c2:96:f9:57:97:9a:2d:3c:39:e4:d0:d0:54:ee:a6:08:
         ee:9f:ed:31:d6:b5:f7:87:f2:d8:ac:53:c6:c5:bf:2c:0f:89:
         61:a8:e4:76:61:6a:cc:88:df:9d:39:76:0d:df:3f:d5:c4:53:
         b8:55:c6:70:88:90:d5:e0:9a:23:01:72:5c:c0:89:1f:e3:7b:
         27:37:1b:18:9a:4d:57:cb:9f:a5:41:7b:c9:26:63:6c:0d:70:
         6e:ac:55:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----