Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3DE52806CC4E11F1817ABC03CF1D38B0.roa
File:                     3DE52806CC4E11F1817ABC03CF1D38B0.roa (raw, json)
Hash identifier:          wo0zFTq4yFpObnb+jUjAA3ZVXXzNQOkiZohOJaWZEXM=
Subject key identifier:   15:EA:DC:15:3B:3C:57:5D:02:3E:91:9C:BB:A8:5E:72:53:CD:64:B0
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EEDE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3DE52806CC4E11F1817ABC03CF1D38B0.roa
Signing time:             Tue 20 Oct 2026 06:19:45 +0000
ROA not before:           Tue 20 Oct 2026 06:19:40 +0000
ROA not after:            Fri 30 Oct 2026 06:19:40 +0000
asID:                     20473
IP address blocks:        154.81.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 00:08:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126686 (0x1eede)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct 20 06:19:40 2026 GMT
            Not After : Oct 30 06:19:40 2026 GMT
        Subject: CN=6ad70800-2c53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:70:49:be:bb:4c:a4:9b:8f:e8:bd:7c:7c:1b:
                    ce:1b:9a:6c:93:04:32:cf:86:22:66:d2:a7:ba:39:
                    cc:2d:45:58:d1:39:06:bf:f9:d4:2a:79:3c:fd:ad:
                    30:52:ed:70:06:ba:07:7e:b1:05:73:1f:81:e4:5d:
                    f0:6b:7b:e8:ee:f4:7d:50:06:34:2a:bb:50:44:56:
                    c6:66:39:39:35:32:e7:db:8b:aa:90:48:d9:9f:28:
                    00:5d:db:b2:c4:95:8d:81:49:39:64:78:1a:4c:43:
                    63:4e:ed:05:66:89:ce:4f:90:60:75:16:9d:b3:06:
                    5c:77:b0:3a:ce:f0:1e:8e:f5:2a:0e:28:6c:fa:fd:
                    6f:83:f2:51:0c:c8:1e:c9:6e:ae:ce:39:1d:bb:68:
                    91:aa:b4:41:ee:9c:c9:f2:7a:bc:77:04:a4:f6:f4:
                    20:fd:0b:3e:dd:90:f0:18:a4:6c:3b:5f:74:9e:0b:
                    44:e2:a6:6f:2e:f0:6f:ab:9f:87:50:c5:02:87:61:
                    96:18:4c:41:bb:e8:2c:26:d7:01:bd:82:55:5c:7b:
                    59:c7:25:56:fe:22:df:b4:71:22:38:7b:b8:7a:97:
                    0b:b3:71:19:4b:d5:4e:89:68:67:e7:e1:73:b3:cd:
                    a3:25:fd:9e:2e:34:0f:e4:8c:67:7c:00:31:a9:40:
                    73:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:EA:DC:15:3B:3C:57:5D:02:3E:91:9C:BB:A8:5E:72:53:CD:64:B0
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3DE52806CC4E11F1817ABC03CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.81.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:39:fc:82:1b:39:8e:d2:5e:cd:1d:3a:ea:48:4c:b7:d7:9e:
         be:42:e4:09:6a:34:36:9c:24:e8:0e:2b:da:01:23:2e:2e:0b:
         c8:f9:3f:7a:51:2e:c7:e9:dc:8b:7d:3c:8b:d7:06:9b:ee:2e:
         f4:1b:21:3c:05:f1:09:ba:96:ce:53:c7:37:bd:0f:cf:98:c6:
         5a:89:4d:bc:28:0f:aa:70:49:de:9e:67:10:b9:41:f7:33:67:
         0f:63:df:4b:c4:0a:98:e6:f3:e0:cb:1b:17:c1:91:43:f0:4f:
         18:c9:26:b7:3a:d6:04:d4:20:ab:57:2f:16:f7:cb:2a:91:db:
         08:bd:82:8d:73:f2:a6:95:fd:66:44:df:c9:95:46:c9:35:40:
         bd:18:76:85:1b:10:ab:ed:21:d2:f6:c5:07:10:e2:67:32:c9:
         49:79:6a:0c:aa:3e:25:65:dc:4f:e3:73:9b:44:4d:37:7a:a9:
         34:71:48:30:71:df:b9:80:d7:5f:ec:1b:1d:09:ff:c7:ba:3b:
         a5:49:3e:89:b1:30:73:be:81:db:33:9b:24:b2:99:c0:df:41:
         f8:39:74:40:35:49:8b:f2:0f:02:b6:35:e8:71:c1:f2:27:11:
         b6:e3:a5:ee:07:8f:84:30:d3:9d:9b:1d:80:d0:42:5a:16:83:
         49:a7:00:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----