Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3DF80EB8C2F711F182E82B13CF1D38B0.roa
File:                     3DF80EB8C2F711F182E82B13CF1D38B0.roa (raw, json)
Hash identifier:          +DHJZNLE9sGZiL3FFradxJIrmP37G2Tg9SgxQphIS/U=
Subject key identifier:   CC:D9:21:30:55:06:F5:E2:16:EB:52:98:F5:83:23:0B:E1:DA:21:6D
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01ECD1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3DF80EB8C2F711F182E82B13CF1D38B0.roa
Signing time:             Thu 08 Oct 2026 09:04:18 +0000
ROA not before:           Thu 08 Oct 2026 09:04:13 +0000
ROA not after:            Tue 10 Nov 2026 09:04:13 +0000
asID:                     20473
IP address blocks:        154.196.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126161 (0x1ecd1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct  8 09:04:13 2026 GMT
            Not After : Nov 10 09:04:13 2026 GMT
        Subject: CN=6ac75c92-13d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ca:71:69:52:b2:b2:5c:34:cf:ee:56:eb:77:
                    31:ef:df:22:71:ab:a1:6b:e2:8c:7b:e6:41:1f:ce:
                    bc:f3:5f:66:1d:86:1e:86:f4:7a:3d:84:94:e5:3a:
                    ff:24:4b:01:36:db:b2:48:e2:70:ea:65:85:1b:29:
                    c3:9d:9c:41:7e:32:cc:12:54:92:a7:3b:6a:97:df:
                    11:77:28:01:26:11:61:cc:20:79:4d:fa:cb:40:1d:
                    b4:e4:74:88:6c:96:7d:70:f5:2f:ee:e3:6c:84:f2:
                    80:04:68:b2:80:72:52:66:cd:ef:d1:09:ba:9c:8f:
                    b1:58:99:a6:ba:b2:c8:f9:f2:f8:06:88:e3:c9:8b:
                    31:09:53:d5:37:fe:c9:14:60:61:25:e3:50:fc:a8:
                    9f:df:00:b0:fa:21:9b:40:0a:b0:78:76:b9:a9:30:
                    53:ad:0b:e3:94:df:3c:af:b7:04:36:5e:c6:7f:75:
                    da:a3:98:f3:0a:19:b0:2b:ff:ec:7d:64:1a:c8:d3:
                    b1:ea:fc:50:fc:fb:a2:d2:6d:33:85:86:d2:ab:41:
                    90:fa:9a:ca:6a:4b:78:08:65:3a:94:65:22:a6:57:
                    c0:ca:14:f1:02:f0:7f:48:2b:63:46:81:b8:cd:9a:
                    1e:07:4a:06:59:37:5a:a0:4c:a7:32:03:c7:54:92:
                    6c:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:D9:21:30:55:06:F5:E2:16:EB:52:98:F5:83:23:0B:E1:DA:21:6D
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3DF80EB8C2F711F182E82B13CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.196.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:0c:d3:04:0e:03:6b:6e:2c:03:7e:79:42:1b:fd:d0:e7:5a:
         45:4d:3f:19:ee:60:9f:c5:e2:46:69:d5:38:62:b8:98:f0:4c:
         bf:ed:c0:3a:76:f9:20:a5:65:4c:74:fe:d6:76:c1:27:e3:0a:
         ad:4d:82:d1:63:45:f4:72:16:c9:06:53:ae:9b:bb:cc:cf:2f:
         9c:a3:1e:3b:b6:6d:b5:c6:e9:a4:73:4a:d2:01:b5:41:ab:3d:
         08:56:46:d9:78:01:e8:82:d8:11:b9:5e:d0:aa:ca:f8:2f:d3:
         52:10:b6:0e:6b:45:30:e7:2f:6b:1d:c8:68:1c:98:42:95:a8:
         55:0a:e9:93:48:86:51:e5:a0:b8:62:cd:ef:7a:81:37:66:61:
         2f:70:ff:3d:b4:fc:db:3d:21:33:35:91:12:27:c5:09:b7:42:
         4a:c6:6c:57:7e:1b:15:b8:02:9c:7f:02:34:ee:23:cb:4b:1d:
         7d:7d:fe:f9:78:b6:25:be:7b:ca:9b:fc:87:a5:93:9d:cb:c1:
         22:2e:ae:f3:e8:6b:c8:96:a7:27:f1:22:3a:d1:b5:19:e6:01:
         48:5f:cc:40:66:ba:f5:fa:34:92:cf:04:c8:7c:97:8d:2f:ad:
         c7:65:09:90:9c:86:b8:37:2d:29:22:52:07:72:76:09:e9:f4:
         de:07:dd:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----