Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/42CAECA4CF8A11F191CF03DDCE1D38B0.roa
File:                     42CAECA4CF8A11F191CF03DDCE1D38B0.roa (raw, json)
Hash identifier:          WvvQYbD0qVAcRFB9hk11XmlOLwLV4/xHER6CrWj6gPg=
Subject key identifier:   5B:0F:09:2B:7F:DE:90:74:35:85:AC:87:77:2D:71:59:81:67:91:52
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EFE4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/42CAECA4CF8A11F191CF03DDCE1D38B0.roa
Signing time:             Sat 24 Oct 2026 09:06:56 +0000
ROA not before:           Sat 24 Oct 2026 09:06:52 +0000
ROA not after:            Wed 09 Dec 2026 09:06:52 +0000
asID:                     202036
IP address blocks:        154.83.104.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 13:32:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126948 (0x1efe4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct 24 09:06:52 2026 GMT
            Not After : Dec  9 09:06:52 2026 GMT
        Subject: CN=6adc7530-f74b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:14:cf:80:2c:5d:75:79:e6:e4:3b:2b:89:5e:
                    b9:83:69:6c:c5:25:0e:ca:44:e5:81:a4:0a:85:b4:
                    15:a7:90:f5:11:e9:94:66:df:fb:c2:32:61:94:60:
                    b1:28:23:fa:e3:49:a4:aa:a5:4a:15:c1:db:59:f0:
                    56:9d:93:fd:2d:77:16:32:57:f8:ea:b9:b2:76:f5:
                    b5:1f:dd:3f:83:f4:8d:22:81:c3:9c:79:71:98:e7:
                    97:5f:82:32:2b:f3:6e:dd:80:f0:98:1c:27:c1:8c:
                    0b:18:ea:f7:02:7e:82:52:a0:b4:bc:d4:b9:3a:66:
                    af:10:08:b3:89:ad:20:61:58:91:a5:fb:e9:cc:30:
                    8b:a6:4c:a3:b7:7f:35:b8:22:89:dd:38:0d:3d:4d:
                    9d:fb:94:7c:e6:78:46:77:0f:54:70:9c:cf:60:ea:
                    88:a7:fa:d9:25:d2:65:71:f2:37:27:7c:f3:4a:18:
                    c8:06:58:6e:f4:0d:b5:85:34:cf:eb:49:29:9e:ad:
                    18:79:fb:22:b3:c0:78:3f:f3:04:84:f4:72:4d:91:
                    54:13:46:f6:69:a4:74:70:8b:a9:09:a3:cf:92:ea:
                    dc:e1:7d:26:2b:be:e8:30:b9:8e:d2:89:dc:53:95:
                    a7:36:f5:12:1a:76:42:bb:67:fe:de:36:c4:6c:cf:
                    82:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:0F:09:2B:7F:DE:90:74:35:85:AC:87:77:2D:71:59:81:67:91:52
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/42CAECA4CF8A11F191CF03DDCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.83.104.0/21

    Signature Algorithm: sha256WithRSAEncryption
         56:06:b2:7b:82:3a:db:03:0d:66:aa:da:e5:be:37:9b:34:fd:
         3e:7b:6d:af:79:9e:fd:32:2e:8e:c1:31:16:88:a4:90:63:9f:
         bb:80:af:5b:ed:eb:83:57:8d:7c:d8:58:fe:a0:8d:58:09:cf:
         7f:80:13:eb:47:8d:2e:0c:f6:8b:04:d5:e7:40:f2:25:25:a2:
         31:9d:1b:c2:11:ca:19:2e:61:a6:71:79:05:fa:ac:a8:55:d6:
         00:29:eb:a8:34:7a:df:88:33:ed:3e:b9:7a:1d:32:ca:b1:de:
         40:6b:07:8d:8c:f2:15:5e:24:2d:16:e9:5c:ad:3b:46:ff:a5:
         25:8f:d5:61:f9:ce:bb:43:5a:f8:98:53:61:dc:9f:c5:6c:9e:
         19:7f:6a:29:22:25:5e:5f:e5:6b:b9:5f:2a:c4:7f:62:43:99:
         86:1b:b9:2b:74:1f:a5:ad:cb:f6:9e:e2:3d:2e:fb:5a:67:cc:
         1c:f9:14:ce:bd:9d:d6:29:ec:d2:d1:76:a6:c0:6d:ab:5a:c3:
         50:e0:77:2e:da:91:5e:69:67:b6:08:bb:73:43:ff:64:c8:bb:
         ba:04:04:6b:4b:32:99:48:af:1c:34:e1:8c:34:b0:bf:e9:d6:
         d0:72:b3:c0:32:8a:08:be:0d:c9:e4:f4:9c:bb:28:de:e5:2b:
         2b:f6:7d:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----