Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4345CAFCC08811F1B606651ECF1D38B0.roa
File:                     4345CAFCC08811F1B606651ECF1D38B0.roa (raw, json)
Hash identifier:          VxwVDx32RZb4nXiBA3uWkRr+vxFguEIsd06M4IV87Ao=
Subject key identifier:   95:BF:EA:5C:CF:FF:06:01:34:8F:EC:FC:89:37:38:2D:C2:CA:1E:18
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EC3A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4345CAFCC08811F1B606651ECF1D38B0.roa
Signing time:             Mon 05 Oct 2026 06:44:50 +0000
ROA not before:           Mon 05 Oct 2026 06:44:46 +0000
ROA not after:            Fri 13 Nov 2026 06:44:46 +0000
asID:                     200758
IP address blocks:        154.84.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 15 Oct 2026 00:08:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126010 (0x1ec3a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct  5 06:44:46 2026 GMT
            Not After : Nov 13 06:44:46 2026 GMT
        Subject: CN=6ac34762-b752
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:da:ca:4a:ba:4f:ef:3e:6a:ea:92:2a:ee:3c:
                    f9:55:c4:ae:cf:54:31:c8:da:aa:35:63:87:d8:88:
                    aa:44:ef:9c:a0:a5:cf:9b:9f:11:f8:36:88:55:4d:
                    eb:da:2f:0f:ee:f6:6e:36:98:cc:cd:0a:56:1c:6a:
                    cb:d0:b7:de:0d:94:ff:6a:1b:94:cc:62:85:9a:31:
                    8d:71:79:70:ee:85:4d:c5:a4:25:ea:d8:af:1a:72:
                    25:92:b4:bd:eb:39:ba:75:0d:1b:d5:a5:8f:fa:c3:
                    3d:72:ae:2d:cc:bd:b8:93:1d:a3:e2:b9:1c:72:74:
                    0f:da:da:18:d4:c5:31:1e:74:7e:0c:77:65:f6:71:
                    09:90:31:a1:ed:c9:95:b2:d8:e1:b8:c9:cd:00:85:
                    86:79:51:08:d9:c4:85:6c:a5:8f:60:f0:77:08:50:
                    2b:c8:d1:6a:35:fa:da:9c:3c:83:e3:d2:b8:a9:98:
                    3a:c5:f9:78:9e:00:fe:fa:b7:f8:de:a4:4f:41:d2:
                    0e:40:a2:2c:0f:8a:cb:28:17:3b:08:0f:d1:53:94:
                    58:f0:af:22:19:d0:25:98:3f:d9:fe:45:17:98:1f:
                    a6:bf:aa:d8:31:72:0e:93:4e:1f:23:6e:18:fe:67:
                    df:34:43:27:3a:29:59:7e:d1:96:a5:fc:ae:23:83:
                    be:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:BF:EA:5C:CF:FF:06:01:34:8F:EC:FC:89:37:38:2D:C2:CA:1E:18
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4345CAFCC08811F1B606651ECF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.84.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:fb:ab:6a:7e:af:c6:c3:13:c1:05:4a:35:0d:9e:91:56:cf:
         78:bc:7b:f8:11:93:a2:b6:0d:42:34:65:77:ba:90:e3:24:d1:
         fd:79:7d:3d:a9:c3:b2:f2:22:3f:b7:da:e9:8d:1f:63:c6:62:
         6b:8b:16:29:86:a1:e4:61:c5:1e:a7:ad:c7:f8:76:e6:09:bd:
         7a:53:88:00:17:6d:1f:73:52:3e:07:cb:80:2f:c7:43:51:2b:
         73:8a:72:74:e0:0f:1f:66:92:88:b4:9e:b0:67:d7:53:2e:aa:
         82:cd:fc:1c:a8:14:9c:10:3e:77:21:0a:b0:68:dc:12:40:a5:
         e3:ac:b0:94:01:c5:53:bc:66:23:56:e5:74:c6:98:58:2c:2d:
         0b:48:24:9b:dd:02:a4:a0:aa:73:5f:aa:23:db:0f:fe:3b:f3:
         1b:80:ea:1e:f6:a9:61:34:7b:4f:c0:af:b3:ca:93:86:85:e0:
         c1:6a:bf:34:24:c5:26:ce:ad:95:bd:51:9c:2e:cc:25:f8:59:
         45:08:1d:7c:76:b6:5e:34:12:b2:a0:7e:c2:95:f3:4e:92:92:
         62:c0:a4:09:f9:ba:64:01:31:0e:28:a3:dc:a2:8b:0b:6e:5a:
         7e:16:08:8b:6a:b8:a2:2c:25:d6:34:5e:00:1a:7f:cd:9d:ce:
         d9:1c:61:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----