Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4AEC101CC7A511F1B788131ECF1D38B0.roa
File:                     4AEC101CC7A511F1B788131ECF1D38B0.roa (raw, json)
Hash identifier:          G+NN/xZGzwk3ojf0dMnBvUp8soWy2uYuIa9ITlPbtKg=
Subject key identifier:   B6:7A:63:AD:AB:4D:39:08:CE:F4:B5:9F:97:82:BB:84:ED:E1:39:CB
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EDFF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4AEC101CC7A511F1B788131ECF1D38B0.roa
Signing time:             Wed 14 Oct 2026 08:00:17 +0000
ROA not before:           Wed 14 Oct 2026 08:00:12 +0000
ROA not after:            Sat 21 Nov 2026 08:00:12 +0000
asID:                     401783
IP address blocks:        154.222.112.0/24 maxlen: 24
                          154.222.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 21 Oct 2026 00:08:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126463 (0x1edff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct 14 08:00:12 2026 GMT
            Not After : Nov 21 08:00:12 2026 GMT
        Subject: CN=6acf3691-6c1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:8e:7d:2b:9a:da:61:5f:27:d8:4e:54:1c:18:
                    cc:da:a3:6d:65:4e:82:6f:c6:78:24:73:da:0a:53:
                    0c:b5:66:5b:3e:f1:0a:b3:cb:39:d9:2b:50:4a:22:
                    54:18:c4:6f:28:9f:c7:a9:8e:da:b2:ba:65:70:28:
                    b3:0e:9f:63:19:42:e4:04:27:57:83:7a:28:28:e7:
                    a7:22:9d:c0:2f:b4:17:6c:3b:20:ce:99:33:2b:8a:
                    a7:3b:30:24:d4:e3:30:00:d7:b5:1a:8b:65:3c:0b:
                    5f:3e:5e:a3:68:fa:84:d7:e3:32:da:ee:41:f7:34:
                    0e:d0:4d:4d:b8:5b:d7:8b:96:b8:f7:ea:3e:bf:3d:
                    fe:36:8d:cd:b8:eb:94:a0:74:dd:de:2a:a3:43:7d:
                    37:de:58:bc:4a:a9:76:21:d9:c0:5b:6a:03:c4:8b:
                    63:48:ec:ce:d5:ea:7d:91:e5:e4:39:24:7e:0f:75:
                    06:0a:04:32:10:26:4a:e3:8d:3c:34:53:18:4b:b4:
                    3d:ac:22:e2:0f:ef:df:a9:cd:41:1a:d7:db:f8:0f:
                    09:6f:8b:90:13:57:8d:23:d3:5b:33:e6:92:f4:0e:
                    c8:10:5e:36:d3:89:76:fa:c6:10:94:8f:72:49:65:
                    e3:d9:ae:17:fd:e4:dc:b9:0c:d1:b2:ca:2b:ec:25:
                    d1:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:7A:63:AD:AB:4D:39:08:CE:F4:B5:9F:97:82:BB:84:ED:E1:39:CB
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4AEC101CC7A511F1B788131ECF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.222.112.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4f:3e:0b:9b:81:f3:7d:32:86:7b:04:40:b3:84:3a:2d:c4:59:
         8a:95:de:2a:ff:f7:14:bd:2e:cc:82:87:4f:e8:39:90:e6:c7:
         85:ef:40:0f:9c:dc:83:18:4f:ec:22:b8:91:ef:40:0b:a1:5a:
         40:2e:73:d8:63:e2:97:55:5c:96:fd:91:08:e5:ae:31:62:aa:
         cd:15:c2:fe:9e:c8:90:b2:b3:45:1b:26:1d:f2:10:49:51:b5:
         c6:94:1c:1b:de:f1:be:6b:49:65:12:49:d0:73:f5:96:64:8e:
         f2:ff:d1:63:b5:fc:60:8a:89:23:33:74:b6:a6:e3:4b:9e:bc:
         20:0f:a5:42:7a:0e:77:98:83:96:23:f9:67:b6:96:46:c5:93:
         55:f3:3f:67:2f:16:e7:45:57:4d:f5:7b:4a:77:06:f6:35:dd:
         a6:de:8b:22:02:6a:11:92:11:4a:a5:ce:91:84:49:31:60:fc:
         49:21:3f:81:74:0b:a8:43:c3:93:04:69:e8:5f:2c:4b:dd:c9:
         26:6d:5b:77:d8:ff:e2:29:41:00:86:6c:9e:b9:0a:89:2c:33:
         12:14:4f:ed:0b:fb:b1:b7:c3:39:e3:06:ba:d9:af:cd:8d:c8:
         92:a0:0a:6d:c9:ed:c9:9a:8f:97:17:c0:4b:fd:b2:a7:f4:70:
         ba:7f:53:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----