Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/618AE114C30311F196311FE4CE1D38B0.roa
File:                     618AE114C30311F196311FE4CE1D38B0.roa (raw, json)
Hash identifier:          d6sHcJdWO09CIM0s2G8/5M7SJLtd3RnUKFs/+8Xl7+g=
Subject key identifier:   88:CE:7D:34:45:56:B2:25:8F:7E:BE:9C:DA:AB:82:B4:10:64:4A:FF
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01ECDF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/618AE114C30311F196311FE4CE1D38B0.roa
Signing time:             Thu 08 Oct 2026 10:31:12 +0000
ROA not before:           Thu 08 Oct 2026 10:31:06 +0000
ROA not after:            Tue 20 Oct 2026 10:31:06 +0000
asID:                     38264
IP address blocks:        154.198.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126175 (0x1ecdf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct  8 10:31:06 2026 GMT
            Not After : Oct 20 10:31:06 2026 GMT
        Subject: CN=6ac770f0-4f0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:63:6e:e5:57:e4:74:c0:c1:24:bd:d7:d3:c5:
                    dd:57:2e:48:3b:38:dc:e8:7e:93:70:06:3e:74:45:
                    d0:65:39:c1:18:ab:87:8f:d5:e7:72:3e:16:00:ce:
                    a0:e7:20:ae:1e:41:06:fa:7c:52:15:5b:aa:d7:f8:
                    c1:5e:ee:5d:4f:89:b1:64:bc:85:df:a2:41:3f:68:
                    53:39:ca:ea:53:5f:8b:81:94:f6:d5:33:b4:64:b9:
                    25:d1:ff:eb:bb:79:b0:34:2d:d0:4e:e0:65:f7:c2:
                    33:4f:42:bb:8c:04:5c:69:87:a2:d6:88:32:ea:c6:
                    7f:54:91:92:b3:92:44:d5:99:3f:6a:4b:a0:a7:ab:
                    f3:87:29:f7:8d:bf:22:92:2f:cc:4b:2f:0b:34:af:
                    b3:d4:15:7b:a3:1e:38:da:03:e3:13:ac:a1:6f:c8:
                    6c:37:9c:d5:a1:d7:4b:36:14:08:c8:f1:26:d0:f7:
                    be:69:2a:74:88:77:50:4a:56:0f:11:64:f4:43:42:
                    c6:59:78:b2:45:ef:ce:a5:74:25:2d:a0:3a:f0:8f:
                    5e:76:ba:ee:41:b4:67:c2:80:ef:2e:43:5f:37:a9:
                    43:ce:8c:70:bb:36:bc:9e:59:62:d1:c6:9b:f7:8e:
                    22:34:41:32:aa:fa:52:91:c1:45:b2:2f:6b:02:82:
                    ae:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:CE:7D:34:45:56:B2:25:8F:7E:BE:9C:DA:AB:82:B4:10:64:4A:FF
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/618AE114C30311F196311FE4CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.198.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:d6:f7:28:86:55:07:7c:ea:da:14:8a:f9:ed:a1:47:1c:a4:
         31:5d:cb:d4:90:09:80:ea:77:26:e5:b5:e7:3d:4d:7f:a8:80:
         08:cc:5b:50:90:00:29:af:eb:2a:fd:d1:82:a0:f1:f6:6c:26:
         21:2c:5d:b3:72:52:26:35:d5:43:da:e5:9f:45:8b:b7:5c:1a:
         fc:cb:d4:c8:b9:ad:44:32:cc:d4:60:ae:43:40:b7:c2:69:fa:
         37:aa:6d:7d:f7:10:9c:78:1f:e0:c5:9e:7f:60:a1:b9:1b:b1:
         f9:79:6c:9e:e6:31:5c:25:e9:21:98:53:a9:32:20:c8:b6:72:
         78:39:00:10:25:01:f1:12:d1:f6:d1:59:90:b1:39:8d:82:8d:
         3b:b1:3a:c2:fe:f4:3b:49:2f:16:59:5c:eb:48:b8:8d:32:13:
         78:68:91:25:02:47:fb:23:ab:f1:36:5a:da:0e:77:db:92:d3:
         92:66:ef:d5:21:54:c1:77:d5:61:32:a9:cc:4a:0d:8c:d1:f2:
         2d:47:59:c9:91:a0:5b:36:d7:dc:dc:28:9a:7e:9c:6f:b2:8f:
         82:9a:df:94:71:55:08:61:ba:89:08:be:96:55:9d:d0:c6:c8:
         59:81:e4:6d:e3:c3:49:7c:c2:e4:25:eb:ac:bc:41:fb:77:d9:
         a8:6c:81:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----