Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6E3E830AC60C11F1B27D27B4CE1D38B0.roa
File:                     6E3E830AC60C11F1B27D27B4CE1D38B0.roa (raw, json)
Hash identifier:          VMEZddg3UouqdTn4ee5MainL6czHIZYgfwC01AKQJVM=
Subject key identifier:   B5:4B:F6:87:95:AA:28:AA:A1:F1:52:43:F2:3E:69:61:98:09:73:62
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EDAD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6E3E830AC60C11F1B27D27B4CE1D38B0.roa
Signing time:             Mon 12 Oct 2026 07:13:32 +0000
ROA not before:           Mon 12 Oct 2026 07:13:27 +0000
ROA not after:            Sun 10 Oct 2027 07:13:27 +0000
asID:                     38264
IP address blocks:        154.198.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 17 Oct 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126381 (0x1edad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct 12 07:13:27 2026 GMT
            Not After : Oct 10 07:13:27 2027 GMT
        Subject: CN=6acc889c-069c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:33:fc:5a:4c:c7:70:32:b8:a9:1d:b4:7c:df:
                    97:03:ac:07:02:a2:e5:6a:b2:22:5c:80:cb:d9:fa:
                    e2:34:28:37:b9:4d:b9:be:3b:fb:8e:9d:0e:2a:3e:
                    4e:d6:2b:3d:3c:44:9a:1e:5c:5e:d0:6c:a4:d7:9a:
                    89:f7:82:46:c6:94:d7:a5:d3:0a:70:3f:25:7a:96:
                    df:b0:e7:e9:60:ca:40:67:11:55:79:5f:7e:3d:7f:
                    13:78:5e:83:57:cb:5a:63:44:9c:d9:fe:87:40:75:
                    89:52:b5:c1:4d:67:af:3d:df:e6:55:92:0b:59:3c:
                    82:88:6d:9c:17:d1:3f:47:1b:17:7d:9e:5c:82:5b:
                    b6:e9:ee:85:f8:c0:ee:17:95:4e:19:ce:cf:d1:84:
                    d4:6e:a7:7f:79:0a:e6:dd:b3:4a:72:ac:ad:29:36:
                    3a:ef:61:d2:43:52:b2:d6:62:49:18:a7:07:fd:d2:
                    2b:9e:dc:df:ec:7b:2b:c5:b9:3a:da:bf:80:8f:eb:
                    34:e7:18:3e:e6:87:c6:de:b2:33:4b:75:27:6a:f5:
                    2e:01:27:3c:de:96:a6:7e:68:1a:09:53:29:0b:2f:
                    75:6a:1e:58:27:41:ac:e1:cf:b6:76:c5:36:e3:1a:
                    25:32:8c:77:54:18:37:a7:d1:8a:37:9d:a0:38:75:
                    c5:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:4B:F6:87:95:AA:28:AA:A1:F1:52:43:F2:3E:69:61:98:09:73:62
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6E3E830AC60C11F1B27D27B4CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.198.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:5d:3d:46:fc:dc:77:89:2f:c9:91:07:f2:41:20:d1:9d:6c:
         40:02:d9:2a:95:fb:c9:e2:97:d0:e8:7c:35:ce:78:84:fb:63:
         7d:f3:fc:95:78:d0:bd:98:72:a0:1c:b5:5a:42:f8:09:a2:cd:
         3e:50:e3:2e:09:84:34:e7:dd:b9:04:8c:18:15:06:88:74:cb:
         de:90:ea:06:a4:21:a8:59:54:29:b4:8d:1a:55:a3:e4:9e:f7:
         0f:98:31:d1:fe:69:15:32:dc:2d:2d:d6:d2:08:9f:11:4b:65:
         32:18:51:87:6e:4c:ae:7b:89:e8:f9:81:81:ff:27:b5:4b:81:
         a6:69:9a:80:8d:fd:67:04:c1:cd:66:47:c2:7b:0e:ca:ed:b9:
         c6:05:fe:73:41:f0:ed:8e:7b:61:11:12:0a:ca:ab:ee:05:e3:
         6d:13:bb:a5:cf:b4:ab:d0:45:a9:13:2e:2b:3f:5a:c5:08:87:
         cf:71:b7:d6:bf:b9:ba:b0:7d:f5:e0:39:4c:05:cb:f4:32:bd:
         38:2e:21:b7:15:52:8c:79:2e:ef:70:e5:82:9e:00:60:48:9b:
         68:dc:db:2a:56:2c:6b:80:76:0a:43:8f:4e:f9:a0:0a:d0:f4:
         77:06:26:5a:6e:6d:04:73:e6:45:97:27:5a:dc:e0:5d:ce:5a:
         d0:9f:bb:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----