Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7CE2C352CC4D11F1A20354FFCE1D38B0.roa
File:                     7CE2C352CC4D11F1A20354FFCE1D38B0.roa (raw, json)
Hash identifier:          KeuwdqxzJlqhW5ekmnhbKhsqilWhGHj4saND7fCv/3M=
Subject key identifier:   0E:C5:C2:74:EC:79:32:69:4B:34:7C:76:9A:03:81:6C:09:84:0A:2F
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EEDA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7CE2C352CC4D11F1A20354FFCE1D38B0.roa
Signing time:             Tue 20 Oct 2026 06:14:21 +0000
ROA not before:           Tue 20 Oct 2026 06:14:16 +0000
ROA not after:            Wed 29 Sep 2027 06:14:16 +0000
asID:                     4760
IP address blocks:        154.213.16.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 02 Nov 2026 00:08:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126682 (0x1eeda)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct 20 06:14:16 2026 GMT
            Not After : Sep 29 06:14:16 2027 GMT
        Subject: CN=6ad706bd-1200
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ab:ec:f6:dd:b4:ff:d4:23:4f:b0:23:25:ae:
                    69:3d:38:b0:3e:c4:1b:6f:a4:85:e3:82:26:3e:99:
                    38:13:c8:88:68:b0:fb:ae:3a:f1:da:6c:be:73:c6:
                    14:7f:66:6d:2a:a3:2d:34:cd:77:e9:1d:cd:b0:a5:
                    34:67:08:cf:b4:65:91:d8:af:63:16:84:bb:4f:9d:
                    ba:95:48:b4:24:04:f6:ce:3e:60:ed:ad:a5:dd:e1:
                    ad:cf:fd:fd:92:7c:81:75:58:0e:2b:99:7b:5b:b2:
                    cf:01:b2:af:0f:f0:4c:09:11:46:e2:9c:27:96:42:
                    ef:9b:41:4d:98:62:9f:17:fc:bb:75:58:8c:a2:c8:
                    0d:61:6d:58:ec:93:91:7f:6f:1d:52:d5:00:5f:44:
                    c1:40:2b:7c:5b:70:53:a2:c3:54:44:3e:e2:e5:8c:
                    9c:32:36:aa:88:b0:d1:97:8b:8b:7e:6a:28:4a:54:
                    9e:cb:95:8c:6a:fb:ff:8b:c3:d8:0a:5a:f9:3a:bc:
                    8d:6d:7e:86:08:00:87:4c:3d:06:60:54:bf:68:fc:
                    14:36:7f:e4:fb:b3:b3:06:e8:72:50:ae:24:9c:60:
                    0d:31:ca:82:54:83:23:16:01:e4:49:06:ea:bc:a3:
                    b8:ec:bf:e2:6b:84:b7:a3:77:3d:ac:61:2c:a1:73:
                    b9:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:C5:C2:74:EC:79:32:69:4B:34:7C:76:9A:03:81:6C:09:84:0A:2F
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7CE2C352CC4D11F1A20354FFCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.213.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         1c:87:5f:2d:13:0a:a0:b5:0e:c7:fd:20:40:67:46:1d:ac:5a:
         83:17:86:5b:ca:89:33:b0:ed:26:c6:05:d9:c4:33:9c:09:01:
         b9:36:f7:02:28:34:4a:c5:a2:f7:50:bd:9d:22:df:7b:91:8c:
         8c:0e:d5:98:cf:71:71:0a:d8:15:09:81:e3:58:da:a3:39:82:
         37:53:95:92:35:3a:67:a8:dd:23:02:8c:32:83:2f:c2:c0:9a:
         35:64:61:1d:5b:07:07:9b:a5:5d:72:fc:d5:ff:3d:82:bc:94:
         d0:10:22:22:47:ff:0a:94:3d:28:e1:04:6c:30:f4:57:d8:8b:
         81:99:35:1e:13:b6:39:3e:c1:86:67:02:f8:ef:a4:e0:9e:52:
         c1:f7:29:e1:4a:76:45:96:34:96:ce:9b:7f:eb:c2:a8:23:aa:
         7f:5f:43:bd:35:fc:58:51:b5:48:ef:f7:9e:16:c9:bc:d0:2e:
         69:dd:25:08:df:2c:42:e1:3f:34:1d:35:b3:d8:ea:1a:7a:0a:
         a5:ea:88:ea:80:57:ae:17:ca:98:f7:78:47:69:58:1f:49:6c:
         4d:99:db:ee:6c:55:7b:17:94:28:a4:8c:fd:69:29:c4:f6:2a:
         66:b6:a7:b6:65:df:ce:cb:82:e1:eb:85:b8:c6:73:bb:59:ac:
         c3:87:d3:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----