Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/82F1B5C0C48011F18B22D319CF1D38B0.roa
File:                     82F1B5C0C48011F18B22D319CF1D38B0.roa (raw, json)
Hash identifier:          hXUQbxwMCsFFu/qyZK1iODzvMYLODhYKclKmLwJj08U=
Subject key identifier:   57:33:56:27:1A:99:EB:DE:79:6B:43:93:75:20:2A:2C:E4:5C:07:7C
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01ED2D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/82F1B5C0C48011F18B22D319CF1D38B0.roa
Signing time:             Sat 10 Oct 2026 07:59:26 +0000
ROA not before:           Sat 10 Oct 2026 07:59:21 +0000
ROA not after:            Mon 16 Nov 2026 07:59:21 +0000
asID:                     61112
IP address blocks:        154.85.19.0/24 maxlen: 24
                          154.88.66.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126253 (0x1ed2d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct 10 07:59:21 2026 GMT
            Not After : Nov 16 07:59:21 2026 GMT
        Subject: CN=6ac9f05e-e7e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ae:a3:96:77:5a:5d:3c:74:20:7b:11:c5:ce:
                    20:ab:ee:36:3c:24:81:0c:2b:69:da:da:89:e0:d3:
                    32:ee:c2:b2:3d:09:7b:ba:e7:1a:20:4a:d9:a6:a2:
                    be:c7:e1:cc:5d:cf:67:8e:cf:52:94:cd:c1:d2:91:
                    3a:75:5f:d6:50:85:af:e3:fd:8b:94:c3:29:02:6e:
                    ab:a0:c3:44:16:2c:7a:0d:99:6c:3e:ee:64:9f:dc:
                    ef:cc:54:05:fe:60:4f:e6:14:bf:3f:ed:65:ae:a9:
                    ef:6a:e2:b7:ce:10:82:54:9a:7b:cd:4a:91:68:ff:
                    6b:bf:fb:8d:9a:c1:52:9b:c8:d9:6e:ff:84:94:03:
                    5a:18:2e:10:2f:20:53:d1:f0:e8:68:14:4d:26:bc:
                    71:7b:54:24:23:3a:1b:e3:de:e4:3b:01:06:d8:ff:
                    4e:09:2b:d3:88:85:36:1e:ab:4a:45:d5:11:75:e8:
                    f3:2f:d9:82:7e:00:be:8c:93:63:53:d1:66:cf:63:
                    f0:28:b6:e6:52:37:d4:6f:3d:5e:bc:e9:4f:37:b8:
                    85:8e:fc:8c:8e:38:8c:53:9d:32:4b:79:1e:f4:99:
                    67:d9:74:0b:b7:cd:a1:9b:19:79:69:de:81:35:fa:
                    de:f2:e5:0c:ae:68:dd:63:23:79:36:25:11:2b:71:
                    08:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:33:56:27:1A:99:EB:DE:79:6B:43:93:75:20:2A:2C:E4:5C:07:7C
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/82F1B5C0C48011F18B22D319CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.85.19.0/24
                  154.88.66.0/23

    Signature Algorithm: sha256WithRSAEncryption
         13:b5:e3:4c:ba:c5:9d:01:bf:ab:a1:ae:8c:9a:b1:fb:a2:35:
         ae:73:22:07:c1:42:23:cc:46:bd:b0:b3:c3:49:2a:60:e7:5c:
         0d:73:f2:f8:ce:86:6a:11:7a:41:e9:d0:d2:8c:df:bf:70:e7:
         62:1f:07:c9:d7:8c:4b:f7:b5:70:0b:45:4f:0d:95:bd:3f:3e:
         38:63:97:78:2a:d0:74:33:f0:78:85:5c:5b:5f:86:e3:51:0e:
         af:c5:d6:85:ed:16:fc:16:7a:b4:11:94:3e:5f:ce:45:5f:d2:
         d1:b5:29:50:87:24:21:0a:4a:ad:83:6c:a0:36:0e:31:af:79:
         e4:cb:2a:3a:e4:54:56:e4:53:90:ea:f5:ec:58:5d:37:34:3e:
         a0:51:d0:aa:e3:63:33:6b:1e:f4:f6:c6:33:b6:e5:26:76:ca:
         da:0b:90:72:1e:06:77:bf:c2:ee:c1:6b:d4:84:ad:12:21:c8:
         db:81:25:7e:4c:41:af:5a:cc:b8:e9:c5:d3:6c:88:34:2c:aa:
         98:e5:6e:4d:89:75:37:da:1d:ba:d1:72:90:35:f8:94:57:26:
         e8:85:cd:31:77:51:1a:4f:b6:1e:9a:c8:fb:13:e9:19:22:44:
         55:70:e7:a0:e6:0f:0f:58:51:2a:46:89:9c:4e:a3:49:70:36:
         3e:b1:9a:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----