Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/861A243EC09E11F1A00A20B0CE1D38B0.roa
File:                     861A243EC09E11F1A00A20B0CE1D38B0.roa (raw, json)
Hash identifier:          eR8U4PsfaK1lnCc0JQ923rQONh0fv9cRSq7zVVTPabk=
Subject key identifier:   F6:21:EF:13:9E:AD:C6:CD:63:17:58:B5:51:46:EF:C0:39:0E:20:C1
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EC46
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/861A243EC09E11F1A00A20B0CE1D38B0.roa
Signing time:             Mon 05 Oct 2026 09:24:11 +0000
ROA not before:           Mon 05 Oct 2026 09:24:07 +0000
ROA not after:            Mon 12 Oct 2026 09:24:07 +0000
asID:                     131618
IP address blocks:        154.222.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 12 Oct 2026 09:24:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126022 (0x1ec46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct  5 09:24:07 2026 GMT
            Not After : Oct 12 09:24:07 2026 GMT
        Subject: CN=6ac36cbb-a632
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a4:78:ef:4b:7f:49:cc:68:b5:52:e5:3a:ba:
                    d8:7e:01:90:0e:ba:c0:ee:b9:9e:15:4b:2e:7d:3f:
                    55:35:2d:20:c7:2a:ee:99:c1:44:dc:5c:4f:ca:00:
                    be:4d:74:25:b7:32:11:cb:b4:b5:51:e3:40:46:09:
                    b9:6e:2b:09:97:a4:04:70:28:32:97:0a:c2:53:f6:
                    f3:f8:10:ea:c0:3e:ec:2b:ab:a4:21:5d:4b:3b:90:
                    c1:45:59:45:48:90:25:19:b6:8e:b7:77:bf:29:12:
                    9b:92:4b:41:b2:d9:b0:f5:b5:77:2e:69:5c:3f:2c:
                    79:03:5e:e2:e1:ee:5d:c1:12:2e:8c:67:e2:a3:9b:
                    31:e8:3c:f4:6f:dc:9d:1d:38:d6:35:70:7b:14:a9:
                    c2:56:8e:91:33:87:9c:ca:a7:4c:a5:5b:4c:ee:b4:
                    3f:46:fc:69:18:86:f2:e2:bc:f3:2b:c2:2f:9c:c8:
                    b3:e0:5a:7f:2b:66:ca:12:0a:75:81:6a:b8:37:3a:
                    3b:9b:7b:41:f1:c0:cb:57:5e:95:bc:d6:6b:38:ae:
                    fd:63:25:69:35:f3:69:4c:f1:b5:a9:d1:1e:18:85:
                    a1:51:b0:36:e8:c8:99:d9:5c:5a:32:02:94:ca:ef:
                    b9:64:eb:c6:8c:d0:75:fd:d2:fe:b3:69:06:c0:10:
                    3b:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:21:EF:13:9E:AD:C6:CD:63:17:58:B5:51:46:EF:C0:39:0E:20:C1
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/861A243EC09E11F1A00A20B0CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.222.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:29:95:20:42:f7:8e:b3:d3:0d:70:3b:b6:4d:d0:38:eb:56:
         8d:42:19:99:c1:c5:6b:83:54:36:f7:c7:98:7e:68:16:3b:bc:
         ca:1f:0e:4a:c7:e4:d7:06:5f:82:9c:2d:f4:3d:26:c6:5a:a5:
         7d:8c:76:43:1d:d4:7d:d3:6f:3f:6e:00:b1:b7:ef:cf:49:ce:
         2d:7a:35:5f:94:b7:06:da:f4:67:46:8f:59:a6:38:73:20:6a:
         84:10:02:38:ef:af:0e:3a:84:5e:39:b1:6e:3f:84:40:3c:b7:
         38:61:53:63:a6:ee:1a:11:b5:0b:53:af:d2:73:4c:b6:eb:7f:
         94:8a:07:c4:de:f6:f0:0f:ed:0a:f8:78:67:92:78:6b:7e:ad:
         c8:3e:ed:b7:fd:88:f2:fc:34:dc:d6:1c:87:c2:1d:81:c0:32:
         66:85:e8:88:ea:ac:38:87:5e:b9:07:92:76:90:87:12:85:24:
         18:03:87:0b:17:a0:6d:b6:81:20:71:3a:df:d5:f1:93:c3:75:
         f4:76:6f:32:59:9a:6e:80:88:92:df:97:de:0f:bd:a9:1e:25:
         e5:a4:94:ca:a5:41:47:8a:48:75:69:5a:64:2c:4e:fb:5c:b8:
         a8:a0:85:d4:e6:22:47:6b:d1:65:9f:64:03:80:82:f9:0b:10:
         21:cd:09:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----