Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8B3036E8C2F611F184D6C40ECF1D38B0.roa
File:                     8B3036E8C2F611F184D6C40ECF1D38B0.roa (raw, json)
Hash identifier:          9JVECHWtmfF4vjEtDx0X5l5LX6Y/xKyQg1sRgi7AK6g=
Subject key identifier:   77:B1:FE:BE:18:13:83:82:1F:9E:94:C1:AF:BE:60:01:9C:5D:B9:2F
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01ECCF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8B3036E8C2F611F184D6C40ECF1D38B0.roa
Signing time:             Thu 08 Oct 2026 08:59:20 +0000
ROA not before:           Thu 08 Oct 2026 08:59:12 +0000
ROA not after:            Sat 07 Nov 2026 08:59:12 +0000
asID:                     131274
IP address blocks:        154.92.178.0/23 maxlen: 24
                          154.92.180.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 12 Oct 2026 00:08:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126159 (0x1eccf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct  8 08:59:12 2026 GMT
            Not After : Nov  7 08:59:12 2026 GMT
        Subject: CN=6ac75b68-28df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:bc:8c:e1:8f:8a:94:a6:36:2c:51:24:49:44:
                    68:4c:be:a1:3e:62:79:10:09:d5:05:e8:e6:f9:b5:
                    2e:76:54:94:2f:c4:33:62:97:90:c2:5d:b9:14:3a:
                    47:18:a3:b0:03:55:4e:5a:9e:19:1a:4d:4c:d9:7b:
                    b2:d0:a4:11:68:7d:19:33:03:15:0d:a4:79:9b:d4:
                    d5:03:fc:8f:85:f6:fd:8e:b8:3f:4b:f4:5e:98:78:
                    78:1f:76:9f:f0:8a:f5:65:a7:36:d4:f9:c0:4e:b3:
                    80:5d:e6:ec:1b:27:49:af:28:11:f5:ea:50:4f:65:
                    5e:c7:e8:43:7a:c1:4b:62:d8:bb:32:78:51:f7:aa:
                    9b:a5:ef:54:60:a1:b0:d6:52:0a:6a:9d:07:dc:e5:
                    39:39:14:ec:4a:29:fd:46:eb:98:96:6a:35:76:74:
                    af:f3:85:df:71:f2:b2:13:d9:9e:0a:2e:11:17:2d:
                    60:7b:e6:d8:9d:49:ee:13:45:50:85:42:07:cb:32:
                    25:c3:79:25:4d:6f:e2:da:1b:d6:21:99:c5:b3:7a:
                    76:bf:01:81:da:7f:c7:a5:0d:8b:5f:db:c7:9d:ba:
                    44:5e:f3:6b:37:de:12:0c:62:eb:89:6e:b5:e7:eb:
                    e4:2b:63:29:44:c0:3c:31:c6:39:45:7d:d1:e2:a5:
                    36:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:B1:FE:BE:18:13:83:82:1F:9E:94:C1:AF:BE:60:01:9C:5D:B9:2F
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8B3036E8C2F611F184D6C40ECF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.92.178.0-154.92.183.255

    Signature Algorithm: sha256WithRSAEncryption
         88:af:45:c4:95:af:cb:a3:eb:16:ab:76:96:c2:16:36:a3:80:
         10:c8:f3:08:f3:21:34:e3:fd:6d:ce:c0:2b:a3:b4:6b:4a:ba:
         c5:0a:cb:9c:b1:a8:2a:91:2a:08:63:bb:8a:85:cb:d6:c1:78:
         16:54:c2:b1:7c:06:c5:df:c0:00:fa:ef:73:5a:ca:3a:45:93:
         5e:91:80:3b:7e:43:a0:5a:54:b7:1c:c4:77:5e:e5:14:a9:1f:
         d0:54:38:24:d2:a9:9e:52:51:24:27:0b:1e:00:90:2e:a8:08:
         a1:e2:47:cc:9c:9e:20:1f:fd:bf:1d:b3:5a:c6:03:e1:50:06:
         84:4e:0d:97:6e:25:b5:b1:1c:5b:68:93:13:1d:2d:2e:60:d3:
         e9:84:62:71:08:27:f4:9d:d1:a7:b1:ae:20:f1:28:89:fd:c7:
         98:ea:03:d1:1f:76:71:c3:cd:ca:52:5e:19:db:5f:5c:07:b4:
         67:30:81:e8:c7:bb:da:92:81:ec:bf:ea:59:89:3b:60:a4:ec:
         7f:eb:76:ec:f6:d8:36:31:1e:64:92:91:c8:87:1f:4b:8e:86:
         fa:56:9c:b3:19:5f:35:4f:7b:d5:a2:e3:c5:dc:df:ba:e5:bd:
         30:92:44:af:c7:25:fd:75:37:ac:fc:df:86:bf:ed:82:b6:32:
         3c:74:96:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----