Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8B31311AB7ED11F1A57574FBCE1D38B0.roa
File:                     8B31311AB7ED11F1A57574FBCE1D38B0.roa (raw, json)
Hash identifier:          VhtBYkmAnbn3hgUlrba7odiBVWypH04JE0iw+lxVGW0=
Subject key identifier:   3F:89:EC:80:01:6C:4B:E8:3E:DE:EB:4B:5B:B8:6B:2C:D0:FB:03:01
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EA99
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8B31311AB7ED11F1A57574FBCE1D38B0.roa
Signing time:             Thu 24 Sep 2026 07:57:10 +0000
ROA not before:           Thu 24 Sep 2026 07:57:06 +0000
ROA not after:            Tue 03 Nov 2026 07:57:06 +0000
asID:                     198243
IP address blocks:        154.83.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125593 (0x1ea99)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 24 07:57:06 2026 GMT
            Not After : Nov  3 07:57:06 2026 GMT
        Subject: CN=6ab4d7d6-ecc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:cc:9f:b1:8a:32:f8:37:92:3e:f0:aa:a7:fc:
                    9b:01:df:af:81:55:51:be:af:9d:44:db:93:f6:55:
                    ea:e4:be:d8:1b:c1:36:43:0f:47:25:fb:e7:83:50:
                    be:73:3b:76:c2:62:09:7e:82:0c:af:4b:9f:ab:2b:
                    0b:27:17:07:d5:c7:b2:de:af:01:23:3b:33:0a:8c:
                    70:46:db:7c:b7:d1:98:fd:1d:1b:d2:fd:ee:54:b4:
                    dd:8c:3e:24:00:0f:12:02:5d:ad:7f:21:b3:3a:18:
                    2e:3a:11:3a:eb:d8:fb:9c:f1:74:06:ab:69:d9:f1:
                    13:da:ab:94:02:df:40:c1:99:6e:6e:46:c0:d2:94:
                    a0:1c:d7:cd:b2:b1:6e:cc:d1:44:a4:64:b3:38:36:
                    b2:f6:ba:67:2b:63:e8:e9:1b:aa:66:b3:ce:6b:aa:
                    9f:2a:ec:98:be:ba:c1:df:1e:16:ad:a4:ba:52:31:
                    6b:d7:50:19:36:f5:50:25:5a:4a:d2:eb:f7:2f:c3:
                    42:6f:0d:8d:44:61:74:6d:a0:ea:39:f5:7a:d6:d9:
                    cd:74:f3:f7:2f:ee:e6:49:86:4e:50:d4:8a:83:e2:
                    1a:8f:8b:40:ec:c4:0d:76:07:27:2d:42:25:2d:50:
                    78:69:6f:bc:b0:51:a6:4b:ea:72:db:c2:ef:24:2a:
                    de:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:89:EC:80:01:6C:4B:E8:3E:DE:EB:4B:5B:B8:6B:2C:D0:FB:03:01
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8B31311AB7ED11F1A57574FBCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.83.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:20:b4:6f:c3:a0:0b:10:0e:91:c2:07:29:df:2d:7c:3f:b9:
         54:b5:51:78:2c:98:1b:f5:f8:e0:24:3a:93:a9:5f:83:b7:5c:
         51:04:45:6a:0d:81:c1:c2:28:5b:13:8e:36:85:7f:be:ae:93:
         12:88:54:c6:8a:37:06:f2:0b:0e:ee:d3:bd:9e:cf:3c:18:a3:
         bf:e2:cc:b6:d1:62:da:37:ef:1a:1d:8a:c2:be:01:18:3b:65:
         88:ac:28:a4:8d:94:a8:cf:d2:17:83:93:81:a4:35:be:df:bb:
         b8:9a:6b:75:25:c9:58:7c:ae:f8:f6:4f:a6:b0:d6:89:0a:00:
         d7:5a:52:ce:e1:67:4f:2c:ea:4f:3b:43:be:e0:72:b2:c0:a0:
         a8:93:81:5a:fc:ff:5b:e4:a9:7b:c3:67:a4:ac:33:f8:80:b2:
         06:1e:f8:b7:f8:9b:ff:11:38:b5:c2:92:fc:4b:8c:99:11:0c:
         90:ec:3b:97:5a:0f:41:af:a4:e3:b0:2a:1c:dc:87:ba:8e:18:
         81:45:e2:55:9d:33:b3:4b:2a:67:92:f6:d5:c4:bf:94:6d:d0:
         18:20:d8:3d:8a:1c:95:f5:4e:40:43:44:2d:7a:3c:16:9a:dd:
         04:87:ab:ea:49:38:f6:e4:8c:27:90:6d:4f:59:d1:3d:d8:b2:
         52:ae:bf:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----