Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/90C962D2BE2811F1919AFBA2CE1D38B0.roa
File:                     90C962D2BE2811F1919AFBA2CE1D38B0.roa (raw, json)
Hash identifier:          Zcq2VQJbNbS7sDU8a2HiKESDL3xgF0AD4Q1yovN7bGc=
Subject key identifier:   0A:CA:86:FC:15:F2:A9:44:0D:DF:96:FE:68:19:68:20:97:4F:CE:C5
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EBBF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/90C962D2BE2811F1919AFBA2CE1D38B0.roa
Signing time:             Fri 02 Oct 2026 06:14:46 +0000
ROA not before:           Fri 02 Oct 2026 06:14:42 +0000
ROA not after:            Mon 12 Oct 2026 06:14:42 +0000
asID:                     401362
IP address blocks:        154.196.1.0/24 maxlen: 24
                          154.196.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 12 Oct 2026 06:14:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125887 (0x1ebbf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct  2 06:14:42 2026 GMT
            Not After : Oct 12 06:14:42 2026 GMT
        Subject: CN=6abf4bd6-2aa5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:df:f8:72:68:3b:08:0e:f5:d4:b6:7a:f1:17:
                    5e:84:c4:57:73:fd:bd:82:81:8a:1c:21:0b:35:b8:
                    13:6d:38:3a:a1:87:df:c6:fd:0c:de:c4:af:4b:03:
                    72:ad:75:e3:58:e8:f5:f6:16:8f:39:60:a8:cf:b4:
                    a5:50:5a:2a:bb:92:3b:d6:d0:4f:ad:41:77:6f:cd:
                    bf:08:56:2b:f5:56:5a:76:03:3c:82:52:cd:bd:cf:
                    c8:55:ea:88:6c:44:60:80:ff:47:a8:42:fd:34:4a:
                    6b:84:ee:17:00:cd:67:5f:2c:18:7f:ff:b9:3a:28:
                    c9:21:e9:3d:b7:23:ea:07:d6:35:eb:3d:de:71:1c:
                    d7:1c:f0:f7:a7:7c:45:16:61:2b:fa:ec:b3:13:ca:
                    05:37:33:40:85:e4:1b:51:ce:a8:6d:d0:53:29:c8:
                    3a:71:9b:75:2f:d5:1d:0d:a1:a9:f6:e8:1d:64:8c:
                    ab:33:ca:27:34:a6:cb:a2:b7:1c:19:d8:9e:ae:5f:
                    dd:ab:d6:ee:3f:f8:f0:a0:25:5d:a6:46:10:0b:ac:
                    26:3a:07:95:b2:ac:b3:ce:3b:30:ef:f4:ab:af:7a:
                    09:ed:f6:01:2b:6a:11:9e:7d:28:d5:7f:2a:8c:bd:
                    5e:f3:6a:0f:d7:4c:e6:a4:91:9e:ea:0a:9c:57:e9:
                    1c:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:CA:86:FC:15:F2:A9:44:0D:DF:96:FE:68:19:68:20:97:4F:CE:C5
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/90C962D2BE2811F1919AFBA2CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.196.1.0/24
                  154.196.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:67:7d:ae:c6:12:ba:b8:22:12:80:a6:34:92:00:6e:77:61:
         70:20:75:6c:6b:25:84:c6:e5:d6:bf:87:1a:1f:38:2e:4e:73:
         f5:2c:0b:84:08:4a:a5:99:e5:33:f5:8d:bc:fd:24:f3:39:b9:
         ab:80:09:59:7e:81:5f:50:28:01:9d:8a:be:31:98:62:ac:cc:
         3d:24:8b:63:1f:1a:be:92:b3:38:5c:50:13:b1:83:e6:3f:35:
         f2:24:4a:2e:7c:a9:e1:72:c5:1b:00:eb:34:d4:4b:20:2e:4a:
         32:91:97:25:4a:af:ec:27:19:47:ff:e8:04:b6:c1:9e:74:5a:
         d7:be:19:d8:c3:5d:a8:c7:c7:83:ba:2a:63:bc:e5:83:77:e8:
         1a:06:43:60:38:28:5c:d5:e1:67:14:de:3d:c3:71:a5:d3:8b:
         4c:8b:90:f7:4e:20:53:52:0c:c2:99:54:16:81:6d:ff:06:27:
         88:1b:27:f8:49:ca:10:cb:e3:ad:c2:4b:e0:04:64:eb:9a:ba:
         fd:bb:3f:be:4d:96:4b:44:ef:78:47:42:a4:d7:36:55:49:64:
         4a:af:fb:c2:cd:56:bf:87:5e:57:9b:02:5a:98:70:9c:4f:a8:
         dc:6a:2b:c4:dc:f1:a6:e2:e9:05:a5:23:63:0f:75:a0:d0:94:
         73:12:75:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----