Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9266BE66B7E111F1B26507AFCE1D38B0.roa
File:                     9266BE66B7E111F1B26507AFCE1D38B0.roa (raw, json)
Hash identifier:          nOBbc7YitdJRODhpbsd/SNaL5bKjk5Z/RRAMusSHJZo=
Subject key identifier:   7B:CD:10:1A:DE:3E:43:A8:8C:D0:17:16:02:10:23:56:86:B2:9B:48
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EA6B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9266BE66B7E111F1B26507AFCE1D38B0.roa
Signing time:             Thu 24 Sep 2026 06:31:28 +0000
ROA not before:           Thu 24 Sep 2026 06:31:24 +0000
ROA not after:            Fri 30 Oct 2026 06:31:24 +0000
asID:                     328608
IP address blocks:        154.91.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125547 (0x1ea6b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 24 06:31:24 2026 GMT
            Not After : Oct 30 06:31:24 2026 GMT
        Subject: CN=6ab4c3c0-2ff0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:96:91:a2:7c:06:a5:55:09:db:66:e0:da:2e:
                    7a:d4:4e:78:d2:27:70:e8:e6:13:be:49:45:b4:9a:
                    bb:a0:6e:05:d4:34:7a:3b:3c:ab:59:04:40:b8:f5:
                    90:49:a0:79:eb:6e:21:7d:b9:cb:32:23:fd:3f:72:
                    97:b1:91:bd:b0:33:e0:4d:f0:5c:ac:ae:29:a1:85:
                    c0:dd:dc:f8:45:d1:f7:3b:02:7e:ca:6b:b0:8f:1e:
                    c8:32:0a:34:89:f8:a2:70:ef:67:e2:37:d2:85:14:
                    0b:61:be:5b:11:e3:5f:b6:59:f3:53:93:bd:ef:a4:
                    79:7d:66:83:2c:bf:9a:4e:2b:86:87:cf:0c:96:f5:
                    0c:16:83:81:f5:fe:a5:e2:e1:9c:bc:f2:8b:bc:ad:
                    74:ca:d5:e1:9b:fa:db:bc:f9:2e:25:0e:b5:32:48:
                    fe:16:6a:81:6c:65:3c:0f:2a:c8:6e:5b:54:ee:44:
                    95:58:e9:91:fe:28:82:c2:ce:62:c8:93:ab:d0:42:
                    5c:f5:70:df:d4:10:cb:41:b4:33:d8:38:2d:fa:1c:
                    f4:98:9e:54:34:84:8e:5e:49:b5:08:a6:a7:ec:ed:
                    f3:b1:56:be:18:1d:ec:8d:02:c2:40:a9:5f:64:dc:
                    17:97:f7:4d:2c:df:18:4e:d5:3b:be:4e:a4:3e:59:
                    55:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:CD:10:1A:DE:3E:43:A8:8C:D0:17:16:02:10:23:56:86:B2:9B:48
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9266BE66B7E111F1B26507AFCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.91.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d6:5c:ee:f0:4a:c1:98:19:aa:7f:1a:e4:7b:98:b8:a6:d6:7c:
         10:89:af:fc:1a:57:db:73:77:9f:c8:20:10:2a:80:b5:9d:92:
         c8:35:cd:d3:04:58:fb:a5:80:ec:1b:97:20:1a:3e:17:f3:e7:
         bc:0f:49:f6:4d:86:30:f4:13:29:ea:d9:c3:38:68:f5:8b:02:
         69:f5:c7:22:6e:6a:f6:82:96:6f:99:2b:11:30:1e:dc:e5:4d:
         9a:09:5e:82:16:93:5c:4d:da:2f:67:fd:af:66:0e:4c:de:97:
         39:ca:28:e1:8b:60:c1:c8:5e:34:82:ef:60:69:14:c5:ad:6d:
         02:b6:6d:05:42:13:98:bb:98:e5:6f:70:aa:be:36:61:f6:1f:
         55:bb:91:2b:a6:17:e7:12:60:9a:ef:34:15:a1:54:5b:e7:f0:
         04:08:1f:7f:b1:0e:7f:f1:b2:29:e0:1d:eb:ea:85:50:f4:c0:
         2b:d9:39:d9:50:92:62:61:78:a1:2b:da:43:d4:12:38:e5:76:
         e5:f2:52:c9:0c:02:cd:f4:b6:01:7b:2a:16:dc:2e:3f:c1:0c:
         6b:28:a6:04:be:d1:68:20:a6:dd:64:a3:1b:30:c9:02:1e:d0:
         09:24:a7:3d:b0:4b:4f:6e:89:27:9c:1c:fa:57:93:a6:1d:b3:
         4a:c9:18:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----