Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/99B8DE80BD9811F199EB5EEFCE1D38B0.roa
File:                     99B8DE80BD9811F199EB5EEFCE1D38B0.roa (raw, json)
Hash identifier:          9dB5lliA9Bnvz6Mftw+Q4zdEE7VH/McRNN1PAN+6la4=
Subject key identifier:   C1:27:38:62:85:88:46:1B:FB:DD:15:1A:A7:C2:BE:24:02:8E:4B:35
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EBBA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/99B8DE80BD9811F199EB5EEFCE1D38B0.roa
Signing time:             Thu 01 Oct 2026 13:04:14 +0000
ROA not before:           Thu 01 Oct 2026 13:04:10 +0000
ROA not after:            Thu 12 Nov 2026 13:04:10 +0000
asID:                     214941
IP address blocks:        154.193.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125882 (0x1ebba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct  1 13:04:10 2026 GMT
            Not After : Nov 12 13:04:10 2026 GMT
        Subject: CN=6abe5a4e-1390
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:37:7c:77:a9:0a:07:cd:f5:1b:9a:64:bc:cf:
                    b5:ef:d9:81:e5:73:3d:11:7c:eb:6e:b3:01:7f:6a:
                    7e:59:a2:08:de:0b:48:a1:1f:89:59:ce:d4:2e:3d:
                    78:e9:d7:ba:79:27:98:2a:a8:24:54:79:68:b2:11:
                    4f:d1:79:d0:d6:b4:7a:55:72:11:54:5f:15:aa:43:
                    5f:0f:99:d4:f8:31:d3:37:78:ee:f0:cc:44:25:13:
                    9f:87:97:c1:b1:7d:cc:d6:53:c3:cb:f6:71:02:69:
                    e7:ad:4a:1c:e4:b4:5e:c7:79:31:39:01:67:a2:e2:
                    31:b0:5b:d0:b3:e2:e2:2e:9b:32:00:a1:5e:48:9d:
                    58:21:47:8e:2a:5e:3a:ca:2b:44:d3:aa:a4:bb:af:
                    a6:d5:6d:d1:60:e8:a1:32:17:4a:ac:be:76:08:fc:
                    76:2c:29:23:75:46:4c:f0:18:34:33:20:64:60:6d:
                    2b:d4:8b:3a:ca:7a:4f:43:ee:56:b5:61:4c:cb:8a:
                    96:32:b9:bc:02:ab:1a:95:e8:81:49:e0:c5:08:8a:
                    35:df:9e:47:95:45:af:f2:0b:be:e6:b0:41:81:34:
                    f5:b2:7a:b5:f1:55:22:f9:dc:95:01:17:8e:99:62:
                    e8:27:44:8b:1a:c3:53:fc:8f:c4:05:76:f6:98:d0:
                    f2:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:27:38:62:85:88:46:1B:FB:DD:15:1A:A7:C2:BE:24:02:8E:4B:35
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/99B8DE80BD9811F199EB5EEFCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.193.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:e9:a0:2c:e0:5a:4c:66:66:7a:eb:2c:12:fe:7e:0b:c5:45:
         f0:7f:81:1c:9f:ef:02:a8:07:c7:ef:5e:ea:4d:e3:ef:19:37:
         d2:01:f1:46:27:6a:8d:6f:0d:ee:b6:9d:c9:6e:42:cd:be:e9:
         80:d0:91:1d:c0:9a:d5:6f:34:ed:d1:4b:c5:13:66:8e:26:ca:
         48:a4:d7:c8:fd:c0:b2:5a:b0:5d:14:1a:11:cd:0c:cc:05:31:
         c3:44:16:9d:91:e6:58:56:37:cb:3d:25:66:5c:8d:32:24:9e:
         86:0d:fb:c3:e2:71:bc:22:3a:a1:7a:57:6f:3e:e4:26:a9:a4:
         81:64:46:23:cf:be:3b:0b:65:b6:a0:bf:01:81:0d:c3:ed:1c:
         9d:2d:eb:80:1e:01:e2:4a:bd:f7:d1:eb:3c:2d:9a:a4:bf:17:
         84:02:72:8b:b6:78:02:ed:6b:43:4b:73:19:b5:9d:13:5c:71:
         3b:e6:f3:bb:af:76:d1:27:0b:d2:c7:3c:4e:18:4a:ec:3d:bc:
         63:ce:7f:1a:8f:b2:3b:fe:fe:05:b4:2a:2d:5f:f8:3b:cc:d2:
         9f:43:48:b5:01:7e:b0:96:00:d2:c0:1f:3f:8c:15:dc:e1:91:
         6c:9e:9a:cf:b5:f6:49:44:5b:5d:40:f9:ea:4e:2b:ce:e9:7c:
         1a:a5:a3:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----