Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9A250C06C22811F1A73AC6BBCE1D38B0.roa
File:                     9A250C06C22811F1A73AC6BBCE1D38B0.roa (raw, json)
Hash identifier:          0bwbfMWwbxwMs+K+EhpbjCvuZ8kbB3HJN6jTC9gD4Ow=
Subject key identifier:   46:8D:B5:AB:98:7E:53:19:C9:36:71:D6:22:CC:3D:FD:26:AD:44:F0
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01ECB8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9A250C06C22811F1A73AC6BBCE1D38B0.roa
Signing time:             Wed 07 Oct 2026 08:25:07 +0000
ROA not before:           Wed 07 Oct 2026 08:25:01 +0000
ROA not after:            Sat 17 Oct 2026 08:25:01 +0000
asID:                     153517
IP address blocks:        154.86.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126136 (0x1ecb8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct  7 08:25:01 2026 GMT
            Not After : Oct 17 08:25:01 2026 GMT
        Subject: CN=6ac601e3-63c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:ea:cb:27:cd:14:60:7f:54:9e:ef:ee:f0:c3:
                    89:3e:22:33:53:a1:65:48:e4:77:ee:2f:df:98:4a:
                    0b:06:d5:a6:57:3e:e4:92:b7:3a:26:85:3f:d5:a4:
                    2d:b0:a0:91:95:cc:d0:ec:49:3a:00:56:2a:1a:f8:
                    9e:31:71:2f:56:95:65:c9:69:28:a5:b5:c1:11:05:
                    e1:f5:eb:4e:fb:c4:8d:12:8e:02:52:9c:10:df:65:
                    13:db:ea:af:dd:ba:f7:e4:8f:56:6b:47:20:54:5a:
                    38:30:23:43:f4:47:ab:a9:9d:fb:65:ba:16:79:80:
                    de:c2:a1:1d:5f:fd:58:82:db:52:da:97:90:78:0e:
                    d5:95:83:8e:3c:27:95:65:d4:44:6b:6d:40:68:c7:
                    b7:48:73:4d:42:55:f6:36:3a:c7:e6:ae:3f:da:ca:
                    85:a8:c6:0c:bc:87:af:3e:c3:50:db:10:62:df:7c:
                    71:de:e6:44:d3:f9:8b:55:fd:1d:13:20:c8:a2:51:
                    3f:a6:7a:fe:e7:02:17:df:49:eb:6d:e8:c2:60:90:
                    3d:52:55:ab:5a:06:24:56:59:78:07:a6:bb:f9:fe:
                    fd:23:46:bc:d2:45:cc:46:e1:07:11:0f:96:8f:46:
                    84:90:b4:87:b0:aa:a5:28:fb:9a:2e:67:15:93:73:
                    8c:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:8D:B5:AB:98:7E:53:19:C9:36:71:D6:22:CC:3D:FD:26:AD:44:F0
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9A250C06C22811F1A73AC6BBCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.86.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d1:ee:2c:c5:74:48:f4:e1:82:2c:b9:a6:df:2d:0a:33:bb:85:
         65:a6:bd:20:e4:7a:27:c0:2d:66:0c:ed:22:b4:14:ea:21:84:
         be:d6:e5:ac:69:49:31:2a:5d:5f:5a:4b:cc:f5:d3:32:fc:3e:
         db:b2:54:fe:21:07:5e:16:5f:1c:54:f4:d5:81:a0:d7:d7:59:
         53:e3:78:9f:fc:fc:45:3a:c7:9b:aa:dc:a1:f2:8b:7c:ec:f6:
         c8:4c:0f:48:96:f8:52:4a:d2:ad:0a:33:02:51:4c:d7:2e:3e:
         22:01:e8:b6:04:26:e6:90:41:45:d0:5b:1d:26:be:6c:53:a3:
         78:49:96:de:81:68:8f:ad:35:1e:f3:f2:65:f5:2b:19:ef:0d:
         c7:97:f5:ec:75:dc:5e:96:29:96:ae:4d:35:8d:6e:8c:3f:f4:
         8c:c1:b4:d1:71:75:7c:97:fc:ca:9a:e1:46:2b:b3:fa:04:70:
         89:47:f1:31:2c:d1:c5:3a:7d:d5:7a:84:a8:e9:f6:53:15:29:
         44:7c:cb:43:eb:02:71:d7:f8:69:ab:67:e0:bf:4a:e9:14:41:
         9b:96:2c:f3:99:ff:7b:be:26:0d:88:74:be:e2:b2:22:17:d9:
         7d:01:74:d2:bf:38:ce:b7:0a:e9:53:02:80:d0:b8:1b:34:ba:
         17:64:df:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----