Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9BB9C374C60911F1AFB463A2CE1D38B0.roa
File:                     9BB9C374C60911F1AFB463A2CE1D38B0.roa (raw, json)
Hash identifier:          C2KabiKOqwOvfaR0nJZ961AAj0gxrqowxyIstRr3y7o=
Subject key identifier:   DE:9C:F8:7E:1B:50:32:BF:D8:FB:0F:BA:A9:B8:D9:7D:58:7C:39:22
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EDA9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9BB9C374C60911F1AFB463A2CE1D38B0.roa
Signing time:             Mon 12 Oct 2026 06:53:20 +0000
ROA not before:           Mon 12 Oct 2026 06:53:14 +0000
ROA not after:            Thu 11 Oct 2029 06:53:14 +0000
asID:                     17561
IP address blocks:        154.86.188.0/24 maxlen: 24
                          154.86.189.0/24 maxlen: 24
                          154.86.190.0/24 maxlen: 24
                          154.86.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 17 Oct 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126377 (0x1eda9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct 12 06:53:14 2026 GMT
            Not After : Oct 11 06:53:14 2029 GMT
        Subject: CN=6acc83e0-3f32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:dd:77:57:aa:2b:07:e0:dd:f3:75:59:55:20:
                    fc:7c:c0:a8:45:a7:14:72:bb:70:99:06:20:b6:5d:
                    9d:38:46:82:ba:79:69:7f:3f:25:d5:85:0c:ab:2f:
                    84:db:e0:e3:aa:7d:0b:ab:8e:96:bb:9b:d1:07:24:
                    0d:3c:2c:4c:55:66:ab:44:6f:b9:96:57:e8:52:e9:
                    5b:11:e0:23:55:74:8d:4b:18:ff:58:d5:ff:40:a8:
                    a1:25:7f:f6:31:7b:ca:b5:e6:49:3e:36:6f:19:bf:
                    ef:26:28:46:6d:64:2f:41:e1:3d:9c:58:c1:39:4f:
                    5d:2a:1b:05:f7:b9:45:42:4b:85:ec:f3:9b:a3:68:
                    e2:92:48:b2:40:73:ea:4e:3f:6b:87:75:10:ad:b7:
                    c6:cc:01:91:b1:c9:d7:d2:25:61:ef:91:e9:7d:e9:
                    0a:b1:a9:9f:90:4d:d4:52:3d:6d:0c:de:50:55:ed:
                    35:ab:04:d1:bb:44:93:8f:37:dd:89:1b:21:a7:cb:
                    54:cf:78:f2:ab:c3:17:69:86:33:ef:05:7b:d4:a5:
                    16:f1:b2:f5:f4:1e:93:4d:ec:4e:82:bd:a7:5b:06:
                    1e:16:a0:b7:0c:2d:22:13:40:60:da:b8:5e:62:26:
                    f5:80:54:a7:55:be:ca:75:4e:f3:21:f9:d1:de:2a:
                    03:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:9C:F8:7E:1B:50:32:BF:D8:FB:0F:BA:A9:B8:D9:7D:58:7C:39:22
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9BB9C374C60911F1AFB463A2CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.86.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6f:78:5d:9e:28:10:f1:37:fa:ad:16:71:22:1f:25:78:2a:7c:
         a9:b1:2e:6a:19:94:84:34:bb:a5:c7:28:af:bf:d1:21:c7:a9:
         18:57:20:df:42:b8:e1:7e:dc:77:96:c4:e2:eb:eb:f4:03:23:
         df:3a:b1:33:45:9a:b8:50:12:af:57:f4:10:7c:86:31:82:75:
         8e:82:05:6c:d1:e8:c9:88:8d:ef:a6:08:01:5f:81:25:cd:2c:
         0a:39:e6:50:57:a9:dd:b2:9b:72:1c:ea:1e:ae:7f:98:b2:0b:
         5d:aa:b0:26:65:45:4c:46:f7:7c:74:a9:f4:7c:1a:b3:d8:60:
         d2:b8:49:f6:17:26:99:a8:e8:a0:a5:29:a2:7a:97:5e:a4:a9:
         df:e9:b7:26:6a:c6:9f:80:f7:7a:c4:e3:0c:bf:f7:3d:dc:08:
         3d:71:3e:32:10:73:c9:e1:31:be:9e:08:ee:0a:a3:96:72:a2:
         ce:0c:6e:f5:0d:6a:d5:55:f9:59:d8:f8:eb:4d:ef:0d:0b:8f:
         3f:90:52:14:7b:5e:1c:14:71:a0:7b:bd:34:b4:f2:35:5a:f8:
         5f:42:ed:6f:b1:54:f1:97:dd:e0:dd:34:50:c2:e6:6f:2b:d8:
         77:d7:53:0b:7c:0f:0a:87:78:02:14:d7:52:91:00:4f:40:15:
         7c:02:d9:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----