Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A55BC748C87411F1BD09CDE5CE1D38B0.roa
File:                     A55BC748C87411F1BD09CDE5CE1D38B0.roa (raw, json)
Hash identifier:          gLeuC4g0uhPPzgP3QuxGr6WXKrX/Pj+MsLAr1ubTFUA=
Subject key identifier:   6F:A1:90:F5:46:DD:01:FB:8E:CF:16:A4:CB:6B:53:D7:2A:FF:77:A4
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EE35
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A55BC748C87411F1BD09CDE5CE1D38B0.roa
Signing time:             Thu 15 Oct 2026 08:44:34 +0000
ROA not before:           Thu 15 Oct 2026 08:44:30 +0000
ROA not after:            Tue 24 Nov 2026 08:44:30 +0000
asID:                     214143
IP address blocks:        154.92.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 21 Oct 2026 00:08:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126517 (0x1ee35)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct 15 08:44:30 2026 GMT
            Not After : Nov 24 08:44:30 2026 GMT
        Subject: CN=6ad09272-5593
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:a3:59:33:1e:0e:db:73:d1:57:f9:74:25:f5:
                    e1:8d:aa:de:6c:d0:c4:73:95:e0:63:65:13:60:fc:
                    53:68:0f:f7:e0:87:61:cd:aa:98:b0:31:53:76:f3:
                    d5:25:f9:7c:10:bf:6a:78:2d:3c:71:77:a3:99:61:
                    98:b4:5f:30:d7:d9:c1:20:6f:ee:e6:65:8d:59:14:
                    2c:2e:07:ed:e8:90:7c:ce:24:f6:f8:95:fd:4e:dd:
                    cb:d6:49:c8:ab:3d:69:ad:3a:da:cc:f7:b8:73:a2:
                    6c:a0:da:5a:c1:2f:0a:b6:3d:7d:d9:05:69:49:e4:
                    61:1c:f1:f0:da:2a:2d:77:54:47:bf:cf:42:5a:7a:
                    3e:82:bd:ae:37:ea:7c:31:fa:0e:a4:d6:8c:32:51:
                    89:23:cc:ab:7f:bf:9c:18:3e:57:5b:ca:5a:b8:3d:
                    a3:dd:fa:83:10:5d:ea:23:e6:26:0a:1e:13:8d:34:
                    b3:cc:c6:16:ce:1e:5b:89:79:5e:4f:19:d0:d2:77:
                    a4:6e:a9:23:f1:24:67:0b:11:83:e8:75:bd:1b:75:
                    88:33:83:fd:3c:3c:55:24:15:ce:2b:23:c8:dd:ef:
                    35:14:b3:2b:70:38:9b:c6:04:16:b4:47:33:1d:ff:
                    65:c7:ca:7f:ec:d6:5f:5b:a8:8f:47:31:2f:4e:24:
                    e5:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:A1:90:F5:46:DD:01:FB:8E:CF:16:A4:CB:6B:53:D7:2A:FF:77:A4
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A55BC748C87411F1BD09CDE5CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.92.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:2c:21:58:61:e2:8e:49:a1:51:6d:04:27:b0:aa:5b:c5:af:
         ad:67:53:1d:26:9a:53:8d:fc:db:78:1d:3b:ba:9b:54:98:31:
         05:5a:43:1a:dd:98:c2:82:4c:42:5c:ee:d5:7b:c3:da:0f:f0:
         fa:49:aa:3d:d4:88:6b:7d:ad:36:ad:92:8d:5e:8e:43:4a:22:
         e4:33:05:81:cf:d8:62:4e:ab:6a:68:72:6f:56:2a:f8:f0:eb:
         57:42:cb:1c:65:d6:13:51:31:11:4d:e3:aa:ef:18:63:2f:3e:
         4d:f7:76:1f:78:ba:8e:79:e8:a7:c5:4a:63:23:18:ff:d1:09:
         de:d2:2e:85:91:79:a2:cb:d3:34:94:82:db:50:f3:10:ac:44:
         04:af:21:0e:82:c0:6a:64:cd:e2:99:6b:56:49:48:75:64:6e:
         79:97:e3:cf:82:77:c2:16:3c:0b:08:72:15:03:3e:81:05:9e:
         a0:b1:86:2a:a0:d5:36:33:b4:0e:4f:f5:4b:58:de:94:be:2e:
         27:6e:32:54:83:33:f9:37:26:67:62:0c:6e:0f:51:55:b7:71:
         b7:4b:2a:1c:e0:61:77:70:1b:6a:66:f0:89:7c:f2:95:17:d5:
         4b:67:58:f5:a0:fa:e1:5e:32:c2:46:c7:a7:8d:02:b7:90:fe:
         f1:84:88:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----