Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A5D5FAA6BCA611F1981684C9CE1D38B0.roa
File:                     A5D5FAA6BCA611F1981684C9CE1D38B0.roa (raw, json)
Hash identifier:          exJ7I5mrd4aoFW2JHzGn1J4td7seKtCGbmoDlqbXPa8=
Subject key identifier:   5E:FB:02:A7:CD:11:61:35:C5:F1:E2:16:44:9B:EA:9E:12:6B:BE:17
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EBA5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A5D5FAA6BCA611F1981684C9CE1D38B0.roa
Signing time:             Wed 30 Sep 2026 08:12:16 +0000
ROA not before:           Wed 30 Sep 2026 08:12:12 +0000
ROA not after:            Wed 18 Nov 2026 08:12:12 +0000
asID:                     61461
IP address blocks:        154.216.192.0/18 maxlen: 24
                          154.218.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 14 Oct 2026 08:44:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125861 (0x1eba5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 30 08:12:12 2026 GMT
            Not After : Nov 18 08:12:12 2026 GMT
        Subject: CN=6abcc460-013c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:99:8f:95:67:23:dd:12:a9:a5:3d:15:4e:18:
                    2f:3e:4f:42:d6:16:1d:15:7f:13:20:eb:8d:7e:3a:
                    31:a1:45:bb:ee:f3:67:3d:8c:88:6e:a5:6c:ed:6d:
                    27:cc:bf:5b:14:59:5f:5a:3a:92:fe:59:05:d0:6d:
                    38:7d:81:c1:b0:45:3a:fa:f1:d8:b2:92:6a:f4:c4:
                    34:16:1e:a1:64:06:a3:44:02:f9:d6:27:12:83:0e:
                    07:cf:0e:80:5a:98:ec:d2:95:77:c3:59:83:37:03:
                    35:59:3f:c6:53:c4:e3:7a:ed:f3:31:a0:2c:63:e0:
                    c0:30:1d:54:44:e0:ae:e3:53:48:64:ab:3e:67:4f:
                    f6:58:ff:34:4f:4c:b8:0d:6c:94:7d:ff:e5:66:f5:
                    5f:04:9a:36:e0:6a:f9:fc:98:a0:cf:52:3a:0d:2a:
                    87:d1:96:51:f7:f8:61:ab:d3:a7:13:29:87:02:34:
                    50:d6:8e:a4:53:b3:00:7b:b8:e3:1c:4d:ff:cc:e2:
                    d7:c4:3c:9b:52:e6:64:06:3a:4e:48:10:55:da:9a:
                    fe:95:93:7d:4a:9f:82:35:ec:fa:46:f9:3f:f1:66:
                    b3:1a:1f:32:cd:65:23:96:36:41:53:74:b4:ae:48:
                    b7:e2:94:ba:37:31:70:2c:20:4f:92:22:eb:c1:48:
                    6d:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:FB:02:A7:CD:11:61:35:C5:F1:E2:16:44:9B:EA:9E:12:6B:BE:17
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A5D5FAA6BCA611F1981684C9CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.216.192.0/18
                  154.218.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         2e:34:09:31:9d:6f:f9:d0:55:63:2f:33:79:72:d2:af:28:d5:
         c4:1e:11:5e:9e:45:27:87:a4:cb:3f:cf:ef:9a:f8:96:c6:04:
         82:b3:0b:39:59:ef:8e:16:11:1b:18:ff:73:9c:f4:83:65:53:
         59:20:87:72:45:41:8f:ca:e3:3b:0e:86:2b:ca:32:e7:33:83:
         02:51:1f:94:62:af:c9:b6:8b:39:d2:7f:46:00:1e:2d:5d:39:
         21:af:53:53:45:9b:b5:b0:d3:c1:a9:c3:ec:96:2e:11:a6:de:
         e4:23:ba:91:29:ab:d9:6a:ca:51:27:5d:9c:e0:63:bf:5b:ed:
         30:37:ba:1c:72:2d:24:72:9b:bf:78:5a:82:09:74:e5:71:ed:
         40:f0:44:94:ca:88:70:79:3e:28:67:62:bb:a9:6b:b9:c0:47:
         cd:bc:16:92:ad:29:01:b9:d4:05:71:93:d2:5c:b3:96:dc:c1:
         10:38:a5:92:98:fb:35:1c:e5:4d:af:ca:f3:0e:db:4f:22:ba:
         63:c2:e5:62:07:66:fc:84:7a:48:17:c2:79:c1:b3:3b:41:f1:
         75:39:05:c9:d7:3d:53:f4:80:07:28:60:1a:ed:15:55:14:59:
         8f:f3:09:87:6f:27:27:5f:31:43:8c:2e:72:ad:15:c2:15:52:
         00:2a:49:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----