Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A71DE120C18411F1A4386308CF1D38B0.roa
File:                     A71DE120C18411F1A4386308CF1D38B0.roa (raw, json)
Hash identifier:          /+BUuZynD2celxlmtmu/9ZnkQM0ZKSSXQtBRGsuOE3o=
Subject key identifier:   AA:09:BD:AC:EF:6F:09:99:54:53:F5:5B:5B:A8:19:5B:C5:F0:44:87
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EC8B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A71DE120C18411F1A4386308CF1D38B0.roa
Signing time:             Tue 06 Oct 2026 12:51:31 +0000
ROA not before:           Tue 06 Oct 2026 12:51:27 +0000
ROA not after:            Wed 21 Oct 2026 12:51:27 +0000
asID:                     150750
IP address blocks:        154.208.32.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126091 (0x1ec8b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct  6 12:51:27 2026 GMT
            Not After : Oct 21 12:51:27 2026 GMT
        Subject: CN=6ac4eed3-bb99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:3b:41:c0:50:ca:82:c5:bb:83:7d:2c:ff:38:
                    9e:10:71:d0:2d:d2:2a:e8:10:67:8a:6d:e8:2b:b4:
                    31:a9:da:e9:05:e6:1e:72:4f:9c:6c:9e:91:ea:43:
                    4e:a0:80:b4:9a:39:bd:12:c9:3e:f4:88:ac:22:38:
                    46:2c:76:d8:6b:5a:05:a6:0a:b5:5b:11:f2:4e:77:
                    8d:5a:bc:8b:a2:36:2c:23:0e:21:c6:1f:da:59:aa:
                    52:ae:1a:2d:b0:6f:49:8e:61:48:38:de:3c:cd:79:
                    a8:cc:c6:91:47:b9:f4:ad:64:22:59:74:a2:e6:6d:
                    9c:99:34:11:32:94:af:8e:03:6c:b3:07:16:21:9c:
                    8c:1e:7d:37:03:dc:d3:9e:36:1d:e8:cf:5b:86:0e:
                    bc:08:96:e1:c1:a2:cf:09:8f:31:b3:e8:d6:37:4d:
                    03:25:a7:70:db:ec:52:67:c4:2f:0d:03:33:6d:3c:
                    4e:05:b4:29:94:55:f2:21:b2:eb:cd:df:98:a6:0b:
                    17:95:2d:33:63:33:74:64:a2:87:8c:b0:27:0f:6b:
                    4a:b4:9b:b0:38:cc:b7:c3:8e:18:53:83:39:21:53:
                    d3:08:57:9c:28:80:7a:b7:27:c8:49:03:1c:89:98:
                    07:ef:75:29:04:e3:65:38:07:1e:3f:d3:75:67:98:
                    5d:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:09:BD:AC:EF:6F:09:99:54:53:F5:5B:5B:A8:19:5B:C5:F0:44:87
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A71DE120C18411F1A4386308CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.208.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         1e:0f:d4:4a:1f:19:9b:ba:7d:62:9a:3b:3d:9d:e8:1d:46:07:
         bf:39:e9:de:4a:9f:51:05:a3:c2:10:a4:e6:c0:cb:c4:a2:22:
         b9:83:37:f7:15:1c:63:b0:06:7d:46:5c:6c:1e:65:71:f9:03:
         72:26:f0:19:22:7c:b2:b8:33:e3:63:f3:6d:23:96:45:0c:ec:
         59:bc:b0:cf:1e:61:25:4c:76:0b:fa:80:b8:59:94:26:ff:c7:
         a2:ef:95:ee:45:d2:3a:22:23:ad:cb:3a:fe:71:ed:f1:b3:6b:
         b3:a7:51:53:aa:c5:3d:38:1c:50:f0:88:e8:d9:98:be:cb:0b:
         15:72:3f:ed:c1:64:1b:36:2c:2e:a3:ea:82:b4:28:fe:c6:d8:
         b0:69:7c:2a:2a:10:1f:28:58:ce:5f:6e:17:ab:e4:53:63:70:
         bc:28:1d:cc:8f:8d:3f:d4:c7:4d:6b:e3:2c:08:5a:bf:bd:0d:
         68:5c:95:e3:c7:e3:50:8a:15:ee:aa:0e:ed:22:40:4c:91:d4:
         b2:e0:c0:77:11:77:43:0b:14:9f:03:31:ff:68:69:04:49:93:
         1f:b1:35:65:32:0b:f8:b5:25:2b:85:d4:78:fe:ba:78:cb:9f:
         6b:de:6a:61:c9:98:26:34:89:f9:4e:d7:cb:7c:da:74:40:1c:
         ce:39:a9:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----