Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AB590C1CC56F11F1B96B24B0CE1D38B0.roa
File:                     AB590C1CC56F11F1B96B24B0CE1D38B0.roa (raw, json)
Hash identifier:          0dyIxpPe/e/4y35Rgihbd0j3YSbLam9eY4dElY04g/E=
Subject key identifier:   8F:D8:64:4A:5A:14:59:74:0E:ED:D4:11:9F:EC:68:B0:A7:4B:94:79
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01ED8A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AB590C1CC56F11F1B96B24B0CE1D38B0.roa
Signing time:             Sun 11 Oct 2026 12:31:24 +0000
ROA not before:           Sun 11 Oct 2026 12:31:19 +0000
ROA not after:            Wed 18 Nov 2026 12:31:19 +0000
asID:                     22773
IP address blocks:        154.94.44.0/24 maxlen: 24
                          154.94.47.0/24 maxlen: 24
                          154.94.51.0/24 maxlen: 24
                          154.94.52.0/23 maxlen: 24
                          154.94.56.0/24 maxlen: 24
                          154.94.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 17 Oct 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126346 (0x1ed8a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct 11 12:31:19 2026 GMT
            Not After : Nov 18 12:31:19 2026 GMT
        Subject: CN=6acb819b-ed34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:96:1d:da:e4:af:68:ed:c0:55:3d:80:14:98:
                    a5:fb:7f:e3:4d:d4:71:09:34:a4:a7:48:e0:d0:72:
                    2c:f9:9d:6e:99:ae:1f:58:9f:8d:6a:a8:d5:2a:7c:
                    d6:a9:70:ab:c6:ff:76:1e:3e:b5:d1:ad:a3:3d:45:
                    a7:95:7e:0a:6d:d4:99:85:48:8c:cf:a0:ef:a4:21:
                    11:03:d9:0b:53:71:54:58:60:c9:a0:72:67:0e:3f:
                    14:f1:72:20:51:ff:c6:b6:b6:e3:21:c5:ed:5c:21:
                    9d:bc:6d:d2:e1:ea:f6:ad:89:5a:8a:2c:88:3b:52:
                    9e:c3:26:36:c1:69:1d:52:15:fe:e0:ca:ae:25:a1:
                    42:32:18:f9:ff:ba:c6:6c:58:5b:d5:fd:a5:1b:6c:
                    df:9d:ca:ad:4f:9a:26:63:9a:68:bb:6f:33:90:5b:
                    86:f3:c9:05:c7:be:81:0f:80:83:79:46:91:c5:ec:
                    1d:74:ca:a5:39:aa:1a:1a:d9:50:a6:56:21:e2:90:
                    21:03:a5:61:15:9f:8e:fb:73:43:d9:75:96:aa:5e:
                    a5:05:a5:4b:a7:1d:e6:e9:10:b0:2b:94:81:e6:e8:
                    96:62:56:e1:79:a1:44:ea:19:74:b2:93:98:4b:c4:
                    0c:78:5d:31:38:ca:95:aa:2e:20:82:a9:29:ca:bd:
                    e4:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:D8:64:4A:5A:14:59:74:0E:ED:D4:11:9F:EC:68:B0:A7:4B:94:79
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AB590C1CC56F11F1B96B24B0CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.94.44.0/24
                  154.94.47.0/24
                  154.94.51.0-154.94.53.255
                  154.94.56.0/24
                  154.94.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c2:f1:cc:f6:79:eb:a4:a4:56:41:c4:61:d0:f3:11:61:ea:01:
         26:85:35:97:f5:d3:94:00:ca:0d:83:b5:3c:08:85:dd:6f:e8:
         e1:b0:d6:8a:26:57:8e:98:94:4a:5d:33:2c:16:a5:02:f8:0e:
         e8:17:cf:ad:07:8c:9c:7f:72:10:53:bf:8e:c7:e7:c1:50:bd:
         a1:d2:39:17:fb:82:75:44:66:e8:33:2a:3c:ac:23:7f:ff:35:
         16:5a:84:d1:eb:d7:22:76:e0:2e:ae:f6:99:87:50:21:83:20:
         21:7a:44:7c:e0:98:aa:41:96:9b:df:93:c2:d7:86:26:07:7b:
         2a:4c:64:20:ee:52:0f:54:57:37:5c:8f:a8:bf:8b:8b:58:59:
         80:1e:22:9e:2e:32:f7:11:d0:d4:3e:50:38:b6:9c:61:3e:55:
         cf:68:2d:92:b2:22:c9:13:ef:47:b1:6c:47:43:9d:43:1e:3a:
         63:5a:20:69:3b:b2:dd:56:46:21:55:14:91:c8:1e:89:bf:03:
         27:6e:41:ab:4c:e7:0c:97:33:7f:3d:b5:61:c8:2f:e8:de:03:
         44:c5:fb:c4:ef:27:c0:c0:a0:3b:6a:c3:41:9d:7b:6d:b7:20:
         20:6d:2e:e8:bc:01:e3:5d:94:38:f3:90:58:5f:3e:04:9a:f0:
         c2:3b:ea:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----