Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AC561258BE3111F1B3342BDDCE1D38B0.roa
File:                     AC561258BE3111F1B3342BDDCE1D38B0.roa (raw, json)
Hash identifier:          lJSlqGR3pNG6I2mOHWBqiIiGduFECjob+xhhSFFEKfk=
Subject key identifier:   CA:28:5E:E3:B8:CC:18:86:27:E5:AD:55:B1:5C:0C:59:F1:6F:2D:29
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EBCB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AC561258BE3111F1B3342BDDCE1D38B0.roa
Signing time:             Fri 02 Oct 2026 07:19:58 +0000
ROA not before:           Fri 02 Oct 2026 07:19:54 +0000
ROA not after:            Mon 09 Nov 2026 07:19:54 +0000
asID:                     135377
IP address blocks:        154.82.22.0/24 maxlen: 24
                          154.82.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125899 (0x1ebcb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct  2 07:19:54 2026 GMT
            Not After : Nov  9 07:19:54 2026 GMT
        Subject: CN=6abf5b1e-2b5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:01:91:48:9c:b2:3f:47:59:f2:1c:77:f6:7d:
                    67:92:8c:17:29:39:83:9e:de:1c:91:a8:9e:06:87:
                    5a:76:45:63:04:82:23:bb:73:2a:ca:b9:75:cd:78:
                    4a:75:f9:ff:6d:93:a3:7f:7a:91:84:74:50:88:1e:
                    1f:e5:b4:65:96:b2:cf:57:ca:9c:c7:21:fe:05:96:
                    0e:e1:5f:ae:29:e7:4c:60:ed:d7:82:ca:c6:27:6c:
                    fe:aa:77:89:46:33:c2:5e:85:06:6c:3b:10:cc:27:
                    53:0c:cd:e2:32:aa:df:7f:59:d5:d9:cf:ac:4e:9d:
                    3d:8c:14:b3:e4:b9:55:55:45:37:6f:28:ad:ac:9a:
                    6b:53:10:53:9a:a3:16:ea:d4:2a:8b:5d:d8:16:a9:
                    a5:5b:51:9f:0a:da:b9:ff:08:02:9e:4a:98:dc:75:
                    30:86:a2:31:dc:59:3b:cf:7d:fd:c6:5c:12:11:be:
                    16:16:63:44:48:97:85:c2:14:17:1c:6d:35:dd:12:
                    b0:3e:14:d9:f3:e0:d7:ef:33:d8:71:3d:a1:4b:d3:
                    f1:de:84:a3:2f:11:ef:7f:e2:d2:f6:c0:bc:4f:20:
                    e7:25:92:73:2a:fb:85:7e:36:85:d5:9d:c1:c1:10:
                    cf:bc:ff:d1:a0:b1:8c:51:5e:0d:c6:be:f2:92:54:
                    80:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:28:5E:E3:B8:CC:18:86:27:E5:AD:55:B1:5C:0C:59:F1:6F:2D:29
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AC561258BE3111F1B3342BDDCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.82.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         77:85:07:8e:f5:87:26:bb:7f:0a:36:33:82:00:d5:6a:ed:7b:
         8a:5b:0c:d7:b6:21:7e:44:76:b4:79:b0:cc:43:83:43:ab:47:
         6c:75:b9:f8:11:49:7c:b0:16:02:c0:df:42:0a:b9:5f:1e:1a:
         d3:20:59:07:c7:46:e3:75:f6:0f:64:61:ef:09:92:57:39:6d:
         ac:00:f1:28:9a:21:fb:70:12:bb:f5:6f:cd:38:fa:ed:c3:07:
         42:75:c8:42:8d:5b:b9:df:28:c6:9e:00:34:bb:ba:77:cf:8a:
         82:60:73:84:13:3e:81:05:9c:ff:aa:1a:44:5c:22:46:ee:c3:
         af:ab:27:e4:4f:76:d1:1a:3e:a5:c8:77:61:6b:d6:1b:4f:2d:
         b3:da:72:c7:f8:b0:85:1a:4e:43:08:ce:80:38:12:a0:da:7f:
         5a:b9:7f:ae:cf:ff:2e:a0:53:c1:42:e8:e5:15:70:03:56:3b:
         64:90:0c:f1:59:16:6e:51:6a:49:bb:8b:53:58:d0:ff:28:b3:
         61:4e:3c:c9:52:84:4f:ed:7e:e7:dd:e7:d0:8f:a8:59:93:b8:
         9d:12:4d:1d:e3:a9:97:1b:3e:fa:e7:16:f5:81:6b:34:b0:cc:
         1c:fa:6b:32:82:04:92:03:99:14:a2:39:10:05:d9:f2:e4:9f:
         05:f9:eb:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----