Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AC8C997EC19011F1B30240D7CE1D38B0.roa
File:                     AC8C997EC19011F1B30240D7CE1D38B0.roa (raw, json)
Hash identifier:          l0wXSdq9Lthp6GpZAz0EauR1MiIrPPie9H4wp25arFs=
Subject key identifier:   2A:D6:3F:3E:06:89:EB:94:55:BC:88:5F:C1:54:97:A4:87:2A:80:9A
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EC8F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AC8C997EC19011F1B30240D7CE1D38B0.roa
Signing time:             Tue 06 Oct 2026 14:17:34 +0000
ROA not before:           Tue 06 Oct 2026 14:17:30 +0000
ROA not after:            Wed 25 Aug 2027 14:17:30 +0000
asID:                     13335
IP address blocks:        154.218.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126095 (0x1ec8f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct  6 14:17:30 2026 GMT
            Not After : Aug 25 14:17:30 2027 GMT
        Subject: CN=6ac502fe-177e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:8d:80:c7:6c:fc:2f:96:cb:e1:ae:f0:11:7d:
                    01:29:d9:11:58:1f:1f:33:16:fe:72:5c:e4:5f:00:
                    92:3d:b2:71:49:04:ed:72:b3:6f:aa:71:7c:fd:89:
                    0a:36:59:0f:99:53:11:53:76:c9:e3:72:72:15:81:
                    00:cd:df:a3:b7:bc:5e:2b:62:37:a8:77:87:d1:8c:
                    76:c1:7c:10:3e:10:63:90:a7:03:35:f6:ef:96:09:
                    67:ea:d3:0b:b2:80:40:4a:1e:33:07:8a:13:8e:91:
                    ad:e9:64:b9:5d:93:e8:68:7e:ff:be:58:76:68:20:
                    63:d9:c8:95:12:22:d6:c6:71:f5:37:58:9f:d8:71:
                    70:57:f6:6e:a1:43:a2:73:81:d3:30:e8:88:12:8a:
                    55:84:42:66:65:ec:f9:43:ea:56:b2:62:a3:35:e9:
                    e8:7f:84:70:6c:c7:82:ac:54:77:bf:09:ef:c7:f0:
                    bc:f0:49:5d:63:8a:52:f9:a8:82:7c:d1:80:aa:e9:
                    0c:5b:3a:66:54:cd:17:2a:18:c7:2c:0e:f5:c3:c7:
                    21:59:a1:da:05:e4:f8:02:bd:e6:e6:dc:40:25:63:
                    ca:4e:d4:da:e1:d7:b9:95:6d:25:7c:1b:af:57:4f:
                    94:ab:e1:c2:3f:7e:8a:74:ba:95:28:a7:e5:14:19:
                    86:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:D6:3F:3E:06:89:EB:94:55:BC:88:5F:C1:54:97:A4:87:2A:80:9A
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AC8C997EC19011F1B30240D7CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.218.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:d8:d2:ae:d3:39:11:23:3e:59:6f:a3:04:10:d7:e1:68:7e:
         e3:f3:4e:de:82:0e:e1:9f:f1:e7:d3:83:81:0b:f5:35:b7:f7:
         50:73:60:71:14:c7:f0:f4:a6:ca:3d:89:35:3d:fc:14:14:15:
         02:82:41:b7:3f:75:29:c9:1f:96:ac:3b:67:8e:9b:08:c7:b7:
         5a:b8:f2:23:9f:58:de:f2:f6:87:9d:f2:e8:44:1d:f6:70:75:
         cd:17:8a:6c:8b:42:65:14:60:75:16:4b:da:45:ae:53:1b:9a:
         1a:80:3b:9e:b3:13:09:2e:e2:ec:74:40:4e:85:8a:96:76:67:
         d9:e7:44:5f:fd:fe:6d:6c:5f:4f:f8:f7:f6:22:38:3f:44:cd:
         85:18:32:96:74:f1:9a:6c:89:d0:6e:82:b2:90:e1:57:47:1c:
         73:de:ff:ec:e4:73:1a:87:44:4d:a7:e7:fe:3a:e4:28:ad:37:
         f9:1f:5f:5e:e6:9f:9d:d8:80:56:63:e5:c0:aa:18:2f:82:df:
         e2:f7:d8:6b:af:aa:c5:8c:cc:1c:b1:69:82:65:a8:d2:bc:47:
         12:c8:c6:b5:bf:d2:95:25:17:18:09:1a:33:7a:63:24:4f:b7:
         dc:c0:6a:a3:db:80:d1:fa:66:bb:fe:7e:74:15:5a:aa:33:24:
         b4:2e:6e:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----