Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ADB27234C70C11F1AC6376B3CE1D38B0.roa
File:                     ADB27234C70C11F1AC6376B3CE1D38B0.roa (raw, json)
Hash identifier:          GCXK+11vWSVqbYHhdulgFt2L1/mfA6YNe91yrwc4bog=
Subject key identifier:   51:E8:61:DC:00:8F:24:1C:96:DA:37:B1:2E:CC:A3:99:31:C3:82:72
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EDD6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ADB27234C70C11F1AC6376B3CE1D38B0.roa
Signing time:             Tue 13 Oct 2026 13:47:49 +0000
ROA not before:           Tue 13 Oct 2026 13:46:17 +0000
ROA not after:            Wed 04 Nov 2026 13:46:17 +0000
asID:                     150750
IP address blocks:        154.208.32.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 17 Oct 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126422 (0x1edd6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct 13 13:46:17 2026 GMT
            Not After : Nov  4 13:46:17 2026 GMT
        Subject: CN=6ace3685-1108
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d1:bf:2c:fa:ed:88:7e:8d:17:7d:a9:ba:6e:
                    bb:9c:3a:c3:4c:70:bb:04:7e:70:2a:e5:a4:9a:5e:
                    4f:15:32:47:8f:f1:7d:23:5e:5e:5a:3c:6c:ee:02:
                    1a:a8:01:44:bf:aa:0e:df:ce:4c:64:b4:d7:97:39:
                    f0:21:94:82:3d:a7:19:bd:49:81:a3:bd:9f:85:56:
                    fe:a4:38:12:2b:39:8c:9d:77:ff:f9:0d:62:2c:f8:
                    27:89:fa:7c:e5:d5:4f:ad:da:88:31:9d:da:af:dc:
                    8c:1c:e3:23:69:cf:ce:f2:1f:72:30:d8:bc:00:f5:
                    15:8f:33:a9:43:bb:fd:42:a0:5f:bd:76:27:13:1f:
                    32:5c:98:24:fb:7f:b9:17:8e:4b:96:b1:18:05:8f:
                    fa:1f:bb:ad:d4:71:63:e1:77:8c:68:5e:3a:fd:6e:
                    1a:fa:18:f1:db:7d:b4:c8:3e:74:27:73:50:08:4e:
                    c9:b7:dc:7e:d6:34:57:29:c3:a7:f4:51:ab:fb:4e:
                    db:49:cd:0c:70:34:f3:9d:c4:b0:04:ba:fe:08:52:
                    69:77:af:79:b0:84:44:15:8d:47:28:26:bf:79:b6:
                    a1:d2:ba:34:52:e1:79:5e:39:56:fb:5f:5f:8a:9a:
                    85:ca:49:ea:8f:f3:da:60:3f:92:93:0d:dd:bd:64:
                    26:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:E8:61:DC:00:8F:24:1C:96:DA:37:B1:2E:CC:A3:99:31:C3:82:72
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ADB27234C70C11F1AC6376B3CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.208.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         22:51:38:3a:0e:c2:0a:93:6b:86:ac:ab:b0:cd:29:d9:0a:2b:
         59:8f:9f:11:42:21:a3:a6:06:5a:8b:0c:c9:2c:3c:c8:55:1e:
         9b:a4:8a:2e:d0:b3:51:ce:5d:26:45:59:c9:18:f3:5e:33:b8:
         aa:2a:11:2f:12:4d:42:41:f9:38:ab:a4:5d:bc:f5:fd:61:a9:
         eb:7e:ff:c8:e6:d9:47:69:46:c0:d8:14:24:69:bc:9b:ca:b9:
         71:ec:99:d9:a4:56:e0:5b:0f:96:3b:af:38:ad:7e:49:63:05:
         b0:a4:8f:24:dc:36:ea:9f:9a:1d:a4:b1:0f:11:ac:28:03:53:
         17:1e:ea:a1:00:be:0e:89:39:48:b9:ae:1e:69:9d:f9:92:76:
         c9:6c:ca:95:9b:ba:27:f6:09:13:56:41:6f:60:c0:57:43:cf:
         98:84:bc:2c:6a:81:c0:da:32:db:d2:c3:fc:df:86:8a:a1:50:
         76:4a:57:88:31:c6:67:fb:c7:a1:f5:a3:27:04:30:22:b6:29:
         c9:5c:3e:4e:c5:5f:68:72:b2:5d:83:09:dd:94:b4:c7:a6:b9:
         cf:46:0b:4f:4e:7e:a3:e3:6c:f4:5f:fa:b4:65:da:10:d8:7d:
         b2:db:0d:a2:c0:d7:a5:91:89:6e:fb:ac:44:9f:d1:86:4d:84:
         b4:5a:83:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----