Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AE450D8CC22B11F182C51FD0CE1D38B0.roa
File:                     AE450D8CC22B11F182C51FD0CE1D38B0.roa (raw, json)
Hash identifier:          miclqs50yYoo22bgvjb0BEI1x9DOqU+x09JyLz5cO9w=
Subject key identifier:   76:5A:EA:33:EE:5A:DD:DE:25:3A:61:FE:CE:FB:1E:EC:1F:D0:5D:EE
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01ECC0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AE450D8CC22B11F182C51FD0CE1D38B0.roa
Signing time:             Wed 07 Oct 2026 08:47:09 +0000
ROA not before:           Wed 07 Oct 2026 08:47:04 +0000
ROA not after:            Sat 17 Oct 2026 08:47:04 +0000
asID:                     8796
IP address blocks:        154.86.16.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126144 (0x1ecc0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct  7 08:47:04 2026 GMT
            Not After : Oct 17 08:47:04 2026 GMT
        Subject: CN=6ac6070d-c821
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a0:b4:7a:d6:58:03:47:8e:77:78:bb:d1:30:
                    c0:66:e1:e0:ea:54:a2:30:fd:83:4c:7d:82:99:4d:
                    a0:7b:60:10:3b:81:4d:0f:71:17:62:d0:e6:8a:d3:
                    e1:29:7d:e2:ec:d2:db:56:59:12:c0:6f:22:1f:f7:
                    0e:78:c0:b3:a9:fb:1b:a1:72:02:83:f9:2b:1c:ad:
                    a4:a5:d8:6a:d9:55:b2:55:df:b9:34:3c:61:fb:eb:
                    81:e0:e0:f5:0e:28:8c:fe:74:cd:74:4c:a3:70:80:
                    c3:29:a7:96:a2:4d:5b:74:38:1a:fa:67:26:9f:f6:
                    46:34:69:8c:70:b0:a2:cf:0b:d7:74:dc:9e:6f:e5:
                    d3:14:48:ca:e7:90:c1:af:81:9f:f7:d5:11:50:f7:
                    e9:af:79:45:9d:87:e8:e3:3c:65:b0:7e:de:ca:12:
                    15:33:88:9b:f2:95:2e:31:dc:26:9e:d3:6a:08:fb:
                    21:10:2f:2f:b4:cd:76:29:7b:78:5a:a3:b7:98:e8:
                    e1:0f:f4:43:7b:7c:35:01:f6:05:80:54:e8:9a:8d:
                    f3:86:56:74:3f:37:90:ce:ca:b7:a8:a9:2e:ef:6d:
                    80:51:b3:02:a9:97:af:c5:5a:84:cc:bb:e4:9f:b4:
                    c6:d4:ca:96:6e:92:f1:e4:88:01:2f:32:5f:11:2f:
                    6f:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:5A:EA:33:EE:5A:DD:DE:25:3A:61:FE:CE:FB:1E:EC:1F:D0:5D:EE
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AE450D8CC22B11F182C51FD0CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.86.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         bc:c2:b2:91:03:5b:5e:54:b6:21:a9:97:67:39:36:c4:45:77:
         41:b6:d4:f8:88:c1:8e:d3:58:10:66:a9:f0:be:22:88:bd:b2:
         e2:58:c6:01:46:b9:41:a1:9d:04:47:6a:b4:dc:2c:55:45:8a:
         92:6f:97:b6:f9:b1:f0:42:78:09:39:a2:d4:eb:91:52:6e:43:
         11:63:4c:9c:10:15:bb:b3:94:dd:13:cf:27:a4:63:b4:53:a9:
         0a:02:2a:2f:c3:38:54:4e:25:3f:9c:dd:00:f7:15:9b:8a:8e:
         b6:f9:df:64:53:23:d1:3c:f3:9e:aa:70:a4:fa:20:0f:91:78:
         4e:cd:ba:61:77:8b:b8:ec:97:e9:8d:d1:11:38:02:54:88:78:
         23:e8:6f:72:a8:a9:ab:63:87:44:ad:3a:e2:3d:1a:24:16:bb:
         b9:d3:0b:0b:7e:5a:e9:42:4f:bb:ef:e1:29:50:53:49:6e:19:
         55:9b:a0:75:97:40:cf:38:fa:21:aa:e4:97:af:e4:86:c8:93:
         5e:7f:d8:88:ed:0a:56:00:7f:c1:e9:21:4a:bd:70:3c:15:cf:
         8a:93:93:44:31:16:7f:c6:22:6b:a9:b2:1d:ab:24:71:f4:84:
         40:21:13:ac:e8:4f:7d:21:bf:52:fb:e0:a9:24:78:f5:7a:5c:
         1f:8f:85:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----