Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C94358AEC14611F19E4CCDFACE1D38B0.roa
File:                     C94358AEC14611F19E4CCDFACE1D38B0.roa (raw, json)
Hash identifier:          DsOQhjzNczU6rn7n27yOLhDVbJDzhw3PvQW9aU1KHiE=
Subject key identifier:   88:26:54:47:31:D9:42:3F:4F:39:5A:0F:D1:07:D4:EB:AA:5A:43:4B
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EC4D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C94358AEC14611F19E4CCDFACE1D38B0.roa
Signing time:             Tue 06 Oct 2026 05:28:40 +0000
ROA not before:           Tue 06 Oct 2026 05:28:36 +0000
ROA not after:            Wed 14 Oct 2026 05:28:36 +0000
asID:                     132839
IP address blocks:        154.201.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126029 (0x1ec4d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct  6 05:28:36 2026 GMT
            Not After : Oct 14 05:28:36 2026 GMT
        Subject: CN=6ac48708-6655
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:5d:f7:de:56:9e:bc:80:78:62:5d:02:00:65:
                    59:18:0b:b7:84:57:b1:73:3b:af:33:24:ad:65:5d:
                    60:a0:69:e0:01:ab:77:fe:88:88:06:95:d7:9d:c5:
                    0f:d7:6d:41:6f:db:7c:79:0a:9b:77:49:c9:7f:a3:
                    a9:3f:af:b8:3d:50:bd:22:b4:21:a7:8d:d0:b7:7c:
                    f8:93:d0:2e:e8:a2:72:dd:7e:88:0a:33:32:41:fb:
                    56:be:94:d5:fc:2a:01:7b:5d:7f:f5:82:50:f4:c0:
                    eb:3f:c8:6a:9c:76:4b:41:ab:33:b0:a6:3a:c2:aa:
                    76:d6:75:90:21:b7:02:a3:b9:4a:0e:c7:8e:63:fd:
                    58:e0:32:81:e1:1a:bc:f2:98:c8:75:b9:07:c7:33:
                    23:5d:5a:9c:84:51:fa:55:89:35:fa:a0:8a:21:c4:
                    b3:7c:1f:dd:95:97:8c:83:b7:e8:a4:cd:7c:b5:37:
                    96:8b:38:0e:c2:23:16:44:a7:0f:3b:07:cf:94:95:
                    94:06:29:07:fa:bf:49:c7:84:a1:69:ad:6d:a3:a0:
                    a3:04:39:b9:44:e5:39:95:3a:cb:f4:52:c4:8e:fd:
                    1a:6d:c5:8c:97:18:e2:75:3f:78:6d:f7:52:9e:55:
                    ca:9b:b5:52:91:78:ef:37:1e:cd:08:83:18:f1:18:
                    81:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:26:54:47:31:D9:42:3F:4F:39:5A:0F:D1:07:D4:EB:AA:5A:43:4B
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C94358AEC14611F19E4CCDFACE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.201.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         38:10:ca:2f:bb:8a:f1:1f:6d:e1:2b:f8:a0:1b:b6:a0:9b:fc:
         2a:b1:67:28:fb:d1:4f:35:82:e7:7d:7d:14:f0:7a:e0:21:22:
         1f:29:27:07:db:e3:3b:b8:23:96:9c:7b:e3:dd:72:b4:04:71:
         53:70:59:78:12:62:c6:d3:bf:a2:62:9b:ee:67:42:a8:c7:7d:
         54:ec:b1:7f:e8:bb:57:15:7b:8d:88:14:e9:83:e5:df:98:cd:
         e4:9a:0a:63:b7:26:6f:13:9c:f3:72:82:86:84:ef:4d:ac:72:
         45:54:c0:d8:64:01:22:cf:10:89:81:6e:a6:9d:23:e3:15:ef:
         86:76:94:21:1a:c0:b3:a2:8f:bf:0d:a6:2c:2e:f3:6d:41:cd:
         5e:cc:9f:04:6c:6c:11:bc:b0:e2:95:7c:60:52:cc:06:2c:12:
         7b:0f:64:14:f8:bf:66:18:73:1c:14:cb:b1:4d:72:f2:36:1f:
         a6:5a:21:f2:d9:99:6f:13:41:9b:6e:fd:4b:32:80:2e:f6:88:
         c6:83:4c:f2:bc:04:ed:da:e4:6d:c2:21:89:b1:8e:c4:a9:4c:
         dc:20:0a:82:cb:42:d7:5b:5f:16:77:59:c0:21:b8:31:25:3a:
         9e:fb:ec:53:49:f3:ff:08:70:9e:6e:aa:09:79:f2:b7:32:c5:
         18:ec:72:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----