Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CD1AC360C48711F1AD9B2FCCCE1D38B0.roa
File:                     CD1AC360C48711F1AD9B2FCCCE1D38B0.roa (raw, json)
Hash identifier:          bRnLA2T5zD0+LFQmTiW8CdtKye/SCLXpFvNysa4dLjE=
Subject key identifier:   71:AE:77:AF:FC:1B:79:20:3B:45:FF:F7:C1:7C:24:36:A4:62:C9:9A
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01ED37
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CD1AC360C48711F1AD9B2FCCCE1D38B0.roa
Signing time:             Sat 10 Oct 2026 08:51:37 +0000
ROA not before:           Sat 10 Oct 2026 08:51:32 +0000
ROA not after:            Mon 16 Nov 2026 08:51:32 +0000
asID:                     151419
IP address blocks:        154.88.66.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126263 (0x1ed37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct 10 08:51:32 2026 GMT
            Not After : Nov 16 08:51:32 2026 GMT
        Subject: CN=6ac9fc99-4f49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a1:bd:64:db:0c:20:d7:03:95:a6:16:9e:e9:
                    2a:7a:e8:7d:a1:36:c7:69:14:34:a4:4b:7c:bf:67:
                    1c:00:fc:16:42:72:b0:98:9b:ba:e8:7b:3f:25:4e:
                    a4:93:b5:a3:53:d5:c5:c4:da:97:e9:52:0a:54:7e:
                    b6:1d:03:9b:db:4f:da:bf:75:7d:3b:a9:a1:a4:8e:
                    de:ce:0f:4d:8a:ba:cd:49:d7:ed:a1:bb:c5:2d:2c:
                    c9:e3:d4:04:fd:3f:a2:6c:e6:1a:e9:e3:03:10:67:
                    5c:cc:49:c5:90:96:18:6e:d9:e0:63:35:d8:e3:3b:
                    f9:f6:d0:6a:bb:20:5c:3c:cb:1c:c4:79:5a:ab:fd:
                    b2:cc:22:27:d1:14:11:3c:63:7c:c4:8f:12:da:ff:
                    f9:3a:d3:64:00:e8:a8:a7:f8:f6:40:4d:25:71:2d:
                    7f:22:58:3c:73:e3:83:48:2b:f2:cc:6f:69:d8:6f:
                    9a:57:ac:25:80:66:41:04:a7:81:b7:2b:66:92:1f:
                    0a:f5:77:64:8d:18:27:17:8c:b5:a8:61:0a:48:42:
                    f4:66:fc:8e:c7:22:1f:9a:e2:a4:30:db:48:72:86:
                    59:8b:25:7d:f4:33:8d:be:8f:ad:6f:fd:d7:a0:4f:
                    98:56:53:dc:20:8c:5b:c3:db:b3:7e:19:a7:35:20:
                    fd:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:AE:77:AF:FC:1B:79:20:3B:45:FF:F7:C1:7C:24:36:A4:62:C9:9A
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CD1AC360C48711F1AD9B2FCCCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.88.66.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3a:ff:0f:87:ca:a4:af:ed:01:5c:fc:7d:59:d0:84:79:e1:ee:
         d0:2b:67:d7:88:10:3a:5d:2e:09:03:41:61:83:7f:a3:39:d8:
         18:71:58:7f:9a:98:e7:33:27:6f:b2:81:b2:4c:49:55:80:95:
         9b:e6:00:b4:45:89:06:5b:6b:ca:c1:bb:01:9b:f9:87:97:35:
         b9:64:bc:ca:58:ff:e8:5f:33:a2:72:48:72:17:31:2f:f7:1d:
         4c:74:6d:3e:dd:b4:10:e8:5f:65:87:d1:01:3b:ec:c3:26:ab:
         a7:1e:ad:c6:70:ac:4b:0e:61:c0:54:63:39:1e:83:e1:46:ed:
         0e:65:16:f0:eb:68:2c:93:a6:6d:d8:22:25:11:b7:5b:a2:18:
         88:8d:44:26:fa:67:bf:02:51:5e:59:f9:d6:5f:ba:13:8d:7d:
         82:81:58:dd:45:cd:a6:62:ab:27:fe:86:d2:d7:8b:11:98:74:
         07:06:25:93:42:d2:51:5a:95:e1:8a:30:3b:47:43:65:be:bc:
         8a:13:91:d4:91:bc:91:8b:e0:9c:c0:bb:db:ca:a3:7b:71:7b:
         51:85:5b:6d:ec:94:f9:1f:10:38:2a:e2:a9:a2:48:0e:b3:3e:
         3b:2f:2f:a7:39:21:43:f6:d2:6c:0e:cf:d3:4e:5f:4f:6a:79:
         c0:be:1e:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----