Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D1234FA0C21F11F1A55B3403CF1D38B0.roa
File:                     D1234FA0C21F11F1A55B3403CF1D38B0.roa (raw, json)
Hash identifier:          rwibLeNVhz6GgKO5ugEFJpl9S3s6CkzN7yP76IFoEHo=
Subject key identifier:   51:47:EA:FB:BE:6A:2E:68:CE:E9:54:1A:6B:E2:BF:BA:CF:03:ED:22
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01ECA6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D1234FA0C21F11F1A55B3403CF1D38B0.roa
Signing time:             Wed 07 Oct 2026 07:22:14 +0000
ROA not before:           Wed 07 Oct 2026 07:22:10 +0000
ROA not after:            Sat 14 Nov 2026 07:22:10 +0000
asID:                     401650
IP address blocks:        154.90.64.0/24 maxlen: 24
                          154.90.68.0/24 maxlen: 24
                          154.90.76.0/24 maxlen: 24
                          154.90.77.0/24 maxlen: 24
                          154.90.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126118 (0x1eca6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct  7 07:22:10 2026 GMT
            Not After : Nov 14 07:22:10 2026 GMT
        Subject: CN=6ac5f326-c909
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:bb:24:60:b0:3c:f0:86:3c:9c:f7:61:5f:2a:
                    f3:44:ca:97:67:c6:8f:d1:1d:f3:ba:35:79:cb:f6:
                    63:47:56:1b:a8:ca:0f:c7:a4:13:05:a8:22:f4:78:
                    49:07:a0:6e:61:f6:84:4d:4d:8e:5d:71:5f:57:75:
                    1d:4e:b3:59:90:f4:3b:81:45:6e:c5:e2:6d:aa:c7:
                    84:36:80:c5:88:5f:96:d1:6b:b6:ec:39:1f:e4:bc:
                    c9:3b:14:d2:c7:48:e9:88:1c:ba:15:07:49:c0:aa:
                    f4:f3:32:3d:b3:b8:0a:98:ad:37:37:65:83:2c:6e:
                    f3:ca:63:b7:11:26:2c:35:01:dc:d3:f8:65:d7:35:
                    07:27:b1:83:25:00:12:cb:cf:3e:36:b8:56:5c:f8:
                    eb:6b:b7:1e:f4:7c:ef:8c:b1:ec:bf:c0:1d:bd:1a:
                    d8:ef:0c:4a:be:98:bb:78:0e:d3:4e:cb:0b:49:26:
                    56:b6:2d:a1:da:c9:df:d5:e2:b3:59:f7:cb:30:27:
                    2c:42:d3:e7:0f:11:8c:91:95:b3:87:04:fb:f6:6c:
                    9e:34:9f:34:9a:59:ef:07:b9:df:83:46:46:b1:1c:
                    b3:b8:3d:6f:1b:9f:7e:4f:d4:0f:9d:6c:7e:99:49:
                    73:6a:9a:32:56:a0:38:bf:30:11:df:a7:05:21:af:
                    9b:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:47:EA:FB:BE:6A:2E:68:CE:E9:54:1A:6B:E2:BF:BA:CF:03:ED:22
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D1234FA0C21F11F1A55B3403CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.90.64.0/24
                  154.90.68.0/24
                  154.90.76.0-154.90.78.255

    Signature Algorithm: sha256WithRSAEncryption
         52:dc:98:7a:16:68:12:65:0a:de:1e:ae:d9:b3:97:13:3d:cf:
         57:39:38:03:76:cb:8b:54:aa:c2:f8:cc:ff:2f:98:48:f1:b8:
         ce:fb:61:d6:e0:62:07:55:9b:07:35:3c:c3:91:bb:22:23:81:
         bb:8b:4c:ca:b7:c0:66:0d:3b:3d:ae:70:73:61:36:db:cc:7e:
         5e:5a:ee:59:00:d6:40:c9:3f:49:0c:57:d0:54:33:78:80:ef:
         81:93:fe:aa:35:85:5b:50:20:17:ef:d6:a4:d4:2a:5d:9e:a3:
         29:07:05:ca:bc:2a:4e:03:79:32:73:0a:14:08:2c:fd:90:39:
         54:b7:a8:7b:90:97:60:8a:89:ab:b8:98:be:2d:a3:e8:fa:e1:
         05:3e:ab:95:e6:2d:4d:42:01:17:0a:88:86:b5:a7:c4:63:44:
         47:38:63:ce:82:40:b9:94:ed:43:af:c6:d0:e3:af:82:e9:63:
         47:93:8b:99:d4:3a:23:ac:db:c5:23:96:f6:7a:c7:83:c7:a7:
         81:24:29:4b:cd:da:90:9d:9f:71:d7:95:64:0b:14:1d:2d:5d:
         96:7c:4d:16:a7:80:3d:98:6c:5f:46:f1:6f:33:7b:26:0f:22:
         17:73:f3:13:de:43:74:f1:86:e7:e4:e1:67:e7:66:2c:9b:8e:
         06:d4:a6:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----