Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D1389B7EC79E11F18554A2F4CE1D38B0.roa
File:                     D1389B7EC79E11F18554A2F4CE1D38B0.roa (raw, json)
Hash identifier:          EV7jhqfhiDWf+UU+5eVb4H9dYiVFiZa6+tQ68NMIMMY=
Subject key identifier:   B2:30:22:91:FF:82:16:A5:D3:B0:53:6A:6C:AA:0D:63:CF:3C:0C:E5
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EDED
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D1389B7EC79E11F18554A2F4CE1D38B0.roa
Signing time:             Wed 14 Oct 2026 07:13:56 +0000
ROA not before:           Wed 14 Oct 2026 07:13:51 +0000
ROA not after:            Sat 21 Nov 2026 07:13:51 +0000
asID:                     2914
IP address blocks:        154.197.12.0/22 maxlen: 24
                          154.216.132.0/24 maxlen: 24
                          154.216.133.0/24 maxlen: 24
                          154.216.134.0/24 maxlen: 24
                          154.216.135.0/24 maxlen: 24
                          154.216.136.0/24 maxlen: 24
                          154.216.137.0/24 maxlen: 24
                          154.222.74.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 17 Oct 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126445 (0x1eded)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct 14 07:13:51 2026 GMT
            Not After : Nov 21 07:13:51 2026 GMT
        Subject: CN=6acf2bb4-89d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:0f:79:95:0b:fe:70:5b:7e:0b:d9:6d:d0:0c:
                    00:30:80:0a:35:0f:db:ff:f9:a6:59:68:8d:51:dc:
                    88:f5:01:6d:43:5c:66:27:27:0e:46:59:e0:97:07:
                    0d:72:63:6f:ee:c5:d1:47:04:0c:37:92:6a:28:08:
                    17:b5:ff:d0:15:1a:0d:ad:12:c6:59:37:f4:12:a0:
                    ea:ca:41:b8:cc:6c:fc:26:c3:cb:43:33:fc:68:20:
                    5d:67:cd:d8:b0:2c:64:fb:db:09:73:b2:ad:f9:cc:
                    39:94:d8:b4:8f:64:70:e9:35:13:fd:44:38:52:85:
                    c1:a5:fd:e4:cd:e8:bf:cc:27:b3:2b:01:43:3e:37:
                    8a:83:c1:27:8e:90:4e:1f:1c:cb:09:e6:f0:69:b4:
                    c7:9e:98:b6:6a:ce:a8:e6:25:70:c7:a2:74:9f:41:
                    11:17:c3:98:9f:3f:a6:fd:64:dd:92:e9:bf:44:99:
                    d2:f3:97:e0:3c:80:5a:78:e3:51:4b:a3:81:b2:1d:
                    09:72:89:fc:9c:d0:72:3a:d8:9f:c9:3e:fd:49:b5:
                    12:c6:06:b7:68:0d:34:a5:0f:2a:cc:1f:a7:d5:6c:
                    07:95:48:d8:18:fd:43:58:87:2e:ce:30:b6:a7:75:
                    5a:c6:fa:56:27:4b:90:ce:ac:d9:ce:77:22:be:26:
                    71:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:30:22:91:FF:82:16:A5:D3:B0:53:6A:6C:AA:0D:63:CF:3C:0C:E5
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D1389B7EC79E11F18554A2F4CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.197.12.0/22
                  154.216.132.0-154.216.137.255
                  154.222.74.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a0:90:1d:14:08:6f:b7:15:90:83:42:b0:ef:72:26:67:a5:ea:
         b6:cc:7a:80:f9:cf:7a:32:ab:5a:49:7f:4a:a6:3a:ae:0b:ec:
         b1:59:fc:eb:8a:00:6f:10:9f:56:91:44:48:42:49:a6:40:4e:
         19:93:a3:24:6b:b5:1e:bd:bf:73:5a:69:16:dd:ce:98:3c:e8:
         32:73:36:a5:c7:54:cf:81:ef:da:76:53:d7:65:1a:22:b0:50:
         2f:78:a1:a2:d8:35:1e:d3:79:57:30:1a:74:7a:58:83:5a:78:
         14:42:ba:a2:cc:be:61:c6:e5:c1:67:15:87:d5:25:f4:94:9e:
         14:89:6b:ff:57:fa:ce:f7:4f:b0:31:ed:74:b1:31:86:1a:d0:
         91:97:6e:b9:20:5c:ee:a8:49:f7:74:8a:84:7f:ff:ba:c4:08:
         3e:db:85:6b:9b:f4:c7:7e:64:1b:dc:d1:cf:bd:f2:1d:b8:1b:
         a0:c9:8e:cd:39:2a:ac:b5:50:62:28:2b:ed:1c:c3:6b:2b:18:
         5e:90:5e:1f:b0:2b:c9:47:93:cf:8e:64:46:7d:25:d3:15:66:
         a9:d1:44:ee:ec:90:6c:48:e8:c1:ec:96:d7:bc:31:15:8a:19:
         c8:32:7d:d1:72:a7:21:41:86:10:87:bc:01:15:92:22:a0:1b:
         8f:3a:34:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----