Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D5329BE4BCA911F1B569F2DDCE1D38B0.roa
File:                     D5329BE4BCA911F1B569F2DDCE1D38B0.roa (raw, json)
Hash identifier:          W20uU6jFVxeC627IiWdSQtyWH/SDSysefSCuj/S7lN4=
Subject key identifier:   5E:76:38:A9:89:C7:EE:37:7A:84:FE:3A:5B:7B:27:39:8A:7F:77:B8
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EBAE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D5329BE4BCA911F1B569F2DDCE1D38B0.roa
Signing time:             Wed 30 Sep 2026 08:35:04 +0000
ROA not before:           Wed 30 Sep 2026 08:35:00 +0000
ROA not after:            Fri 06 Nov 2026 08:35:00 +0000
asID:                     202656
IP address blocks:        154.222.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125870 (0x1ebae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 30 08:35:00 2026 GMT
            Not After : Nov  6 08:35:00 2026 GMT
        Subject: CN=6abcc9b8-785a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:20:c6:db:68:c4:75:62:4a:12:61:5d:ee:0b:
                    32:db:3e:15:fd:e7:ed:0f:ab:ad:26:5d:d8:49:85:
                    b0:95:02:53:06:fb:1d:69:ad:66:b7:de:c3:39:29:
                    7f:c8:8a:69:34:1a:cb:54:d3:10:e4:bc:50:76:d2:
                    76:c1:db:04:80:11:09:fe:ae:4d:6c:fa:13:cb:ec:
                    bf:ea:f5:c8:e6:5a:fa:3b:6a:f6:7c:52:aa:0b:19:
                    bd:96:5b:34:e8:43:e2:f7:c7:91:56:85:42:61:c5:
                    62:47:29:07:56:aa:7b:6c:8f:f8:33:14:eb:a1:79:
                    80:aa:9b:9a:4d:9a:98:6a:cd:83:15:cd:f7:7b:90:
                    27:3a:09:f0:50:64:d5:cd:83:ba:10:90:d8:c5:f6:
                    18:78:5c:9e:56:18:de:46:ce:23:87:9e:cf:61:ed:
                    be:a3:50:3c:c2:45:29:54:e3:e1:04:07:d3:48:ff:
                    cc:54:fd:db:99:eb:3c:49:2c:76:9d:21:06:ee:b9:
                    89:51:86:9c:2d:49:3a:7d:26:5a:49:75:0b:b9:66:
                    07:3f:d1:22:43:64:62:b0:68:22:35:ce:5c:33:37:
                    a6:36:fa:fd:2f:cb:89:a8:01:61:96:34:f0:c8:e7:
                    d1:1b:c7:d4:4a:da:74:c2:58:b1:31:3f:3c:c5:fe:
                    07:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:76:38:A9:89:C7:EE:37:7A:84:FE:3A:5B:7B:27:39:8A:7F:77:B8
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D5329BE4BCA911F1B569F2DDCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.222.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:84:4b:45:5c:77:6c:b7:b0:24:da:72:f1:78:e4:c7:7f:1f:
         31:1f:64:95:ff:5c:0b:62:45:6b:fd:1d:7e:d1:ea:25:32:28:
         e8:87:ee:fc:93:0f:ff:f0:1d:d1:77:3e:dd:b9:f8:ad:7a:42:
         c1:0d:fe:0f:29:5b:3d:1b:c8:75:5c:15:c0:64:d9:ad:04:87:
         8d:5d:2a:21:7a:a7:cf:c3:46:2b:19:a0:4b:e9:b0:5f:39:af:
         af:8e:69:88:de:1e:55:e1:ce:8f:21:92:aa:81:45:65:0e:27:
         f5:10:30:85:db:06:e3:1d:76:8b:95:d4:2d:92:80:db:d5:18:
         02:43:02:62:33:27:d1:af:f3:26:bc:ac:55:94:93:a9:a8:21:
         f8:ea:1e:d7:69:d5:24:ae:a9:63:a0:d1:77:d0:a3:32:a0:40:
         e8:07:46:e7:d5:e4:87:44:19:80:9d:c5:67:1c:30:06:8f:37:
         35:12:fe:26:91:0c:94:d6:8f:3e:6b:e5:73:41:d2:79:62:49:
         9a:dd:eb:da:1c:29:1d:45:91:77:ff:c6:6a:d6:aa:e5:86:de:
         0b:53:48:e9:f3:04:14:eb:43:e2:b1:f8:a0:c2:92:be:ab:3d:
         39:b4:9e:b8:fa:76:23:7d:f9:80:dd:e2:68:fb:9c:99:78:cb:
         de:45:33:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----