Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D634D6ECBA4211F1934D62B4CE1D38B0.roa
File:                     D634D6ECBA4211F1934D62B4CE1D38B0.roa (raw, json)
Hash identifier:          hlIvvpSqQQJBoGk6++RmNcjsCQsQToAvCzI6Ev4PDlA=
Subject key identifier:   E0:C0:50:5A:78:B7:9C:C5:1E:9C:82:81:2B:84:E5:E1:4E:90:07:61
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EAFE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D634D6ECBA4211F1934D62B4CE1D38B0.roa
Signing time:             Sun 27 Sep 2026 07:12:45 +0000
ROA not before:           Sun 27 Sep 2026 07:12:41 +0000
ROA not after:            Sat 31 Oct 2026 07:12:41 +0000
asID:                     274930
IP address blocks:        154.95.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125694 (0x1eafe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 27 07:12:41 2026 GMT
            Not After : Oct 31 07:12:41 2026 GMT
        Subject: CN=6ab8c1ed-59e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ec:7b:0c:f2:84:19:ec:58:15:20:48:5d:85:
                    8f:84:c7:bb:88:84:76:76:30:2f:d8:fb:33:6a:37:
                    54:f6:44:9f:e7:7e:97:85:7b:95:f7:62:1f:ce:9b:
                    7c:fc:12:13:87:63:6d:33:20:d6:c2:fd:47:88:11:
                    05:a1:17:f4:63:42:8b:1c:5d:3e:b5:5a:bd:a1:11:
                    bb:f8:ad:ac:9a:36:2c:9b:76:e1:14:83:ce:1f:f9:
                    fa:1c:2e:5d:f1:0a:2f:58:b4:d3:26:04:39:c2:4d:
                    60:fd:cd:e6:ce:ec:a4:86:36:59:0e:64:74:10:4b:
                    36:47:19:a2:0f:01:66:20:24:e4:bd:52:ab:23:bb:
                    ea:91:72:7e:18:40:6b:aa:63:69:a3:30:ab:e5:2d:
                    66:0d:8d:6f:94:75:b3:82:0e:b6:35:22:57:c6:22:
                    03:68:e6:af:41:81:33:2d:5e:42:cf:23:52:22:5f:
                    77:93:8c:68:36:93:d7:a3:00:b5:b4:fa:38:ac:ae:
                    20:60:9c:62:8a:3a:d9:7a:84:7a:cd:63:27:ad:3d:
                    f9:4c:b2:86:e9:1a:96:49:f3:47:f4:e7:d9:e2:f3:
                    71:ad:f5:c8:46:81:fd:ce:cf:a1:59:8d:ba:61:72:
                    43:5a:8c:1d:a5:3d:ea:e7:15:5d:34:16:2d:10:62:
                    9f:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:C0:50:5A:78:B7:9C:C5:1E:9C:82:81:2B:84:E5:E1:4E:90:07:61
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D634D6ECBA4211F1934D62B4CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.95.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:86:07:4a:d2:5e:8e:2b:0f:d1:f8:a9:00:4c:e9:bf:c1:fd:
         dc:84:a9:ac:34:6c:0e:ad:b2:f7:38:83:4e:ca:4f:b1:9a:6f:
         e2:ab:d8:a9:8a:32:c4:5b:0f:3a:d2:b4:77:6c:f6:82:6a:14:
         3e:53:7d:8c:eb:90:34:5c:9a:13:a3:df:e1:74:23:03:a4:29:
         6c:56:6f:b5:c9:f7:b2:71:4c:bc:9d:de:a5:fd:dc:8e:e3:fd:
         72:31:e8:4a:de:0b:9c:2b:e6:3c:b1:e9:7f:84:af:fb:71:ed:
         37:34:37:f4:de:e6:4d:6e:10:16:33:74:94:96:b4:49:7d:88:
         c4:4c:2b:b5:5f:17:88:c5:5d:44:be:98:8c:dc:0e:a8:94:5c:
         0b:5f:ac:da:a4:54:5e:63:26:92:04:ad:21:a5:a9:73:da:0c:
         a6:a0:f8:65:72:a0:8a:bc:6b:cc:af:9a:b6:fa:da:de:77:1a:
         67:70:8d:45:09:6f:a2:d3:4c:aa:54:bd:dd:55:cb:98:99:47:
         17:cf:cb:80:c5:6d:ad:68:81:97:20:0e:44:5b:66:97:fd:74:
         15:0b:ca:82:38:cb:81:96:59:b2:01:c2:1e:83:05:a4:37:60:
         be:2f:66:e2:6f:ea:7e:25:92:2c:1e:f9:25:5f:ed:e3:99:6e:
         1e:35:d8:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----