Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D6933836B99D11F1BDE853FACE1D38B0.roa
File:                     D6933836B99D11F1BDE853FACE1D38B0.roa (raw, json)
Hash identifier:          kDB1iwJ3yokBI14N1YHdj3dRAa1C1voefU6iWfFpswg=
Subject key identifier:   77:B4:6F:2E:D5:A8:34:43:89:E4:B1:A4:0C:D1:1A:89:38:DE:D1:56
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EADD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D6933836B99D11F1BDE853FACE1D38B0.roa
Signing time:             Sat 26 Sep 2026 11:31:39 +0000
ROA not before:           Sat 26 Sep 2026 11:31:35 +0000
ROA not after:            Mon 02 Nov 2026 11:31:35 +0000
asID:                     11427
IP address blocks:        154.194.232.0/22 maxlen: 24
                          154.194.244.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125661 (0x1eadd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 26 11:31:35 2026 GMT
            Not After : Nov  2 11:31:35 2026 GMT
        Subject: CN=6ab7ad1b-651a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:5c:b9:c5:35:ea:05:94:52:0e:0f:32:20:dd:
                    e0:d0:b5:03:43:d3:24:91:6e:c6:fa:2b:8f:3c:8b:
                    4b:61:59:d2:e7:b7:85:42:87:52:bc:7b:c0:b5:00:
                    eb:ff:0d:50:86:52:3a:53:d0:9e:ea:a9:ad:97:e0:
                    8d:52:34:1b:39:f2:6a:ed:26:02:d7:21:bf:ef:90:
                    71:f0:45:21:07:d6:d8:72:e2:d2:fc:8f:98:f9:4d:
                    74:98:46:bf:61:67:ca:5a:86:67:2d:4b:5e:68:cb:
                    9e:fc:03:2c:52:9d:04:00:22:78:5f:c8:e5:65:aa:
                    64:75:6a:7b:ff:e6:f8:e3:a1:3c:d0:c5:5e:40:c9:
                    84:2e:3c:16:4b:1d:97:8f:eb:02:e9:1f:7a:7f:92:
                    96:c2:25:2d:e7:ec:db:6e:fd:fa:da:3a:8f:74:db:
                    38:e3:d4:4e:bf:0b:2b:03:3c:4b:c3:4a:43:f7:23:
                    db:4c:66:c8:1d:a5:12:db:37:f9:02:59:61:e5:71:
                    63:cd:0a:61:3b:f1:d9:4d:04:3e:a7:70:d6:30:cd:
                    0a:bb:94:b8:96:1d:f7:2e:25:1b:0c:8a:91:14:0c:
                    61:5b:72:45:c4:b1:f0:fa:c7:5e:ff:33:79:ef:a4:
                    44:38:fb:e3:f7:78:e7:c4:b5:05:7b:3b:78:2d:00:
                    10:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:B4:6F:2E:D5:A8:34:43:89:E4:B1:A4:0C:D1:1A:89:38:DE:D1:56
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D6933836B99D11F1BDE853FACE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.194.232.0/22
                  154.194.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d0:e4:16:8b:d7:45:dc:56:df:5e:98:c4:ad:fa:d6:bf:39:cd:
         9e:f5:31:a4:3c:05:1a:57:68:e3:59:ed:84:7c:0c:d0:84:0d:
         df:16:5a:1e:2b:b8:a0:14:b9:ec:55:ce:d3:5e:33:51:42:2e:
         ca:81:1f:34:4e:bb:ef:2e:39:01:65:96:6a:eb:90:0c:59:31:
         5d:2c:38:37:48:0f:6c:87:0a:7f:09:53:b8:d5:5d:63:e1:16:
         0d:49:24:1f:ad:90:34:3e:f9:f0:af:44:37:85:d7:a1:a5:b9:
         a2:bc:21:56:ca:64:c3:80:66:2d:60:60:c0:59:9d:1c:49:ff:
         66:e1:8d:fb:a2:8c:d4:7d:82:70:b6:d2:0c:76:37:ee:f9:46:
         c2:3a:94:4d:22:75:70:68:6f:f5:b2:9b:6b:6b:7a:82:4e:d6:
         42:dc:5d:26:3e:34:77:ce:9e:f4:56:9a:ed:c4:48:17:c2:76:
         6e:94:57:28:b7:23:e1:14:ee:55:fa:8e:e2:62:60:d8:8d:04:
         7d:4d:5a:4f:9a:8a:46:96:fd:09:af:b2:37:41:38:2a:12:49:
         61:d5:03:60:b8:b8:1a:dc:73:cc:97:84:13:56:e7:23:bf:e5:
         f4:1c:0b:51:ba:67:07:33:90:0e:b6:fb:f2:dd:5d:ba:9a:fd:
         ea:bd:e0:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----