Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E89D1F8EC47311F1888B96CBCE1D38B0.roa
File:                     E89D1F8EC47311F1888B96CBCE1D38B0.roa (raw, json)
Hash identifier:          7jFpsFVl9+se9sNwxvqT8JNY3szlB7OEUANhD/OtcFI=
Subject key identifier:   E7:FB:69:20:EF:BB:1A:82:6C:95:92:AD:29:F8:9B:24:19:AE:88:35
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01ED1B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E89D1F8EC47311F1888B96CBCE1D38B0.roa
Signing time:             Sat 10 Oct 2026 06:29:13 +0000
ROA not before:           Sat 10 Oct 2026 06:29:08 +0000
ROA not after:            Fri 13 Nov 2026 06:29:08 +0000
asID:                     9304
IP address blocks:        154.203.0.0/23 maxlen: 24
                          154.203.204.0/23 maxlen: 24
                          154.203.244.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126235 (0x1ed1b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct 10 06:29:08 2026 GMT
            Not After : Nov 13 06:29:08 2026 GMT
        Subject: CN=6ac9db39-2b94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:4b:92:35:02:de:09:82:18:13:6e:b1:3b:9d:
                    7b:81:d3:54:8c:eb:6e:01:45:ea:5e:a8:85:31:d6:
                    d6:62:65:23:30:35:5f:ce:48:d0:07:db:f7:af:c8:
                    e3:dc:8d:cc:43:b1:b1:f2:c5:b4:39:a8:2e:72:22:
                    86:b7:64:d5:88:61:84:b1:f0:84:cf:1a:91:74:84:
                    fe:5f:00:fc:3e:4a:0b:b6:ea:1d:01:d3:3e:4c:67:
                    8c:1d:57:ea:fe:fd:6e:6a:b8:85:41:90:2f:0e:21:
                    4d:58:69:02:e2:9c:4e:96:4b:59:d1:32:00:e9:f7:
                    0b:ca:75:50:1d:fa:49:67:08:b7:ce:1d:f8:05:73:
                    b4:e0:6a:08:07:28:55:dd:a0:07:88:d1:a6:2b:13:
                    16:e2:ba:e4:bc:d2:4a:b3:51:da:59:96:92:36:c1:
                    71:c3:1c:2b:10:76:e0:92:84:4d:09:81:99:38:7b:
                    51:7f:9c:b4:58:76:56:f1:ed:54:bb:ee:b0:3f:2a:
                    a2:b0:a5:fd:1c:8f:38:1f:3f:b0:1e:8b:7e:6c:56:
                    e9:d7:b2:1a:89:4f:54:ed:af:9c:09:e3:eb:51:b3:
                    b6:ca:80:2e:c5:11:6c:56:a3:34:69:41:a0:c9:63:
                    cb:06:60:60:3b:5c:8c:28:2e:b8:c9:a2:67:4d:4b:
                    f6:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:FB:69:20:EF:BB:1A:82:6C:95:92:AD:29:F8:9B:24:19:AE:88:35
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E89D1F8EC47311F1888B96CBCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.203.0.0/23
                  154.203.204.0/23
                  154.203.244.0/23

    Signature Algorithm: sha256WithRSAEncryption
         59:5b:df:e7:1e:85:c4:04:ea:16:81:6e:eb:df:6d:2e:cb:78:
         cd:22:a2:28:2c:b8:ac:7d:66:1c:96:c1:6b:1c:a3:92:51:13:
         3f:1a:6e:78:9c:7a:f0:70:b1:ff:39:86:2e:f0:da:bb:82:66:
         dc:ee:7e:da:3d:3a:13:35:75:63:cb:67:88:89:c1:67:b6:9c:
         3e:0b:d5:cf:dc:d4:68:42:81:b2:1e:25:d3:b3:27:e0:a1:d2:
         46:23:6a:1e:ad:e1:e0:b6:d8:d7:9f:87:f2:16:eb:10:bf:92:
         b8:68:2a:25:1f:d5:e7:2e:93:dc:ee:c9:9d:68:83:cd:b9:f3:
         3b:dd:05:0a:c9:8f:36:67:1c:fd:28:b9:a9:bd:ed:d8:b7:d5:
         ea:53:db:e2:4c:9b:97:8d:c2:4d:8f:ad:8d:73:27:e5:86:4c:
         53:a6:c0:96:5e:28:d8:62:e0:c9:c4:fb:be:71:ef:34:c9:00:
         2c:18:b4:22:8a:09:33:73:9e:65:6f:87:34:81:43:5c:7c:1b:
         58:2d:85:13:87:73:0f:56:a3:ce:f9:6f:d7:80:ca:33:b4:b3:
         1e:d9:45:21:0f:7b:a8:05:a7:c5:69:28:78:55:8f:31:c5:9c:
         a5:47:06:6c:75:6e:98:5a:f7:d5:d9:cb:4a:67:53:7a:63:13:
         29:a9:af:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----