Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ECE58AC6C57D11F1A582C108CF1D38B0.roa
File:                     ECE58AC6C57D11F1A582C108CF1D38B0.roa (raw, json)
Hash identifier:          zqM37HPiugZVeDKRXOYDnjlLx0P/QJHET9/R/vnCWxQ=
Subject key identifier:   C4:85:82:ED:FB:BF:8E:A3:18:8D:8C:84:32:34:55:FD:4F:C1:02:73
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01ED96
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ECE58AC6C57D11F1A582C108CF1D38B0.roa
Signing time:             Sun 11 Oct 2026 14:13:26 +0000
ROA not before:           Sun 11 Oct 2026 14:13:21 +0000
ROA not after:            Tue 20 Oct 2026 14:13:21 +0000
asID:                     153671
IP address blocks:        154.81.152.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 17 Oct 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126358 (0x1ed96)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct 11 14:13:21 2026 GMT
            Not After : Oct 20 14:13:21 2026 GMT
        Subject: CN=6acb9986-ad3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:5f:6e:8f:57:4f:45:de:9e:b0:8d:73:2b:f4:
                    9f:6d:68:05:cd:4a:c9:9e:b3:2e:12:73:3c:0f:fd:
                    22:b6:7d:44:e1:a3:ae:b9:29:58:27:08:0c:1a:98:
                    1f:b8:ed:cd:45:a4:4f:00:01:d3:f0:14:60:2c:8d:
                    c4:dd:ff:4b:5d:a3:5a:73:67:d4:1c:37:ea:84:b3:
                    c3:e8:ec:ef:6a:be:37:6f:f3:c9:d8:72:a2:c9:24:
                    40:fa:47:3f:37:e5:92:b0:22:62:9e:f7:47:14:e2:
                    58:28:5a:a1:88:54:0c:59:29:48:3c:4f:7f:fb:4c:
                    e3:4d:9c:33:3e:92:f6:a4:40:9b:f8:dd:09:12:30:
                    d0:04:f1:2f:01:5c:5d:51:c3:99:30:2a:25:a7:67:
                    b0:bd:2c:a1:bc:63:2d:96:6a:3f:b4:86:07:e8:ec:
                    88:e5:e5:8c:4c:ba:70:04:86:68:8f:2b:2d:3f:55:
                    49:82:ad:46:ad:32:34:85:2f:9e:00:fc:bd:9d:88:
                    5d:5c:7c:bf:c5:9e:28:d7:fa:9f:f9:ca:83:ff:50:
                    7c:7d:50:e1:08:dc:25:3d:5e:3a:b3:bb:52:60:de:
                    b9:12:35:a7:4b:34:6f:3c:04:af:75:15:6d:7e:4c:
                    4f:29:e3:f8:29:8c:cb:40:ae:38:b8:c1:95:5e:46:
                    80:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:85:82:ED:FB:BF:8E:A3:18:8D:8C:84:32:34:55:FD:4F:C1:02:73
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ECE58AC6C57D11F1A582C108CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.81.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b7:f9:05:d2:a2:bc:d7:08:e5:f9:ab:2b:77:70:23:d1:de:bc:
         27:2d:fa:68:22:b5:fb:43:dc:76:a1:1a:a7:2e:cd:70:8d:0c:
         86:b3:a3:c5:62:dd:5a:c4:d1:6b:a4:66:21:da:25:aa:31:b1:
         7d:6e:f2:98:21:cd:58:cf:1a:e0:f1:0c:ea:33:0e:bc:8d:99:
         be:65:a9:29:bf:20:71:e0:42:43:b1:a7:89:e1:d9:ae:3c:15:
         4e:09:76:cf:82:72:c3:7d:22:63:5b:26:05:10:87:5a:42:51:
         58:81:8b:0e:1f:b0:0c:f4:c9:83:a5:c6:7d:00:06:f8:63:1f:
         2d:de:6d:84:f6:c4:b3:b2:2f:08:7b:20:81:cc:87:33:1f:a3:
         2e:4b:4f:5c:4b:9c:ba:98:6c:cf:3b:cd:b9:13:b7:08:37:95:
         5a:7e:01:a9:3f:4d:d7:5a:23:7f:98:ae:a1:59:ec:d1:12:f4:
         8c:3c:ad:ee:72:9c:9b:21:d7:fb:01:6b:08:7f:12:80:79:27:
         72:50:ce:e9:be:52:ed:98:a1:c4:4c:c7:83:74:17:5f:a1:dd:
         b1:2d:d3:19:30:aa:46:36:7d:4c:e1:95:e6:12:3c:59:5f:2d:
         f3:16:b9:eb:e0:c9:f0:b6:7b:be:a3:61:50:ea:18:ee:cb:cc:
         22:5c:a7:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----