Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FBE1EBDAC2FA11F19876ECACCE1D38B0.roa
File:                     FBE1EBDAC2FA11F19876ECACCE1D38B0.roa (raw, json)
Hash identifier:          f0POu5/g0bpYhyHO6RWZUrGSDMTxZullWOuInDRjOU4=
Subject key identifier:   D3:DF:D4:F5:FD:50:A5:52:7E:53:3A:B1:52:DA:A1:BE:DD:87:EF:8A
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01ECD7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FBE1EBDAC2FA11F19876ECACCE1D38B0.roa
Signing time:             Thu 08 Oct 2026 09:31:05 +0000
ROA not before:           Thu 08 Oct 2026 09:31:01 +0000
ROA not after:            Sat 14 Nov 2026 09:31:01 +0000
asID:                     17561
IP address blocks:        154.200.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126167 (0x1ecd7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct  8 09:31:01 2026 GMT
            Not After : Nov 14 09:31:01 2026 GMT
        Subject: CN=6ac762d9-1e91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:05:00:81:6f:5f:5f:ef:34:1a:8a:58:3c:86:
                    dc:90:55:c5:58:fa:2e:1f:4d:76:db:1c:0f:f0:9f:
                    14:cc:e6:a3:3d:e5:71:5c:0d:7c:86:a4:c1:b1:7e:
                    7f:c0:ea:86:4d:60:96:d1:42:08:6e:37:1d:55:8e:
                    36:3e:22:73:dd:af:d2:d9:ec:96:56:0f:65:7e:55:
                    77:8f:9f:b2:2c:5b:d8:bc:4b:79:51:b9:1e:84:ef:
                    74:2c:9c:d3:08:d5:49:cf:39:83:0a:11:ee:f2:40:
                    05:33:d2:93:c9:36:46:f4:4e:b2:ee:42:31:76:c4:
                    e1:54:9b:08:b9:ef:9d:61:35:37:aa:29:00:e6:f3:
                    b2:90:18:98:c4:58:49:57:7b:ae:28:06:7d:56:2f:
                    ac:aa:b7:7c:22:02:4e:86:4b:92:6a:61:8e:53:4e:
                    36:26:e4:ef:2c:1d:45:41:fa:d9:72:aa:1e:70:3a:
                    fb:61:d3:f2:ba:ef:5c:7e:9d:8a:08:5d:f1:cf:c5:
                    ab:c6:eb:b8:90:2d:0c:35:3b:d1:40:7a:e3:f6:42:
                    b2:fb:87:10:57:2e:74:84:cf:f4:ec:c3:b1:4f:31:
                    8d:6d:05:ad:93:ce:dc:0e:24:71:48:49:7a:1f:b7:
                    25:b3:5b:ae:f8:0f:b7:7a:eb:6b:4e:2f:d3:97:b7:
                    7e:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:DF:D4:F5:FD:50:A5:52:7E:53:3A:B1:52:DA:A1:BE:DD:87:EF:8A
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FBE1EBDAC2FA11F19876ECACCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.200.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:99:4f:67:b7:a6:88:d4:ba:fd:fb:58:46:59:b4:58:1e:85:
         c7:7e:f6:a7:69:e9:86:07:ea:93:5e:9f:25:86:2d:9b:64:14:
         74:31:e1:9e:ae:3c:25:22:3d:12:6c:f9:65:30:a7:f3:d5:21:
         9e:64:df:e5:f0:9e:f6:dc:f6:3f:0d:21:21:c8:29:2f:67:00:
         d4:bb:74:11:81:1f:66:c3:56:f2:e0:4c:69:13:85:67:66:ca:
         74:e0:96:ac:d2:83:45:88:3b:c8:10:fc:78:07:c4:ae:9d:77:
         ec:21:d5:f5:1b:c5:23:3a:f8:62:43:66:3f:cc:3c:df:d8:87:
         ad:16:db:55:63:36:05:83:b2:20:4e:14:7a:78:e6:46:07:4a:
         49:8a:97:bf:86:5b:9d:4d:0b:f8:1c:aa:c4:0f:e5:cf:24:40:
         42:74:ab:51:10:12:3c:8e:bf:fb:9b:c3:83:c3:60:88:40:0a:
         d8:24:f6:e0:9c:65:5d:02:05:05:ee:61:6a:18:1b:3f:6c:75:
         1f:87:3d:dd:11:3d:ed:60:34:30:b3:6c:b6:32:25:9b:93:3e:
         55:de:c9:8c:78:3a:8e:57:31:e0:9e:a2:09:e9:bd:a6:de:c1:
         3c:8e:ae:66:7e:3c:9a:15:7f:8c:00:79:95:45:0d:3d:4b:1b:
         55:b9:dd:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----