Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/197DE7A8CA0211F1A5179C06CF1D38B0.roa
File:                     197DE7A8CA0211F1A5179C06CF1D38B0.roa (raw, json)
Hash identifier:          y09l1r2E6J3QlwRTYCIedDIEOxgxv9iTRNIqkDsEhZQ=
Subject key identifier:   DE:A8:E4:27:11:23:FA:14:B5:50:88:96:E0:4C:5A:C0:CF:F0:F4:B5
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EE9B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/197DE7A8CA0211F1A5179C06CF1D38B0.roa
Signing time:             Sat 17 Oct 2026 08:09:39 +0000
ROA not before:           Sat 17 Oct 2026 08:09:34 +0000
ROA not after:            Tue 24 Nov 2026 08:09:34 +0000
asID:                     400619
IP address blocks:        154.89.144.0/20 maxlen: 24
                          154.89.160.0/19 maxlen: 24
                          154.89.192.0/20 maxlen: 24
                          154.95.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 23 Oct 2026 08:55:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126619 (0x1ee9b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct 17 08:09:34 2026 GMT
            Not After : Nov 24 08:09:34 2026 GMT
        Subject: CN=6ad32d43-b9b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:db:b1:97:07:91:49:58:0f:52:b1:95:2c:9b:
                    28:df:fe:64:35:00:64:4c:25:34:47:53:57:a0:0e:
                    3f:e5:17:d3:63:ad:82:9b:21:49:5b:c2:f7:d3:2a:
                    39:c0:31:9c:a7:ef:ff:07:b3:53:f5:25:0e:c6:c5:
                    60:fa:08:a1:53:0b:30:38:54:84:2b:6c:f2:2d:cd:
                    5f:fa:1e:c4:34:e4:b0:66:86:ca:2e:1a:3a:98:7a:
                    3a:00:27:f9:19:81:eb:37:eb:45:03:de:ef:4a:79:
                    09:28:dd:59:cb:86:c9:85:ee:cd:8a:f1:b7:a6:6c:
                    28:8c:5a:cc:38:15:de:96:83:99:a3:65:d2:cc:55:
                    c7:cf:4b:e4:50:9a:0e:f1:34:0b:fe:79:62:b2:4e:
                    15:15:be:af:4f:ad:13:a7:78:93:6e:28:dc:eb:93:
                    15:63:9e:56:66:d6:a2:de:c4:19:5b:74:58:5d:5a:
                    e9:a6:cd:27:a6:c1:1f:2f:88:eb:2b:70:62:8a:cd:
                    5c:3d:82:2f:19:6e:43:19:79:48:f8:57:7e:91:09:
                    71:9f:97:4e:ae:25:a2:f4:45:73:69:fc:55:96:9f:
                    41:41:78:87:d7:7d:b4:4a:d2:27:cf:42:79:e6:d7:
                    04:a7:1a:a1:95:d7:d9:8c:cf:5e:d8:91:8f:4c:50:
                    a5:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:A8:E4:27:11:23:FA:14:B5:50:88:96:E0:4C:5A:C0:CF:F0:F4:B5
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/197DE7A8CA0211F1A5179C06CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.89.144.0-154.89.207.255
                  154.95.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:5a:17:f9:08:c5:bb:10:81:76:a5:ae:fe:8f:7b:53:77:9f:
         54:ca:68:0d:3b:97:c7:f6:fd:a6:b6:70:9c:95:1e:ba:f3:56:
         91:57:13:94:56:ea:f8:f0:d7:19:48:ec:04:bb:15:70:9b:ef:
         8e:c6:79:a7:77:d2:a5:96:20:1e:13:59:dc:5f:a4:e7:22:89:
         40:6d:f3:db:f6:73:4b:44:08:08:e3:a4:37:c5:91:65:12:8f:
         c5:d8:81:a3:14:80:a0:4e:e4:ea:f3:58:78:31:29:a2:e0:b7:
         aa:50:33:f3:02:a4:de:a3:e2:83:c2:d9:2b:2a:eb:41:49:14:
         ef:bb:51:fb:f8:66:81:48:ef:1f:85:74:90:8c:1c:ed:8d:65:
         2b:92:00:be:a1:68:5e:6c:02:d0:9c:5b:16:b1:3e:6a:31:42:
         a4:5c:93:5f:40:ce:51:47:42:9c:4e:10:26:98:a8:e3:da:f4:
         fc:30:08:99:61:f8:c8:3b:8f:6c:cf:6d:c3:37:eb:66:f5:21:
         35:23:78:ef:65:1c:75:61:c5:9f:4c:6d:d3:e5:4b:27:a0:bb:
         4a:c3:3e:9d:f3:fc:5f:c4:c0:cb:35:b0:37:fb:3b:f9:67:ee:
         93:22:19:8d:8f:26:8f:e4:32:06:f3:f0:9b:1d:0d:9f:75:9c:
         32:c7:67:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----