Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1AA69844CB0D11F1B04764CBCE1D38B0.roa
File:                     1AA69844CB0D11F1B04764CBCE1D38B0.roa (raw, json)
Hash identifier:          Odqopx9ox0MwxoXifTm/rSdKBoIWxK432EnmLGA6tfc=
Subject key identifier:   21:F6:16:4F:E6:EA:5F:47:93:22:73:49:D2:6C:93:20:68:B4:D2:01
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EEBC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1AA69844CB0D11F1B04764CBCE1D38B0.roa
Signing time:             Sun 18 Oct 2026 16:00:57 +0000
ROA not before:           Sun 18 Oct 2026 16:00:51 +0000
ROA not after:            Wed 25 Nov 2026 16:00:51 +0000
asID:                     134494
IP address blocks:        154.83.30.0/24 maxlen: 24
                          154.83.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 00:08:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126652 (0x1eebc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct 18 16:00:51 2026 GMT
            Not After : Nov 25 16:00:51 2026 GMT
        Subject: CN=6ad4ed39-31a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:18:b1:d2:19:5f:c2:ea:52:a0:b9:58:8a:40:
                    7b:70:42:87:7d:c5:2c:7e:2c:0e:48:d1:f3:c1:91:
                    24:fc:23:ff:28:28:ce:04:b5:3d:df:6f:da:48:aa:
                    32:30:1d:90:c5:0b:92:f3:5c:3f:33:97:03:66:88:
                    3c:df:c5:ea:2e:96:8d:c9:11:9e:a3:9b:1f:f8:c3:
                    58:4b:98:12:33:eb:cf:ab:d8:5d:5e:7e:31:f1:59:
                    0e:fa:6e:6e:82:35:2c:35:5b:5d:0a:a6:f6:50:ef:
                    44:a8:a2:a6:93:f2:64:d7:63:ef:28:12:ea:57:5a:
                    2b:4e:15:86:17:7e:64:db:a4:6c:1f:eb:05:d9:6e:
                    ee:9f:5f:f3:d8:00:67:d6:1c:2a:c7:1a:49:1c:08:
                    07:fd:38:cd:e4:a8:ea:b3:57:a8:54:9d:27:05:04:
                    51:c1:3e:59:3f:c0:01:68:20:80:1e:5c:f7:cb:87:
                    e3:e8:2b:b6:bc:47:e1:3c:dd:17:96:84:e8:88:94:
                    85:65:79:51:99:cd:ac:b7:54:70:bd:54:9e:68:75:
                    48:86:9f:29:48:70:35:87:ea:39:1b:44:a8:24:91:
                    38:ee:07:f8:b2:e3:ee:3f:1f:ed:88:35:27:e8:57:
                    85:21:36:fb:0b:de:95:3c:a0:86:7b:a6:fe:35:62:
                    94:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:F6:16:4F:E6:EA:5F:47:93:22:73:49:D2:6C:93:20:68:B4:D2:01
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1AA69844CB0D11F1B04764CBCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.83.30.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a4:0e:1c:d7:09:46:40:43:d8:3d:b7:1c:d2:96:0b:2b:ed:91:
         60:93:72:1f:9a:e6:e8:82:7d:23:ab:93:3e:bf:6b:5b:1b:65:
         51:72:e1:a1:9b:87:a0:ea:b5:5c:af:60:2f:c7:47:59:a1:d5:
         e4:24:ab:05:c4:f0:a4:b2:36:8e:29:d9:0f:28:f5:aa:b1:99:
         84:7b:8f:e9:6e:0e:cb:74:8f:c3:d6:ce:49:18:95:da:ea:c0:
         bb:0a:ad:15:73:92:83:27:eb:4f:ae:d5:39:6b:99:63:78:2a:
         be:fe:4e:4f:c9:f7:ec:5c:b8:85:6a:29:df:23:02:28:82:5e:
         e0:9d:77:09:2c:c7:77:48:2d:3e:7c:97:6d:a2:52:f8:1d:73:
         50:57:e1:11:43:62:a9:b6:52:9f:1e:d2:27:da:86:4d:79:e1:
         4c:b8:90:10:65:99:21:d2:1e:ed:e9:ac:6a:91:93:14:23:dc:
         1d:b1:4c:4c:e2:42:39:a4:87:ae:0a:b0:82:ff:31:73:d5:2b:
         e6:1a:5b:48:f7:4a:dc:32:f9:25:8c:02:8d:63:7e:f1:fe:b6:
         dd:8f:76:10:37:3b:3b:b1:9c:5e:1f:83:50:47:38:9d:a4:50:
         b6:1c:f0:e6:50:56:b2:15:3e:b9:96:4d:56:c4:ad:4c:39:1f:
         9e:ad:63:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----