Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1CF59F22CA0511F1A555CB1BCF1D38B0.roa
File:                     1CF59F22CA0511F1A555CB1BCF1D38B0.roa (raw, json)
Hash identifier:          /KE/sL/z+fRwIVzwPD0Bmgm/OU4Ods8E4deIbkijLCQ=
Subject key identifier:   3E:4D:55:0A:D3:2C:E2:93:C1:DA:00:9B:25:3B:1D:BB:AF:3E:31:CD
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EE9F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1CF59F22CA0511F1A555CB1BCF1D38B0.roa
Signing time:             Sat 17 Oct 2026 08:31:14 +0000
ROA not before:           Sat 17 Oct 2026 08:31:09 +0000
ROA not after:            Tue 24 Nov 2026 08:31:09 +0000
asID:                     55020
IP address blocks:        154.89.144.0/20 maxlen: 24
                          154.89.160.0/19 maxlen: 24
                          154.89.192.0/20 maxlen: 24
                          154.95.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 21 Oct 2026 00:08:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126623 (0x1ee9f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct 17 08:31:09 2026 GMT
            Not After : Nov 24 08:31:09 2026 GMT
        Subject: CN=6ad33252-b85a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:74:53:07:a9:e3:ed:d0:9c:00:a9:06:9b:23:
                    4a:b1:cc:48:a1:fe:f5:59:ab:a6:7d:48:34:f2:ab:
                    36:96:2a:91:06:4f:2a:4d:78:13:34:d2:b3:76:25:
                    a5:84:f3:23:50:f0:c2:b2:dd:5e:7c:40:7b:b2:8f:
                    41:8e:93:8f:8c:5c:44:36:ab:e3:1a:ae:37:80:dc:
                    6f:71:c6:c0:27:6d:e9:b4:60:a8:0b:9b:e3:41:c9:
                    5c:88:e1:16:fc:58:23:1c:ef:2a:db:1f:51:00:ef:
                    95:51:20:c9:5a:8c:c3:9e:7e:2c:d3:23:ab:dd:ce:
                    2c:0e:4e:1e:de:70:34:fd:b8:60:de:d9:6b:aa:f7:
                    44:ed:9f:e4:78:4b:be:69:b9:40:55:aa:69:ae:4e:
                    dc:1b:45:a7:15:f5:40:b2:1d:24:65:27:fa:1b:c5:
                    2b:71:63:31:c9:ef:f1:7d:b1:14:84:91:2e:f4:f4:
                    bc:c0:c5:be:6e:22:fa:34:34:e9:5d:24:a6:5f:29:
                    76:0b:c4:09:9f:48:a0:33:2a:84:ad:00:28:6a:fc:
                    95:9f:54:56:1c:bb:ac:28:12:7c:26:b1:4f:dc:8f:
                    f8:17:ac:96:9a:7c:29:87:f7:ab:34:b3:57:d1:66:
                    48:1a:1e:8c:c6:d4:63:7c:5e:0f:fb:12:09:26:bd:
                    22:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:4D:55:0A:D3:2C:E2:93:C1:DA:00:9B:25:3B:1D:BB:AF:3E:31:CD
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1CF59F22CA0511F1A555CB1BCF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.89.144.0-154.89.207.255
                  154.95.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:85:5a:92:7b:7b:4c:44:2e:f4:ac:9b:bb:05:95:2e:21:d9:
         c5:d1:c8:51:d0:56:58:b3:cb:ca:12:ad:2f:3f:76:b7:a3:59:
         dd:ac:fd:9e:a3:8a:4b:e0:d1:b0:a9:a7:79:33:e7:94:6d:81:
         f8:b5:15:39:70:59:9e:6c:9f:97:1c:48:d5:24:04:10:95:3f:
         a6:6c:1a:3c:59:fa:aa:00:2a:83:8f:52:51:4f:9b:c0:35:92:
         66:cd:c0:ba:5b:5d:dd:79:75:f3:52:3c:84:29:0e:f5:72:5d:
         17:23:dd:a5:b5:72:9a:00:ce:d3:59:30:a0:95:75:39:6c:45:
         c6:8d:8a:f7:65:53:5b:5e:39:06:c9:18:01:e7:eb:3b:6e:71:
         a4:a5:5e:5b:63:4c:7f:44:d6:2c:5f:50:21:63:4a:82:2f:7a:
         45:c0:c3:ed:2b:ef:61:ae:ca:20:95:a0:00:26:27:9d:2b:43:
         cf:1e:e2:1f:3a:84:d3:e7:45:e8:6f:75:43:0d:e9:6e:61:c2:
         24:79:9c:09:09:5e:cb:5a:73:d8:e6:c0:f7:43:bd:09:4d:ac:
         c1:15:1a:33:ed:8a:1d:e6:9a:dd:85:70:c4:58:f3:b4:f6:de:
         a0:98:4d:71:b9:7e:3b:ba:84:13:45:8e:95:ac:c7:2d:6c:aa:
         f7:d5:38:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----