Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1D92C348C9F511F196B4B6B6CE1D38B0.roa
File:                     1D92C348C9F511F196B4B6B6CE1D38B0.roa (raw, json)
Hash identifier:          trcq5f7K0w1vzMNCQxmjdT3IN76Qb28bexGJdhWMa6w=
Subject key identifier:   91:F6:BF:E6:C7:04:14:B2:0E:FA:60:EE:CC:B2:0C:4A:DC:6E:DB:87
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EE7F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1D92C348C9F511F196B4B6B6CE1D38B0.roa
Signing time:             Sat 17 Oct 2026 06:36:43 +0000
ROA not before:           Sat 17 Oct 2026 06:36:37 +0000
ROA not after:            Tue 24 Nov 2026 06:36:37 +0000
asID:                     54600
IP address blocks:        154.202.117.0/24 maxlen: 24
                          154.202.120.0/21 maxlen: 24
                          154.217.234.0/23 maxlen: 24
                          154.217.236.0/22 maxlen: 24
                          154.217.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 21 Oct 2026 00:08:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126591 (0x1ee7f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct 17 06:36:37 2026 GMT
            Not After : Nov 24 06:36:37 2026 GMT
        Subject: CN=6ad3177b-5ef3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a6:f0:27:70:50:34:2d:ac:e0:7d:54:69:b9:
                    5b:a9:0f:69:93:10:88:4c:72:4c:5c:3c:2c:2d:69:
                    83:48:c0:af:4d:a1:54:2b:ab:07:c6:ca:e8:85:2f:
                    c1:bc:94:47:60:a6:99:86:7e:8e:7f:30:9d:36:ac:
                    82:05:8e:ed:1d:27:4c:2a:ba:83:c9:df:30:9f:7c:
                    99:84:79:28:9e:79:34:88:8c:ee:a6:13:80:b4:c7:
                    cc:88:63:5e:b0:74:25:3c:9a:b7:9e:1d:fe:0d:23:
                    b7:91:4b:e5:3f:aa:b7:af:e3:1e:0e:93:4e:54:85:
                    d7:a8:89:70:88:46:fc:4e:56:b6:73:bc:02:fb:fd:
                    2e:ab:d6:91:56:5d:e2:24:4f:82:5b:ca:fc:90:22:
                    44:ec:40:3c:6c:f1:6f:20:45:1d:52:17:97:98:96:
                    0d:2f:16:9b:5b:4f:0d:8e:aa:59:dd:a4:9d:9c:99:
                    3a:3d:d6:39:47:cf:f7:c1:c9:0b:78:cd:6d:b4:62:
                    25:4e:8b:45:e4:3b:98:c0:a0:79:9d:3f:9e:34:b9:
                    6c:d4:2d:8e:61:06:95:f5:a0:2f:20:f9:34:38:7a:
                    17:2c:9f:6a:7a:65:db:bc:30:7b:1f:c5:ab:bb:4b:
                    22:ce:9a:67:20:bb:a7:88:cf:1d:d1:6b:67:14:30:
                    23:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:F6:BF:E6:C7:04:14:B2:0E:FA:60:EE:CC:B2:0C:4A:DC:6E:DB:87
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1D92C348C9F511F196B4B6B6CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.202.117.0/24
                  154.202.120.0/21
                  154.217.234.0-154.217.255.255

    Signature Algorithm: sha256WithRSAEncryption
         05:7d:29:2a:e0:f0:92:aa:d6:2b:14:13:10:94:21:1d:bf:e0:
         05:77:44:c5:b2:ce:1d:49:4b:3e:e0:74:b7:08:86:65:4e:5f:
         83:fb:79:3c:92:af:3b:0e:c4:0a:a0:29:8e:cb:95:88:b9:02:
         6b:e0:b9:0f:45:c3:5e:f9:42:4b:6f:47:66:ad:5d:78:9f:56:
         af:4a:e7:6d:f8:9a:31:3f:25:a7:c6:e7:11:d5:d7:03:d9:23:
         ea:68:55:d5:9a:68:3e:86:9f:89:f9:13:8a:81:4d:26:01:4b:
         62:5a:fb:89:4c:b2:2d:28:63:29:40:13:31:1a:c2:7e:06:ae:
         7e:48:81:9b:7b:92:22:2c:fd:c7:68:03:43:df:01:54:1e:0e:
         61:ad:e0:9e:b1:01:57:2d:34:64:fb:77:a0:9e:6c:2e:d9:70:
         4a:38:75:f2:7e:a9:ac:69:92:e0:f9:72:e5:75:c3:ed:e3:6f:
         49:a8:13:e5:3c:79:4c:ee:66:54:6b:f6:09:c0:be:cc:94:84:
         86:80:80:b7:0a:ef:3b:d6:40:3c:82:25:eb:43:a1:0a:e7:9e:
         60:91:7a:2e:1e:54:b9:ec:f3:ed:0b:6f:2d:e1:f2:0a:93:ee:
         ed:b6:71:5b:34:96:1f:78:99:5b:b8:33:79:e1:2f:22:ae:b7:
         3a:7b:b8:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----