Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/280DE5D2C86511F1A0EF9602CF1D38B0.roa
File:                     280DE5D2C86511F1A0EF9602CF1D38B0.roa (raw, json)
Hash identifier:          Q88O4cFD7He48Wesc3TxY8Bu+rQKPDwDYGSU0JDGtS0=
Subject key identifier:   9A:53:8A:1B:0F:CA:B7:AB:B5:55:EC:39:A0:B9:8A:63:DA:89:2F:3F
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EE15
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/280DE5D2C86511F1A0EF9602CF1D38B0.roa
Signing time:             Thu 15 Oct 2026 06:53:42 +0000
ROA not before:           Thu 15 Oct 2026 06:53:37 +0000
ROA not after:            Sat 21 Nov 2026 06:53:37 +0000
asID:                     59711
IP address blocks:        154.83.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 24 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126485 (0x1ee15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct 15 06:53:37 2026 GMT
            Not After : Nov 21 06:53:37 2026 GMT
        Subject: CN=6ad07876-feab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:99:cd:c9:25:8a:40:a9:84:fa:af:60:ec:81:
                    b9:39:37:ff:f4:5a:da:de:de:42:49:7b:aa:21:ce:
                    33:b9:72:cd:18:bf:7f:44:15:b1:12:c3:38:d3:d4:
                    c4:df:15:04:4e:06:98:e7:f3:4d:44:23:9e:82:48:
                    7b:e5:0a:ed:44:8d:69:f8:82:32:86:b0:5e:45:67:
                    62:a0:dc:a5:99:d8:da:2b:a1:d1:57:da:b7:cd:92:
                    75:03:5c:00:d3:a7:b5:79:5d:a1:be:8d:ce:cd:ee:
                    f3:fb:37:fb:9d:63:74:2c:cc:3f:89:fc:e3:a5:d7:
                    15:da:24:40:22:56:6b:22:2f:4e:7a:a3:d5:ff:fb:
                    5e:89:83:68:92:e0:cf:32:48:a5:d2:4d:4d:d9:e0:
                    5f:80:c4:bc:b5:d9:57:5c:8a:66:a9:5a:29:1a:1f:
                    b4:21:f1:b1:3a:1f:7f:3f:28:8f:5b:80:08:06:65:
                    53:59:a9:d5:14:58:de:40:b1:af:74:43:16:ac:e3:
                    f9:af:f3:42:49:80:2d:d3:e5:14:eb:b0:fa:c3:c2:
                    9c:ca:d7:4b:d8:80:2a:66:7c:b7:4e:b2:bf:f8:1e:
                    36:a3:5e:c1:83:09:4c:2b:cb:39:a8:37:5e:2c:42:
                    b1:93:be:85:76:a3:ff:54:59:f1:58:b4:35:ef:5b:
                    62:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:53:8A:1B:0F:CA:B7:AB:B5:55:EC:39:A0:B9:8A:63:DA:89:2F:3F
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/280DE5D2C86511F1A0EF9602CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.83.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:9e:32:4b:f4:22:7a:b0:18:08:90:ae:b5:cd:17:d7:d3:57:
         a0:88:82:7a:01:52:f7:cb:ab:cb:37:3e:3f:ea:4c:d8:de:63:
         6b:65:f1:7e:d7:08:d2:e0:e1:5a:55:36:3b:8b:b0:83:b4:3b:
         49:d7:ab:4b:6b:2f:ce:61:9e:44:78:e7:8f:8d:8d:6d:cd:e3:
         4e:91:7d:b6:c9:77:7b:c9:43:27:1e:c1:2a:f9:4b:1a:42:2d:
         dd:27:55:5a:99:78:a0:46:75:63:9b:ba:47:08:4d:8d:26:fc:
         c9:16:d3:e8:1b:99:e1:bc:80:9c:1d:53:b3:76:9c:f4:2a:bd:
         94:3f:76:17:07:0a:93:8d:b1:f5:21:98:2e:38:ca:dd:c4:03:
         f9:3e:c2:90:c1:17:e4:ee:ec:d6:93:af:8d:2b:8a:fe:13:7d:
         6a:4c:1a:71:27:9c:b2:66:48:8b:1a:2b:f4:b7:6d:68:e2:ca:
         cd:53:08:de:ee:34:8c:44:57:1e:e1:42:dc:f9:bd:08:61:fe:
         67:ca:71:c4:14:d5:e8:22:e8:c5:4d:27:ca:20:5d:4c:0f:d2:
         53:8c:bf:78:ca:0c:88:83:16:d5:e9:b9:e6:f6:20:e6:5c:08:
         73:6f:fd:71:9f:36:b8:bd:c4:75:8e:ad:30:09:06:5d:f6:9d:
         93:4f:6f:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----