Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2ED84804CABC11F18CBAFFC9CE1D38B0.roa
File:                     2ED84804CABC11F18CBAFFC9CE1D38B0.roa (raw, json)
Hash identifier:          UwB4ZroHBaLokIZ5s6eJb57jDrtgtORoyFn8g+8E5LU=
Subject key identifier:   BB:DB:36:0E:66:B1:F9:94:38:64:E9:03:4F:7B:AD:30:0F:76:1D:10
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EEB8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2ED84804CABC11F18CBAFFC9CE1D38B0.roa
Signing time:             Sun 18 Oct 2026 06:21:42 +0000
ROA not before:           Sun 18 Oct 2026 06:21:37 +0000
ROA not after:            Mon 25 Oct 2027 06:21:37 +0000
asID:                     135423
IP address blocks:        154.82.161.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 21 Oct 2026 00:08:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126648 (0x1eeb8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct 18 06:21:37 2026 GMT
            Not After : Oct 25 06:21:37 2027 GMT
        Subject: CN=6ad46576-da88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e6:e1:ff:69:45:a7:b7:99:d7:ed:1f:18:9a:
                    67:7e:7f:ae:0b:2e:0d:ab:db:69:4b:81:00:ca:79:
                    c4:67:24:e5:ce:f3:46:d7:f2:db:c1:fe:35:b7:b1:
                    51:f2:4b:36:67:32:f8:89:4e:74:f1:10:1a:57:3c:
                    76:a2:12:6c:c6:4d:8e:99:2f:19:bd:a3:f0:4a:f7:
                    e8:23:5e:e3:54:54:b9:a7:66:4d:08:c3:82:d2:36:
                    d7:82:01:77:1b:f7:37:dc:54:c3:0e:4e:01:8f:60:
                    f0:87:d6:2c:4a:05:67:f9:bd:c7:25:3d:64:c6:5a:
                    d6:05:33:55:d9:e4:61:9d:20:ed:3e:f3:8c:81:49:
                    58:44:8b:de:da:65:00:50:8d:2f:9a:e0:1d:b0:ab:
                    e4:eb:7c:8b:13:19:37:99:30:69:53:b6:1c:be:d3:
                    e2:52:9a:1a:48:75:00:bf:56:59:c0:aa:b4:ec:39:
                    a1:57:b2:66:6c:e2:e1:26:c4:89:32:a1:63:6b:d3:
                    ff:9d:87:6d:a3:7b:a4:5f:40:55:87:70:df:19:81:
                    41:6a:4c:36:34:a0:0b:c9:20:36:1f:0a:35:f1:7f:
                    a8:98:fe:f5:3f:89:74:a7:c8:7f:af:69:ac:68:2a:
                    ae:a2:ed:c7:6e:8e:51:3f:f2:fb:4c:35:c8:17:cd:
                    19:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:DB:36:0E:66:B1:F9:94:38:64:E9:03:4F:7B:AD:30:0F:76:1D:10
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2ED84804CABC11F18CBAFFC9CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.82.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:3e:ab:f9:49:ec:79:12:7e:67:d3:1e:5c:a5:00:69:71:0e:
         1c:87:ec:cc:17:9c:16:1a:ca:2d:13:ff:16:2c:71:02:31:5b:
         c1:c3:4a:a1:05:41:06:44:c8:ca:ff:30:31:f1:c8:9a:1d:51:
         79:8f:e7:de:c9:68:84:19:10:b9:e8:63:0a:67:79:36:65:37:
         97:79:74:5a:e2:87:f8:c0:56:d4:1c:78:46:97:1f:b8:82:19:
         88:d4:d6:ce:ee:9d:ee:1a:27:3f:ef:f7:b3:a1:1f:4b:95:63:
         41:00:0f:6a:70:fe:e0:14:3d:33:50:52:14:29:fc:8f:a3:13:
         97:4b:fa:4b:bd:20:91:c2:cc:ba:4a:01:19:7d:7d:95:e8:81:
         9e:9a:4e:d8:2f:f3:91:5c:27:f6:88:35:a0:4e:3e:c0:88:94:
         cb:96:a1:83:86:c0:8b:1a:6b:62:36:38:1f:cb:9f:e1:ee:78:
         3a:70:1f:49:91:ec:34:b0:02:ca:af:75:27:9a:3e:15:81:75:
         73:cb:1f:22:65:ff:67:d0:77:90:7e:97:2b:14:87:6c:07:ef:
         cd:9a:b8:76:c4:f3:3a:51:98:54:6f:e0:d4:49:6b:0c:5d:8c:
         82:79:1e:a0:6f:c4:93:f6:f9:dc:de:7c:cc:05:c9:1e:80:9f:
         82:b4:d5:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----