Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/371015DEC7A511F1882B0D1CCF1D38B0.roa
File:                     371015DEC7A511F1882B0D1CCF1D38B0.roa (raw, json)
Hash identifier:          tI/cfzZofAuVPXNKEhIBY9nIhKgUQtkKXo8D5Bpnivo=
Subject key identifier:   64:C3:51:8F:4A:2C:16:B6:B5:F4:F4:C7:7F:59:AD:A1:45:23:BB:B6
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EDFD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/371015DEC7A511F1882B0D1CCF1D38B0.roa
Signing time:             Wed 14 Oct 2026 07:59:44 +0000
ROA not before:           Wed 14 Oct 2026 07:59:39 +0000
ROA not after:            Sat 21 Nov 2026 07:59:39 +0000
asID:                     63099
IP address blocks:        154.83.32.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 21 Oct 2026 00:08:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126461 (0x1edfd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct 14 07:59:39 2026 GMT
            Not After : Nov 21 07:59:39 2026 GMT
        Subject: CN=6acf366f-4473
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:2e:cb:99:20:85:20:67:ec:e4:30:e3:b1:eb:
                    d1:9e:d8:98:0a:e4:21:3f:11:e1:e1:8d:64:a8:df:
                    3a:9b:0f:15:c3:7a:17:42:fe:1f:56:37:06:a1:81:
                    c7:3a:54:cf:f4:81:54:d2:78:33:d2:89:3d:70:c1:
                    4f:89:90:7e:b4:69:45:7f:b7:8a:9f:6e:d6:30:ea:
                    e9:11:88:1f:cd:10:44:cd:70:7f:bc:23:3c:12:99:
                    fa:73:49:95:30:09:8d:45:5d:56:96:77:8a:90:1e:
                    26:82:e7:4d:ff:a5:17:3f:dd:51:08:bd:53:31:e7:
                    78:35:40:77:e6:59:79:49:2a:55:f9:ff:71:ef:1d:
                    e0:fc:3a:4a:c6:80:78:a5:e1:8d:95:b3:05:ce:3e:
                    c6:a0:e8:cf:33:f0:02:03:83:09:64:3c:61:f1:39:
                    a5:2d:7c:ec:a7:b1:14:ad:9f:6e:fb:4f:ba:30:6c:
                    a2:04:2f:95:a1:25:24:ac:32:c6:a9:38:99:58:fe:
                    f2:14:9d:08:e3:eb:fc:2d:99:6d:dd:6e:b3:40:ec:
                    2e:22:c7:b3:d5:82:51:c7:b9:d7:d3:21:a7:ed:b0:
                    65:b1:31:47:5a:ad:45:d1:0b:7f:19:43:49:4e:5e:
                    47:0c:8e:45:72:6f:31:e5:5d:bc:dd:f6:7d:9d:ee:
                    05:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:C3:51:8F:4A:2C:16:B6:B5:F4:F4:C7:7F:59:AD:A1:45:23:BB:B6
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/371015DEC7A511F1882B0D1CCF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.83.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:4c:b0:be:5e:e3:d0:16:1f:dc:52:e8:e6:b8:b9:78:91:1f:
         00:96:41:4d:65:de:02:95:a5:f9:c3:db:a3:b2:3a:2c:1b:ad:
         f5:1c:d2:55:82:dd:61:3b:b3:81:04:7f:7b:15:fc:7f:a8:a7:
         5b:3a:df:e5:1f:b2:42:dc:a8:97:bb:39:39:67:5f:70:b5:a2:
         60:ea:3e:61:03:44:cf:a5:d2:c7:66:be:0b:4a:90:1e:74:cc:
         c9:11:bf:44:b7:9d:83:07:d6:75:39:6f:e2:33:f6:63:97:96:
         28:60:91:3d:72:4f:ef:04:b9:6c:3a:b6:4f:2a:c2:c6:df:f2:
         14:24:cc:f6:b5:23:5c:61:5c:e9:8b:df:36:a8:ac:b9:d1:aa:
         21:9d:95:40:1a:55:99:4b:dc:c0:bf:71:d6:2a:bc:5f:b9:68:
         0d:35:98:e0:9e:1f:33:b2:bb:38:73:4e:2d:34:77:e9:cf:a4:
         2b:3f:bb:76:93:32:82:ad:a2:94:78:a0:4e:f2:21:5f:a3:9d:
         c9:8b:01:36:6d:c4:4d:78:16:2e:11:6a:14:77:5e:bf:58:0b:
         17:95:a4:9f:5c:02:fe:da:8e:a8:62:ee:cb:56:5d:3f:94:88:
         ae:c9:c9:45:7c:cb:cd:20:ee:92:6f:d5:68:0f:a6:d7:9c:fc:
         4b:42:79:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----