Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3D59EAEAC89111F199798F1BCF1D38B0.roa
File:                     3D59EAEAC89111F199798F1BCF1D38B0.roa (raw, json)
Hash identifier:          1sAXdx2ev5UgfTuLNtkatt1SbZJ9EcT3vP0AGxuk4UE=
Subject key identifier:   E5:B1:F3:C5:EE:30:59:FA:C9:4C:24:B7:7A:24:D8:AC:A2:20:EC:70
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EE4D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3D59EAEAC89111F199798F1BCF1D38B0.roa
Signing time:             Thu 15 Oct 2026 12:09:15 +0000
ROA not before:           Thu 15 Oct 2026 12:09:11 +0000
ROA not after:            Sun 22 Nov 2026 12:09:11 +0000
asID:                     11404
IP address blocks:        154.83.144.0/22 maxlen: 24
                          154.83.200.0/21 maxlen: 24
                          154.83.216.0/21 maxlen: 24
                          154.83.248.0/21 maxlen: 24
                          154.85.28.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 22 Oct 2026 08:37:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126541 (0x1ee4d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct 15 12:09:11 2026 GMT
            Not After : Nov 22 12:09:11 2026 GMT
        Subject: CN=6ad0c26b-f815
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:54:20:f8:98:d2:20:c3:f0:91:a6:71:aa:2b:
                    bd:4f:80:19:fc:86:69:bb:48:95:5f:5b:a5:d2:83:
                    09:39:65:db:9b:75:ff:5c:9b:8a:bc:e6:ce:39:fd:
                    2e:5f:33:8c:d4:e8:b8:fd:ea:43:72:e8:9c:8d:f4:
                    dd:c9:fb:30:16:2f:4c:d5:a2:ff:60:fb:92:db:6c:
                    db:dc:8f:e0:d9:8a:73:29:d0:49:af:f0:ff:4a:23:
                    0c:e1:50:57:6e:1f:e7:65:18:46:d9:a3:df:05:04:
                    be:e9:96:9a:72:a9:e5:c1:b0:9d:a8:f9:ba:f3:3a:
                    61:91:c7:58:0a:87:1d:13:e9:23:83:d6:7c:6d:25:
                    b5:bf:86:e1:b2:b6:9b:3c:d7:78:3a:1c:87:c4:9f:
                    c5:da:bd:d3:31:fa:ee:64:ac:a4:2c:08:32:07:cb:
                    f7:02:ec:0c:c6:6d:24:a0:8f:ae:fb:48:8c:98:21:
                    f9:90:f5:e2:8d:12:06:12:0f:58:29:cd:0b:ed:85:
                    b9:d1:8c:fe:f2:5e:b6:21:63:36:d4:af:5a:de:8b:
                    2d:4d:3a:8f:d9:57:24:62:5c:38:c4:63:84:5c:47:
                    c4:0c:17:8a:39:0e:54:5c:90:4d:c6:ee:5a:f1:1a:
                    b9:ef:79:6f:35:99:6c:e6:44:73:5f:f7:e8:c7:ce:
                    1a:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:B1:F3:C5:EE:30:59:FA:C9:4C:24:B7:7A:24:D8:AC:A2:20:EC:70
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3D59EAEAC89111F199798F1BCF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.83.144.0/22
                  154.83.200.0/21
                  154.83.216.0/21
                  154.83.248.0/21
                  154.85.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         59:5b:8a:6a:e5:bf:67:2b:b6:70:12:cb:7d:fd:b3:9f:57:46:
         6f:61:27:42:33:41:cc:1a:50:8b:ed:47:af:ae:b2:a6:03:c8:
         e5:40:16:11:2f:0c:5f:19:be:a4:0a:fc:a6:59:70:c6:41:c7:
         57:83:37:54:5e:5e:d8:eb:47:63:43:8b:05:aa:da:ad:cf:e9:
         c6:45:b9:09:73:38:58:2d:db:31:17:49:5d:2d:8f:8e:87:1d:
         40:bb:85:12:c9:01:38:c8:be:b0:d2:4b:05:d1:7d:4e:1d:00:
         e3:56:92:21:e4:36:39:dd:f1:38:2e:f0:cb:5b:bb:70:f0:aa:
         d2:a3:8a:af:a9:5d:2c:60:1e:cb:07:db:47:13:e1:1c:48:3d:
         58:38:29:89:bf:76:db:25:86:47:1a:6e:f9:40:12:b2:c1:92:
         0a:38:12:df:01:b1:e9:0b:7c:b6:98:3e:d3:26:24:d4:df:da:
         5a:47:7c:d0:08:7a:97:44:8a:f9:5f:47:37:ec:8f:8d:79:e1:
         fc:68:fc:9e:c4:5b:72:41:54:fb:15:4f:64:37:b3:a2:6e:7e:
         ce:cc:00:aa:5e:a2:03:8a:16:ef:4b:9a:c2:04:42:d9:3b:84:
         b2:62:c3:ae:c2:06:ec:f5:50:c0:d9:5e:5f:ec:5c:01:54:60:
         3b:bf:bc:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----