Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3E90DE80C9F111F18933281BCF1D38B0.roa
File:                     3E90DE80C9F111F18933281BCF1D38B0.roa (raw, json)
Hash identifier:          x1s5g6IsQj5nj3ahdLqs/a3Y+Er6R7nafckOzAfwGoQ=
Subject key identifier:   2B:F4:63:CD:5D:29:46:89:F2:83:26:CF:8B:63:8F:82:BC:52:14:E8
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EE79
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3E90DE80C9F111F18933281BCF1D38B0.roa
Signing time:             Sat 17 Oct 2026 06:09:00 +0000
ROA not before:           Sat 17 Oct 2026 06:08:56 +0000
ROA not after:            Mon 16 Nov 2026 06:08:56 +0000
asID:                     17497
IP address blocks:        154.217.192.0/20 maxlen: 24
                          154.222.148.0/24 maxlen: 24
                          154.222.149.0/24 maxlen: 24
                          154.222.150.0/24 maxlen: 24
                          154.222.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 00:08:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126585 (0x1ee79)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct 17 06:08:56 2026 GMT
            Not After : Nov 16 06:08:56 2026 GMT
        Subject: CN=6ad310fc-3fde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d6:6f:55:ff:fe:9f:a6:f9:ef:8c:94:fa:64:
                    17:e0:fc:70:1d:d8:04:74:58:eb:c4:b6:99:76:ab:
                    7b:2c:c1:21:f8:ac:2a:08:39:52:13:4f:8d:1e:f9:
                    5e:a8:07:d2:e5:6a:ea:95:a9:ce:ba:4d:04:cc:d1:
                    0e:03:e1:54:9a:05:0b:2a:c9:02:5f:19:78:c3:15:
                    86:ea:69:26:cc:d3:2a:61:8a:0f:dc:3d:98:08:57:
                    17:0c:ab:25:09:38:fb:17:0f:04:69:3d:4e:4d:19:
                    ee:4b:5d:d9:26:ce:38:ab:f9:9c:7d:5c:a2:bd:22:
                    e7:32:f6:25:f5:6d:40:c9:aa:70:ab:f1:f9:86:df:
                    94:d4:a5:01:15:b8:aa:b9:0b:64:db:ae:95:a6:99:
                    9a:ce:26:d3:87:60:6d:b2:bc:78:d0:fd:52:5c:17:
                    c1:b1:07:a1:be:a2:26:b5:5d:93:ae:2b:b5:79:61:
                    ec:41:bd:01:4f:07:1b:f8:6e:52:aa:fa:2e:a4:09:
                    29:d3:be:30:50:9a:bd:87:19:8d:43:72:8b:02:b0:
                    36:4f:48:35:d6:bf:a2:12:c4:af:08:1e:07:5e:d5:
                    2d:96:0b:c7:88:56:4a:6f:9d:42:8c:9c:ea:75:af:
                    f9:7d:9d:7b:6d:1c:55:d1:ce:5d:c9:f4:92:10:88:
                    1e:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:F4:63:CD:5D:29:46:89:F2:83:26:CF:8B:63:8F:82:BC:52:14:E8
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3E90DE80C9F111F18933281BCF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.217.192.0/20
                  154.222.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7f:cc:ab:b2:9c:d4:74:b8:eb:88:66:b5:50:e0:30:84:f6:dd:
         29:27:08:73:32:c2:30:08:9f:0c:53:e3:3f:65:49:25:48:54:
         ad:ca:82:b1:9a:65:e2:65:93:fb:c6:98:e8:52:6c:77:5e:20:
         c4:ef:2d:5d:44:d2:8e:ee:7d:8a:f6:5d:70:d9:ea:da:fe:f0:
         ba:c5:e6:b5:6a:f6:42:b8:ff:e1:30:67:85:68:9d:29:b8:a0:
         5e:47:39:53:8f:c0:eb:6c:aa:02:3c:6b:06:fc:d8:83:3f:a7:
         76:0b:aa:ff:d6:a3:1d:c7:40:ee:7c:64:3c:5b:6d:9f:9b:2a:
         4e:e3:f9:02:7c:cc:32:93:f3:02:34:9c:20:04:a8:a3:01:ae:
         cc:0d:d3:a7:07:ec:a2:c6:10:f1:c5:08:03:1e:0d:e1:f5:43:
         37:47:4c:02:58:b0:31:61:f8:e3:93:57:f0:89:52:ce:f5:79:
         51:3b:cd:7d:92:b4:5a:bc:29:9f:b0:c5:08:f5:59:7f:02:a6:
         a4:0f:3b:81:4a:33:46:2c:72:f3:4a:10:16:b4:c4:cc:04:af:
         38:9b:20:ab:23:42:ec:ae:b5:bd:48:ca:2a:11:07:08:3d:93:
         22:c2:f9:72:17:8d:48:23:ee:22:ca:51:d8:b6:a9:62:1a:57:
         5e:73:18:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----