Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/52FDFD1EC9FE11F1BC7184F0CE1D38B0.roa
File:                     52FDFD1EC9FE11F1BC7184F0CE1D38B0.roa (raw, json)
Hash identifier:          GBJbfHqfNSfsQrDSnakbS8KTsUr64ZjVVv7NhdE5Cqg=
Subject key identifier:   C9:3E:14:45:9E:A1:92:4C:61:21:7A:72:42:82:F0:E9:DD:01:F1:34
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EE93
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/52FDFD1EC9FE11F1BC7184F0CE1D38B0.roa
Signing time:             Sat 17 Oct 2026 07:42:38 +0000
ROA not before:           Sat 17 Oct 2026 07:42:33 +0000
ROA not after:            Tue 24 Nov 2026 07:42:33 +0000
asID:                     55020
IP address blocks:        154.202.117.0/24 maxlen: 24
                          154.202.120.0/21 maxlen: 24
                          154.217.234.0/23 maxlen: 24
                          154.217.236.0/22 maxlen: 24
                          154.217.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 21 Oct 2026 00:08:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126611 (0x1ee93)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct 17 07:42:33 2026 GMT
            Not After : Nov 24 07:42:33 2026 GMT
        Subject: CN=6ad326ee-0e86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:7e:6d:c9:0b:1c:f5:e6:a0:1e:4b:46:b4:3d:
                    ab:70:90:0a:76:82:ef:5e:e7:1c:96:45:e1:8e:59:
                    30:6c:24:29:10:46:d6:0b:b6:56:f6:e3:67:fc:71:
                    55:fd:62:64:a3:85:08:bd:af:8c:e1:40:0d:37:5b:
                    25:b5:b3:e6:64:5c:9e:63:80:b7:c2:0a:96:dd:91:
                    eb:ef:75:72:1c:b8:31:29:e7:73:40:f8:f7:64:3f:
                    0c:13:fd:ce:4c:cb:d5:b3:b4:9a:34:53:85:dc:ba:
                    15:aa:ff:ef:af:02:f8:24:f5:00:78:1e:5a:b1:32:
                    3f:d6:f5:3c:ff:f2:2c:9e:db:19:08:9f:f5:1a:74:
                    8a:14:fd:16:9f:3c:49:c8:06:d3:11:fb:cf:da:56:
                    01:fd:f4:e6:7e:3f:0c:7f:f4:44:71:58:7b:ca:13:
                    47:d3:58:01:11:7d:f7:1a:20:8d:0f:c6:2d:95:e7:
                    d8:12:63:c3:02:0c:fc:4a:af:0e:b9:e3:82:d8:af:
                    21:d3:18:f0:8c:71:0e:f0:06:9a:0d:ab:c8:ef:ff:
                    0c:f5:7b:e2:ce:9b:a9:4b:fc:ea:72:7c:2d:5d:c1:
                    dd:e6:2b:1b:e0:46:b6:9d:d8:8c:68:a3:d5:6a:a0:
                    40:38:99:2a:3e:21:3e:71:c4:eb:d0:28:1e:1a:fd:
                    ac:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:3E:14:45:9E:A1:92:4C:61:21:7A:72:42:82:F0:E9:DD:01:F1:34
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/52FDFD1EC9FE11F1BC7184F0CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.202.117.0/24
                  154.202.120.0/21
                  154.217.234.0-154.217.255.255

    Signature Algorithm: sha256WithRSAEncryption
         85:d7:dd:d3:f9:a7:89:b6:ed:99:5c:e8:ef:d6:ff:65:8c:b5:
         0a:eb:f4:07:5f:eb:d5:03:5e:8c:f8:94:6f:0d:46:c1:fc:c2:
         2e:b0:76:bd:0e:2b:d1:76:21:32:66:f5:f9:9a:a1:ec:9f:bf:
         13:6c:26:96:27:39:dc:37:8e:37:73:b1:e7:9e:75:a4:7a:04:
         72:82:39:9e:c9:93:0e:a4:db:d2:1c:8a:f0:a5:44:47:d6:d2:
         1d:79:df:36:80:6c:ae:68:18:3f:b0:79:a8:1f:9d:7e:4f:fe:
         9b:62:82:a7:9d:b1:1a:c1:9b:45:58:81:b3:84:73:bc:c4:13:
         af:95:b0:56:42:2b:88:e2:68:7d:d3:72:11:cc:aa:72:4d:cf:
         5c:3d:54:10:31:a4:9d:8a:7b:f2:8e:37:74:a2:1a:3c:d5:e8:
         f1:66:04:ab:b3:34:19:27:3c:cb:b6:4e:0d:58:b6:b4:e0:04:
         14:75:cf:f2:21:c7:46:63:6b:34:85:e7:55:7c:65:8d:ed:b2:
         c3:f4:33:77:73:1f:26:7c:56:29:1e:c7:40:f6:3e:b0:03:29:
         56:4b:29:0b:95:5c:41:d3:fd:bc:0d:15:27:b0:af:52:be:1c:
         13:ea:56:0f:76:8c:e7:e7:25:13:cc:08:7c:f5:60:59:ca:eb:
         df:97:1c:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----