Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5D7CE260CA5711F1B27E63A7CE1D38B0.roa
File:                     5D7CE260CA5711F1B27E63A7CE1D38B0.roa (raw, json)
Hash identifier:          hem/nXkrsq/nAmQAPNWRcfu/Br5DVgdDRt17H/+Majk=
Subject key identifier:   9A:06:2A:2C:E2:8E:15:18:08:BD:F8:2E:AA:AD:C3:87:69:F2:85:17
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EEB3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5D7CE260CA5711F1B27E63A7CE1D38B0.roa
Signing time:             Sat 17 Oct 2026 18:20:01 +0000
ROA not before:           Sat 17 Oct 2026 18:19:54 +0000
ROA not after:            Mon 16 Nov 2026 18:19:54 +0000
asID:                     17497
IP address blocks:        154.82.19.0/24 maxlen: 24
                          154.94.2.0/23 maxlen: 24
                          154.94.2.0/24 maxlen: 24
                          154.94.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 21 Oct 2026 00:08:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126643 (0x1eeb3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct 17 18:19:54 2026 GMT
            Not After : Nov 16 18:19:54 2026 GMT
        Subject: CN=6ad3bc51-755b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:02:d3:ce:3a:c1:89:54:9d:42:c2:af:0c:0e:
                    3c:68:07:bd:5f:90:28:ff:86:b6:8d:7a:26:b4:65:
                    72:a8:ef:78:17:70:cd:6d:45:38:1a:52:c1:e7:53:
                    5e:b5:7b:39:ef:2d:b7:81:01:08:8f:ed:7d:60:ac:
                    10:2b:d3:9c:de:f0:de:b9:89:45:c1:66:ab:34:4b:
                    17:96:64:20:90:83:72:ae:93:a4:86:aa:02:13:21:
                    6a:34:f2:09:8f:55:63:4e:13:26:25:36:96:ae:b8:
                    1e:95:54:4c:b5:60:1c:18:d8:44:7a:90:65:1b:31:
                    b2:90:7c:5e:a3:45:17:5b:92:f7:70:0f:5d:9c:5c:
                    c1:b7:94:08:ef:e3:e3:15:6f:59:03:b9:6b:7d:9e:
                    86:dc:f6:91:77:08:d4:c6:46:85:77:39:98:d6:39:
                    6a:fb:48:a1:b5:d8:45:46:2f:70:da:0c:89:1d:21:
                    ca:1e:1f:a8:c1:80:56:52:c8:12:9d:40:03:51:1f:
                    31:00:e2:6b:25:5f:8e:35:ad:a8:32:b0:af:ec:47:
                    04:df:51:ec:2e:ad:ec:91:bd:36:bc:b4:f1:80:5f:
                    2f:86:59:7a:a7:a4:47:d1:07:62:00:71:24:e1:ca:
                    c1:f4:ca:94:0b:8d:9c:08:b9:fb:67:84:fb:3e:43:
                    45:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:06:2A:2C:E2:8E:15:18:08:BD:F8:2E:AA:AD:C3:87:69:F2:85:17
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5D7CE260CA5711F1B27E63A7CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.82.19.0/24
                  154.94.2.0/23

    Signature Algorithm: sha256WithRSAEncryption
         59:63:2d:f3:17:4b:fc:93:da:b2:70:1b:3b:27:11:c8:aa:c9:
         60:55:41:df:fe:cd:6b:b5:03:ed:d0:8a:3d:9f:57:c7:3c:7a:
         5e:90:0c:f0:e5:90:3d:80:71:fa:9b:c1:dc:c4:71:08:4c:cb:
         59:a9:68:a2:29:ae:f3:29:52:61:1e:86:85:fc:7f:62:26:c7:
         cd:e4:d9:bd:d5:b2:14:b0:f9:c0:a2:42:6b:c6:01:e0:11:e2:
         ab:7a:1f:95:dc:f2:cc:06:cf:6d:be:a7:9b:2a:bd:dc:e1:23:
         b7:8e:f2:7d:0c:e8:d5:31:a3:0c:7d:fe:4f:4c:da:2b:01:74:
         2e:4e:80:d9:b8:54:1e:d7:1b:10:66:80:a4:f4:b7:ba:54:c0:
         6a:52:53:a7:22:1e:ed:4a:fc:d0:f5:69:0d:f3:8f:f6:cd:f2:
         45:f5:ce:92:9c:f3:39:a8:0c:0a:62:8f:2d:d6:dc:30:74:2e:
         48:c3:0d:8b:7c:1a:96:09:63:fb:67:45:89:a4:a6:5e:46:0f:
         44:ae:c0:c2:9a:54:b6:5b:a4:88:ff:fa:ac:47:f6:58:7b:92:
         51:79:da:8d:34:90:b5:ac:36:5b:ae:0b:0f:14:63:0d:d6:c4:
         f9:fe:14:33:48:68:c3:f6:e0:37:f9:95:70:13:1c:32:02:0f:
         f4:4a:5d:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----