Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/71E02CDCD2BB11F1BE78DDB2CE1D38B0.roa
File:                     71E02CDCD2BB11F1BE78DDB2CE1D38B0.roa (raw, json)
Hash identifier:          qc9/HowaFPWosYGdELtpEoVsA/KIkUuEEEnnvhj4JTc=
Subject key identifier:   09:C9:B5:E9:F8:7F:2B:21:E6:A6:7D:2D:F5:94:99:29:5A:8E:9F:B2
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01F0E6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/71E02CDCD2BB11F1BE78DDB2CE1D38B0.roa
Signing time:             Wed 28 Oct 2026 10:36:34 +0000
ROA not before:           Wed 28 Oct 2026 10:36:29 +0000
ROA not after:            Wed 21 Aug 2030 10:36:29 +0000
asID:                     17561
IP address blocks:        154.211.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 17 Nov 2026 00:08:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 127206 (0x1f0e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct 28 10:36:29 2026 GMT
            Not After : Aug 21 10:36:29 2030 GMT
        Subject: CN=6ae1d032-353d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:53:24:c8:36:80:b2:bd:09:8f:f5:53:96:9b:
                    be:32:29:f5:5d:b7:bf:aa:35:4e:97:5d:93:79:c2:
                    03:b2:f8:cd:40:b8:9c:78:0c:80:db:f8:3d:86:c4:
                    77:1a:24:46:f9:c8:ac:bb:3c:40:40:c5:00:31:01:
                    19:25:ab:f8:9f:87:59:11:8e:79:34:74:0f:08:87:
                    d8:40:fb:13:10:b9:91:5a:69:e6:00:b0:75:c7:db:
                    5b:66:a3:ac:01:78:fc:4c:53:6b:98:96:dd:b3:bf:
                    9b:52:0a:7f:46:68:05:be:69:ab:a1:43:a3:4f:e0:
                    3d:6a:9a:43:2e:7b:58:1c:5c:a3:54:16:f5:e2:88:
                    cb:00:a2:15:2a:49:e2:4d:3e:0c:e9:ad:e9:3e:3a:
                    39:8f:b0:95:3e:95:84:78:6e:e5:fe:a2:06:5b:61:
                    fc:c8:6f:e3:6f:70:6f:3c:db:d7:e6:61:96:77:2e:
                    57:75:7a:2f:57:d9:bf:dc:26:46:ae:b0:61:1d:57:
                    25:5d:16:c0:5f:eb:5d:51:4d:ec:0d:ed:fe:f1:23:
                    aa:c6:6d:08:be:d4:c2:1f:7f:bf:dd:bb:58:c0:19:
                    6d:5e:a3:5c:fc:95:b2:fa:2c:66:22:fe:1e:dd:62:
                    b0:e5:3e:f8:32:6d:75:c1:6e:63:78:fd:0d:2b:a9:
                    4b:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:C9:B5:E9:F8:7F:2B:21:E6:A6:7D:2D:F5:94:99:29:5A:8E:9F:B2
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/71E02CDCD2BB11F1BE78DDB2CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.211.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         1e:73:33:d4:f2:11:25:7f:ce:47:0b:8b:7f:4c:3c:0d:97:26:
         9e:03:de:7a:01:ea:f8:80:c2:d3:7d:48:53:63:ca:49:5d:00:
         bd:3b:2c:65:0c:43:14:e0:5d:5f:fc:19:b9:ae:0d:61:9d:7c:
         fb:85:f9:a4:30:8a:fb:e2:9f:3c:0a:d8:f1:2d:d8:1e:44:ea:
         12:e3:19:3b:e2:e2:b6:45:a4:5e:0e:03:f4:ec:20:27:e7:d7:
         21:05:3b:6d:7d:df:95:4e:cb:6e:ca:01:52:c3:3b:43:7f:c4:
         75:4a:c4:0c:aa:32:7e:0b:72:b1:e6:b1:e5:6e:87:4b:2d:f1:
         ab:ed:9a:fe:9f:f3:d6:71:52:2d:3f:b0:b8:b8:ac:16:f4:ca:
         d6:82:73:bd:5b:bf:97:1a:b1:0c:26:46:41:4c:e8:5c:6e:d5:
         e8:f1:ac:6a:22:c3:43:8c:89:bf:d7:30:82:b1:fd:f0:41:27:
         b5:69:9b:27:d2:aa:95:51:1d:2a:21:2c:71:a2:d9:ca:54:80:
         45:c5:0e:9f:1f:79:a0:a2:d6:40:1e:cc:59:25:57:c1:75:86:
         5b:9c:2b:dc:1c:8b:82:7a:3f:10:e9:7d:e0:bf:52:45:f5:e5:
         c5:10:c5:d1:73:ec:56:8d:ec:32:b9:9c:96:fc:33:32:dd:fb:
         b3:09:de:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----