Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/830D8714CA1B11F184CAEAABCE1D38B0.roa
File:                     830D8714CA1B11F184CAEAABCE1D38B0.roa (raw, json)
Hash identifier:          ciecjdfeER/EKcu6BHFq0yVLnLU37OpIFYuDYpm8Zqs=
Subject key identifier:   44:60:69:8D:FB:43:BC:DC:13:FC:CE:01:B4:6B:B4:85:5C:B4:5C:7A
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EEAD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/830D8714CA1B11F184CAEAABCE1D38B0.roa
Signing time:             Sat 17 Oct 2026 11:11:34 +0000
ROA not before:           Sat 17 Oct 2026 11:11:28 +0000
ROA not after:            Sun 01 Nov 2026 11:11:28 +0000
asID:                     141372
IP address blocks:        154.208.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 21 Oct 2026 00:08:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126637 (0x1eead)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct 17 11:11:28 2026 GMT
            Not After : Nov  1 11:11:28 2026 GMT
        Subject: CN=6ad357e6-6ea1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a6:5b:1b:bc:e3:5f:71:52:b1:fb:34:12:ce:
                    8d:99:8e:c2:cd:03:ef:fb:72:e8:cd:32:c5:22:2a:
                    56:2e:69:78:21:4f:99:6a:79:8f:ed:78:43:67:cc:
                    5d:74:99:ac:70:57:8a:eb:5c:af:b1:d2:3e:b1:66:
                    09:58:3a:56:7f:b7:b8:ae:13:ff:e9:95:12:48:2d:
                    21:31:33:51:da:be:9f:d7:3d:93:6f:70:fe:9d:c3:
                    c1:ee:c5:89:aa:6f:99:f7:fa:b5:0b:f2:b0:38:77:
                    1e:46:28:55:8a:fb:40:f2:38:5f:c6:b0:c8:56:c6:
                    6e:ad:4b:09:52:e4:d3:ef:74:bc:06:93:5c:fb:a5:
                    45:7d:0c:a1:63:37:bb:71:2f:94:4f:b9:03:7d:1b:
                    e9:c3:3c:79:41:c3:c1:95:29:7a:44:fc:21:d9:e3:
                    21:f9:c9:81:4f:17:70:61:a4:85:5a:fa:05:b9:93:
                    24:5f:40:d8:13:2c:26:6c:ed:04:a0:b3:02:72:6b:
                    92:82:2f:2d:63:a7:77:22:1b:20:91:3b:7b:b0:20:
                    c1:ee:6b:f8:f7:22:00:86:3c:2f:a2:a0:30:a3:d6:
                    13:e8:ab:4f:95:e1:a5:fb:43:9c:0c:d2:b9:37:72:
                    af:3d:cf:ca:07:30:d9:84:08:58:b7:a4:cd:df:54:
                    65:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:60:69:8D:FB:43:BC:DC:13:FC:CE:01:B4:6B:B4:85:5C:B4:5C:7A
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/830D8714CA1B11F184CAEAABCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.208.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:9a:b1:26:7f:66:42:dd:9f:5c:d4:be:17:27:f9:6c:df:20:
         9d:5a:da:8f:d6:60:6a:60:9c:85:2e:28:f1:01:07:81:9a:92:
         53:35:73:d0:36:9f:46:bb:84:d4:46:0b:fd:d1:71:11:a3:df:
         ce:25:4b:02:bf:9a:6f:0a:ac:af:74:27:bf:a8:41:cf:7e:8e:
         04:61:db:45:21:0c:30:8e:83:f9:99:93:7e:48:ee:d7:1f:0f:
         6c:fa:99:1e:77:1f:a0:0e:0c:3c:b8:d4:18:18:e6:66:55:4b:
         fd:52:42:0b:b3:12:79:3f:17:af:29:c9:43:20:a8:55:8c:ad:
         4d:f7:99:b0:89:75:ba:1e:a5:14:03:b9:36:ff:52:ff:d9:ed:
         24:02:af:ee:0b:9f:d4:06:9d:67:fd:63:e8:ab:7e:11:0f:79:
         09:79:3d:e3:40:52:e9:1d:85:75:3f:d0:28:64:cb:ee:8d:26:
         e6:5b:7d:8b:db:b4:d8:b9:17:87:d6:77:f0:1a:fe:73:67:3e:
         0b:16:cc:6b:c8:63:04:ce:6e:23:70:f2:07:aa:2e:bb:38:91:
         19:a2:7f:6f:1b:b6:8a:df:45:41:d8:82:9e:60:9d:c8:d5:97:
         1b:f2:75:ed:c3:2b:da:8b:ba:23:d5:d5:cb:d4:a9:0e:cd:7b:
         89:45:6b:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----