Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8E6E9B52C9FD11F1B997ECEBCE1D38B0.roa
File:                     8E6E9B52C9FD11F1B997ECEBCE1D38B0.roa (raw, json)
Hash identifier:          Xt+/2wVtWqZfMTlA0KjsscV89ETEZNPy4wfmgNuhFdI=
Subject key identifier:   C9:FF:1F:E5:14:A0:A8:50:67:A3:74:B5:C7:6E:55:E5:10:EA:D6:EE
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EE91
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8E6E9B52C9FD11F1B997ECEBCE1D38B0.roa
Signing time:             Sat 17 Oct 2026 07:37:08 +0000
ROA not before:           Sat 17 Oct 2026 07:37:04 +0000
ROA not after:            Tue 24 Nov 2026 07:37:04 +0000
asID:                     40065
IP address blocks:        154.89.160.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 22 Oct 2026 00:07:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126609 (0x1ee91)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct 17 07:37:04 2026 GMT
            Not After : Nov 24 07:37:04 2026 GMT
        Subject: CN=6ad325a4-8090
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:6d:fc:fc:fc:44:2d:d5:66:d0:99:28:f3:8c:
                    dc:1f:47:8f:22:6f:3f:8e:7c:cb:d1:63:cd:01:bc:
                    38:ea:ba:4c:7d:91:03:5d:6e:cc:09:5c:47:dc:c7:
                    c8:a2:7f:82:c2:fc:4e:10:ad:f2:e6:61:4b:3c:d6:
                    99:7f:39:81:61:73:bd:ed:e3:29:7d:fc:ae:32:1b:
                    ce:fd:71:04:f3:4d:b5:e0:25:19:96:b7:23:64:0a:
                    d6:75:99:87:85:45:5e:63:49:42:61:1f:0b:2a:d3:
                    db:5e:69:21:c3:28:e0:37:f5:f3:f3:be:de:b3:3d:
                    32:7c:bc:08:ad:7e:08:53:e4:c6:dd:e6:32:83:6a:
                    ca:3f:71:d1:12:67:88:4b:3f:8e:95:7a:a6:22:53:
                    96:66:0f:32:58:42:8d:59:fd:78:49:e8:52:5b:60:
                    4e:c0:b7:e7:86:ed:ba:09:f8:6f:fe:f4:48:45:2e:
                    b1:09:af:2d:0d:e5:a7:79:6d:93:4c:c7:ef:46:ef:
                    65:7b:af:45:ac:69:1d:77:af:f6:1b:c3:70:b7:d1:
                    73:30:5b:cf:03:e1:47:a2:de:93:43:13:25:66:60:
                    f0:9d:e8:09:04:ae:b3:43:5e:de:96:98:f7:38:96:
                    dc:e2:72:c6:51:e2:f8:88:fe:d6:64:89:f9:df:54:
                    d8:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:FF:1F:E5:14:A0:A8:50:67:A3:74:B5:C7:6E:55:E5:10:EA:D6:EE
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8E6E9B52C9FD11F1B997ECEBCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.89.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         d8:28:b9:c9:e0:56:aa:46:14:eb:12:c4:41:bb:d0:4d:fc:0b:
         ad:f9:90:24:8b:a3:9c:36:fc:4e:c1:1e:10:81:ec:44:03:9c:
         24:82:b6:dd:11:13:c8:91:c3:98:07:12:53:bf:d9:a6:c8:53:
         b2:f3:20:b6:2c:0f:37:8d:58:6f:84:be:ef:b8:1c:e7:31:83:
         56:c9:dd:44:98:2e:28:31:49:aa:78:52:48:67:cc:89:b2:6c:
         2f:a6:5d:de:74:9c:52:a1:01:60:45:fe:98:36:2c:f9:72:10:
         14:89:62:aa:11:0b:aa:2c:32:f9:2e:ce:48:35:13:01:a9:78:
         35:96:e5:c2:ff:08:15:26:39:32:bd:e2:a7:43:6e:04:55:39:
         45:16:c2:ea:a6:78:70:ff:18:10:68:b9:12:04:e2:cc:ba:84:
         89:3b:6d:c3:ca:16:1e:cf:e0:81:c7:03:44:a2:73:ff:cd:47:
         f7:91:2c:fa:fa:b0:bf:70:7a:49:e5:2b:cb:fa:18:b3:8f:ca:
         2b:d5:d9:64:b6:9f:32:ee:07:8a:b5:7e:54:5d:ce:28:60:2e:
         9a:a1:bc:dd:ce:99:9c:ff:13:49:23:f9:c8:60:c6:b2:fc:c6:
         23:82:5f:37:6d:f9:45:99:53:a9:a9:82:22:ee:95:2b:40:fa:
         2c:db:84:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----