Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A312F5C2C9AC11F18B5A33C9CE1D38B0.roa
File:                     A312F5C2C9AC11F18B5A33C9CE1D38B0.roa (raw, json)
Hash identifier:          Z0tfgU1WDRyxCIpBpGOChWP515ipo5zw/UdJwetLwcg=
Subject key identifier:   E5:C9:CA:8E:5D:9A:94:3F:D0:2B:F1:58:16:F9:A4:D4:30:66:EE:2C
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EE6E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A312F5C2C9AC11F18B5A33C9CE1D38B0.roa
Signing time:             Fri 16 Oct 2026 21:57:54 +0000
ROA not before:           Fri 16 Oct 2026 21:57:47 +0000
ROA not after:            Tue 24 Nov 2026 21:57:47 +0000
asID:                     212238
IP address blocks:        154.208.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 22 Oct 2026 08:37:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126574 (0x1ee6e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct 16 21:57:47 2026 GMT
            Not After : Nov 24 21:57:47 2026 GMT
        Subject: CN=6ad29de2-14d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:5a:a3:b3:51:4e:49:72:47:9a:29:07:78:bb:
                    7f:a6:6e:e9:89:b2:e4:a6:3e:56:53:af:e1:5b:c9:
                    85:4a:40:1c:29:14:12:dd:de:11:4a:99:d9:74:7e:
                    02:48:7f:c9:63:59:37:96:2b:8f:e4:01:71:2e:4c:
                    c4:92:96:c2:e1:d9:6d:6f:fb:54:f0:b6:b5:fe:4a:
                    89:d7:2a:46:6c:16:cc:d0:ef:b5:72:8f:05:53:a7:
                    2e:e7:11:aa:6f:5b:b0:98:b9:c8:56:32:63:f9:54:
                    ef:9e:1e:eb:89:7c:be:62:bd:16:55:56:e1:d8:38:
                    54:74:d3:6b:65:a9:04:6e:63:25:fc:f2:70:ac:58:
                    22:9c:a5:f4:22:1d:d7:fd:17:4d:20:9e:63:04:b0:
                    d5:df:bc:fe:e4:65:fb:29:5f:40:47:36:81:17:ca:
                    86:ac:eb:4a:1b:7b:ab:a7:09:18:b1:72:1b:86:e0:
                    4e:b8:3f:a7:eb:9c:ef:53:df:9b:d1:f7:ff:e3:0c:
                    37:dc:1e:91:f7:80:4b:87:5a:4f:96:01:a6:ee:2b:
                    a9:04:a8:e4:9b:c4:ab:7d:59:e5:4d:23:f1:f3:e9:
                    93:02:4a:01:2a:29:96:94:3b:e9:30:bb:d3:3f:85:
                    3b:07:ff:3c:57:02:de:eb:e1:69:d5:6f:57:51:b3:
                    df:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:C9:CA:8E:5D:9A:94:3F:D0:2B:F1:58:16:F9:A4:D4:30:66:EE:2C
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A312F5C2C9AC11F18B5A33C9CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.208.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:c0:cc:58:57:d1:c9:68:ae:5b:ee:a3:35:af:65:99:67:d6:
         9d:da:d0:61:d5:4a:93:a2:8e:2e:09:a4:df:4f:d0:65:8e:6a:
         67:f7:86:b7:80:e2:bd:69:4d:20:8e:63:6e:8e:7b:8e:ba:6c:
         be:ea:34:33:cf:aa:69:e0:2d:cd:0c:aa:9c:21:69:e4:4c:14:
         9f:e6:86:94:55:63:87:a3:46:bd:1f:d0:f3:f0:11:30:87:27:
         a0:5b:ce:eb:8a:22:8f:41:29:3f:f1:d2:ef:2c:ca:86:f5:59:
         04:11:bf:45:57:23:c0:6d:66:5a:03:74:f8:42:18:7c:db:35:
         25:26:10:c9:75:97:09:cb:87:e1:97:21:46:26:5e:f7:03:73:
         0a:ee:23:5b:64:28:d6:80:87:9f:66:59:85:67:ae:84:a4:51:
         5d:80:a8:e1:dd:7d:bb:49:4d:be:f4:b6:de:e7:2d:2d:fc:84:
         b6:38:2e:34:0a:5c:67:98:4f:bf:8e:12:83:40:e3:c6:a8:42:
         8f:4f:a1:53:a2:3d:21:89:56:94:e8:27:06:fe:46:53:a4:e4:
         ff:79:9f:9b:58:f7:d5:ec:06:ef:06:a3:e0:3d:b5:88:e9:7c:
         a6:e7:3f:0e:db:69:4e:fc:f7:5b:6e:e7:8d:7d:64:2c:0b:51:
         b3:14:4e:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----