Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A535B244C96711F1B78A4710CF1D38B0.roa
File:                     A535B244C96711F1B78A4710CF1D38B0.roa (raw, json)
Hash identifier:          VcVisj4HzH+lGFhuJ3btP8bwsJls6PC9xLlP1SGWKJg=
Subject key identifier:   75:E3:2E:87:0F:60:CD:98:DE:0D:F9:F3:22:70:2B:81:EB:D5:18:CC
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EE6A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A535B244C96711F1B78A4710CF1D38B0.roa
Signing time:             Fri 16 Oct 2026 13:44:02 +0000
ROA not before:           Fri 16 Oct 2026 13:43:57 +0000
ROA not after:            Mon 23 Nov 2026 13:43:57 +0000
asID:                     200758
IP address blocks:        154.222.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 21 Oct 2026 00:08:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126570 (0x1ee6a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct 16 13:43:57 2026 GMT
            Not After : Nov 23 13:43:57 2026 GMT
        Subject: CN=6ad22a22-93a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ad:a2:89:d6:81:bb:ef:94:33:1a:af:69:59:
                    b1:ad:9c:15:b1:dd:da:2d:08:b7:32:61:8c:c8:24:
                    c6:91:d9:7c:54:e4:9f:6c:eb:94:26:92:d4:64:53:
                    e3:5d:0d:fc:13:d1:f2:41:7a:2a:0e:89:fa:87:de:
                    96:87:2a:71:f5:9f:23:9f:62:1b:65:55:ec:ea:66:
                    df:0f:df:c9:47:43:29:9c:20:90:dc:c8:d9:cc:58:
                    e1:58:bd:47:0c:72:dd:57:79:c1:08:c3:1f:9a:cf:
                    44:52:f1:73:b8:26:20:63:e2:ce:db:7b:25:2a:5e:
                    42:f2:04:36:da:e6:02:17:e8:19:7a:ff:e8:b7:de:
                    53:62:17:b9:b0:6f:39:0f:e6:5c:bd:80:c6:4f:0c:
                    ba:8d:c2:3e:fa:b2:71:86:6f:25:37:f1:ca:5b:c5:
                    df:98:51:44:3f:e6:30:5d:6e:36:f4:9d:41:4d:c2:
                    dd:3f:f4:98:71:b7:56:90:c0:05:5b:77:8f:0a:20:
                    cc:a5:a1:ee:41:ee:26:3f:62:bb:e5:21:db:33:db:
                    a4:b4:9a:eb:cf:9f:d0:c1:c1:a8:bd:f0:1d:57:28:
                    69:02:fc:1f:c9:97:95:2c:43:83:58:0e:66:6a:4f:
                    90:ec:49:8d:27:f2:dc:43:5c:e4:2e:a2:39:37:cc:
                    fd:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:E3:2E:87:0F:60:CD:98:DE:0D:F9:F3:22:70:2B:81:EB:D5:18:CC
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A535B244C96711F1B78A4710CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.222.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:3e:59:2d:bf:29:d2:9e:7d:f4:78:06:8f:60:f8:43:71:07:
         4a:f0:a9:c5:2c:de:19:f5:1a:b5:ef:85:6b:c7:04:4b:2d:e9:
         38:a5:27:f4:78:d8:09:cf:8a:63:01:9b:e2:34:55:dc:da:4b:
         04:89:90:b6:a2:e8:9c:5c:4d:e6:9b:59:d9:28:f1:56:08:22:
         1e:d6:ca:63:0c:29:26:3e:1a:2e:8f:0e:df:80:66:83:42:80:
         aa:c0:b1:07:8b:5b:7f:99:52:0a:33:c9:b4:7f:ab:ee:74:20:
         7c:ea:2c:1b:5f:51:3d:d0:fc:69:3c:11:3a:13:6d:32:1d:22:
         fe:43:12:40:6b:97:26:4e:5f:fd:40:59:a2:d2:64:48:af:db:
         4d:6f:99:d5:20:c3:09:6e:71:30:9c:74:1a:03:6c:49:72:09:
         dc:fb:5a:03:1f:c3:2c:bd:e3:ef:85:3c:51:fb:f9:10:2c:b6:
         bd:b2:cd:ca:e4:8d:05:d4:b5:10:19:3c:28:19:67:3f:ab:46:
         6a:75:fd:0e:34:72:7d:f2:72:6e:d2:f8:ba:b4:0c:74:84:02:
         d3:5a:4c:53:8f:84:f7:2c:85:43:a9:2c:ef:9d:53:9a:b8:bf:
         01:b7:e0:97:77:d3:dc:9e:78:c0:5d:5e:c3:a0:4c:ae:49:1e:
         13:d5:d3:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----