Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A9651C4ECEB511F197A38DF2CE1D38B0.roa
File:                     A9651C4ECEB511F197A38DF2CE1D38B0.roa (raw, json)
Hash identifier:          QEcNW0TfJ1CMPd/QXIo4NkwzmGpkInEKtPvkMTjHRTk=
Subject key identifier:   91:A1:0C:46:43:70:86:88:E0:1B:B7:3E:71:01:A1:58:37:21:AB:BD
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EF9E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A9651C4ECEB511F197A38DF2CE1D38B0.roa
Signing time:             Fri 23 Oct 2026 07:45:05 +0000
ROA not before:           Fri 23 Oct 2026 07:45:01 +0000
ROA not after:            Mon 30 Nov 2026 07:45:01 +0000
asID:                     401696
IP address blocks:        154.201.64.0/19 maxlen: 24
                          154.201.94.0/23 maxlen: 24
                          154.201.94.0/24 maxlen: 24 (superfluous maxlen)
                          154.201.95.0/24 maxlen: 24 (superfluous maxlen)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 17 Nov 2026 00:08:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126878 (0x1ef9e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct 23 07:45:01 2026 GMT
            Not After : Nov 30 07:45:01 2026 GMT
        Subject: CN=6adb1081-0e9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:dc:7c:a3:a1:be:32:b4:d5:3f:1b:b8:ac:79:
                    7a:58:06:12:a9:0a:a4:5b:bf:5f:a8:8a:5f:e0:31:
                    c2:82:2f:84:25:50:d5:1a:04:14:09:47:36:4b:92:
                    8f:89:b6:cd:55:a2:e3:7a:db:ba:c8:d8:e7:a1:5f:
                    61:a0:4b:63:d5:7b:7c:91:2c:50:91:ff:d6:31:82:
                    0d:b4:91:00:0f:30:d1:47:a6:af:5a:c9:32:a6:72:
                    eb:42:9c:89:5f:8a:68:6b:3e:b7:5b:23:86:21:db:
                    b9:78:63:52:74:1c:88:c0:e4:c6:67:57:ed:3c:88:
                    69:f6:c3:88:e6:a9:5c:af:53:c7:c3:b3:6e:22:2b:
                    bc:7c:fe:5c:ae:40:43:61:b9:ec:8e:f3:07:c7:22:
                    18:d6:74:05:32:ab:dc:f2:e9:34:df:9f:97:05:37:
                    f6:98:4c:71:8c:22:04:48:0e:51:9a:98:39:62:53:
                    60:19:88:b5:74:52:ec:c8:72:24:39:b4:bf:14:75:
                    5f:81:8d:4d:79:e8:fa:e5:d6:29:17:e6:70:ce:d1:
                    1d:7f:f1:87:0f:92:0f:f1:8a:83:ce:ec:5f:83:16:
                    4d:c3:cb:52:ef:43:82:3d:f1:e6:19:9a:13:6b:b2:
                    c2:79:a5:7a:37:2e:e7:4e:ae:e9:54:6c:04:46:96:
                    6f:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:A1:0C:46:43:70:86:88:E0:1B:B7:3E:71:01:A1:58:37:21:AB:BD
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A9651C4ECEB511F197A38DF2CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.201.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         b2:0a:64:fd:77:33:00:da:f3:72:ae:a5:48:9e:94:ca:39:e8:
         0b:12:60:56:09:22:78:6e:72:bc:73:dd:97:f5:f7:a8:06:10:
         9e:c0:75:0b:a3:d8:7e:eb:13:70:0f:ff:c2:62:5b:15:f7:1d:
         72:c6:f5:1c:c2:71:f0:cd:91:2e:15:7f:58:e4:b9:40:6d:d3:
         ad:fe:65:42:eb:7b:33:e3:03:5f:27:83:10:c1:8b:19:36:73:
         12:1a:8e:b5:a3:8c:8a:cf:2d:a4:56:4a:8f:24:c4:e9:81:4e:
         4f:d8:30:c3:b4:92:fd:7e:ba:06:3e:7f:83:ea:e4:5c:c8:3d:
         1f:b4:34:d7:b9:63:de:7e:f0:04:f9:af:7f:11:f3:9e:51:10:
         61:d4:ce:4d:d0:54:4b:1a:5b:38:bb:c9:72:81:31:d2:8f:3d:
         26:f2:e2:0f:24:b9:f7:b9:5d:b9:01:63:90:ab:20:34:cb:ad:
         6b:25:45:bd:5e:17:3b:82:31:04:a0:8a:14:fe:de:9f:80:aa:
         40:61:f3:46:49:2e:94:e2:dd:b2:f9:3d:d5:9e:89:7d:13:97:
         7b:66:b3:48:11:ea:5e:4b:50:48:14:d5:8d:b9:81:85:3d:74:
         55:78:42:ee:24:d6:f9:41:af:ce:53:5d:eb:23:93:bd:8e:ea:
         57:f1:c8:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----