Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C6EBB2D6C86711F1A7E0DB13CF1D38B0.roa
File:                     C6EBB2D6C86711F1A7E0DB13CF1D38B0.roa (raw, json)
Hash identifier:          kjY4MdBogKuNajbNjsardmMsdKrHlsaECW3JLL8P6q8=
Subject key identifier:   28:6F:BE:CD:6C:5F:79:A1:83:12:22:A5:6B:3B:9E:78:5B:BF:53:0A
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EE17
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C6EBB2D6C86711F1A7E0DB13CF1D38B0.roa
Signing time:             Thu 15 Oct 2026 07:12:27 +0000
ROA not before:           Thu 15 Oct 2026 07:12:23 +0000
ROA not after:            Tue 24 Nov 2026 07:12:23 +0000
asID:                     214413
IP address blocks:        154.82.0.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 21 Oct 2026 00:08:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126487 (0x1ee17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct 15 07:12:23 2026 GMT
            Not After : Nov 24 07:12:23 2026 GMT
        Subject: CN=6ad07cdb-afc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:75:77:2d:32:7a:62:b8:b5:ac:58:b8:9e:27:
                    38:03:b3:3f:d7:93:10:a5:73:0f:ac:f5:74:d1:f5:
                    47:4a:f2:5b:1e:5c:ac:d9:f6:f2:2f:df:d3:23:f8:
                    61:17:d8:55:ee:ee:18:97:50:55:f7:d9:62:83:e7:
                    a4:b0:50:9c:1a:62:68:30:8a:bd:31:20:8d:34:d9:
                    00:d8:06:ea:19:ba:f3:ce:cf:e9:e1:2c:12:3d:21:
                    3f:0e:5f:f0:54:6e:be:f9:3a:f3:f8:db:8e:44:e4:
                    58:94:17:01:4c:6e:b1:3c:54:5b:4f:c1:d2:4c:52:
                    f4:ff:c1:dd:24:d6:42:85:68:ed:3d:9b:a5:de:85:
                    32:a8:3e:26:16:5d:aa:05:c6:2a:3b:a5:01:e0:1a:
                    3e:f2:de:f8:12:85:02:24:da:ec:d3:06:9f:93:2f:
                    b1:0a:32:cd:d0:19:a8:c1:61:3c:55:b5:80:50:7a:
                    e6:91:1e:98:4b:aa:d6:93:43:e6:82:cf:62:b4:60:
                    e0:80:44:78:25:26:96:4c:7a:39:87:b5:c7:f1:16:
                    2c:7a:ff:59:89:19:be:9f:db:d8:01:9b:c0:b0:5a:
                    e5:6b:75:9e:93:55:cc:1d:e6:0d:9d:a1:b5:8a:9f:
                    15:00:b3:1e:5d:a5:de:7a:1a:ad:02:4e:9e:31:9c:
                    c2:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:6F:BE:CD:6C:5F:79:A1:83:12:22:A5:6B:3B:9E:78:5B:BF:53:0A
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C6EBB2D6C86711F1A7E0DB13CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.82.0.0/23

    Signature Algorithm: sha256WithRSAEncryption
         cf:97:ae:b1:4c:42:b0:c8:33:1b:ed:8f:a0:2a:d3:1b:06:5a:
         b2:71:e5:dc:71:cc:a3:25:d3:58:65:bb:75:f9:89:6e:11:5f:
         3a:23:15:8b:2e:64:51:3c:00:41:93:5e:72:6a:4a:2e:b6:26:
         88:e7:1f:7a:df:1d:ec:ce:fd:21:5b:64:be:dc:52:65:9c:0b:
         54:ee:b6:a3:26:f6:9f:a7:e9:f9:1c:94:b6:f1:fd:32:b8:5a:
         8b:de:1e:2e:3c:21:6c:f2:e7:b9:a9:2f:26:9b:d6:96:47:05:
         05:87:18:58:64:92:43:17:a1:fd:ec:fe:a7:97:8a:1a:f9:8d:
         0c:6b:50:ba:0b:49:f9:80:c0:bd:44:59:49:b9:e1:db:20:4c:
         71:02:8d:6f:c6:6c:2a:4e:ad:f7:74:42:33:bc:ec:c8:b9:51:
         a1:de:bf:ed:c6:94:5c:9c:d7:4c:e8:01:dd:c1:5c:5c:ce:45:
         ac:cc:15:91:a8:f5:03:f4:22:74:fc:fc:33:a9:79:c8:03:70:
         c2:19:01:17:5a:ee:d0:d7:40:35:51:be:6b:b2:f2:69:1a:8f:
         ee:1a:55:84:07:0a:ec:2f:ad:f0:3d:38:6a:b2:29:97:1b:44:
         b2:0e:91:3e:b4:44:18:cf:48:51:85:38:18:d5:9f:16:7f:5f:
         1d:81:f1:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----