Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DA4B3C1CC86111F1907A9EEECE1D38B0.roa
File:                     DA4B3C1CC86111F1907A9EEECE1D38B0.roa (raw, json)
Hash identifier:          M0VcaunqjjZOX4/fv0/sZyImA0sbW5dyNGjkJvwp0/4=
Subject key identifier:   2D:21:09:71:17:75:BA:00:E5:9D:71:17:E8:9D:CD:C3:F6:3E:FE:F2
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EE11
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DA4B3C1CC86111F1907A9EEECE1D38B0.roa
Signing time:             Thu 15 Oct 2026 06:30:03 +0000
ROA not before:           Thu 15 Oct 2026 06:29:58 +0000
ROA not after:            Thu 19 Nov 2026 06:29:58 +0000
asID:                     6079
IP address blocks:        154.221.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 21 Oct 2026 00:08:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126481 (0x1ee11)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct 15 06:29:58 2026 GMT
            Not After : Nov 19 06:29:58 2026 GMT
        Subject: CN=6ad072eb-11cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:67:46:fc:f8:fe:e3:11:eb:c7:2c:80:73:52:
                    d4:04:26:7e:da:34:a9:3e:7f:06:93:9d:9e:01:35:
                    5e:c4:de:d3:83:f0:67:85:a8:9d:31:c0:ba:09:c9:
                    67:6e:93:e4:be:45:31:75:4e:76:77:76:9c:e7:d5:
                    94:20:e0:99:73:8e:46:75:35:95:80:21:f2:50:2a:
                    19:0b:c3:69:ac:8b:fe:b1:2d:ab:82:63:73:c1:fd:
                    d5:59:22:9a:d6:e9:c1:23:fe:3e:cf:77:25:77:fd:
                    0d:fd:61:b9:6f:1a:fe:a3:11:24:be:b2:cf:88:7e:
                    26:1f:54:fe:07:3b:8d:55:cc:e6:9f:97:a1:e5:c6:
                    b9:42:aa:3d:e1:bf:c2:3d:8d:0c:b6:ae:e6:12:3e:
                    d9:02:d0:b0:56:1a:cf:8e:e2:61:ab:c7:08:2a:3d:
                    a1:98:e3:7b:75:2c:8e:ad:ed:bb:17:c9:1f:62:4e:
                    ab:d7:85:66:db:b0:ba:a7:48:77:d6:2f:34:4a:b9:
                    aa:64:6a:20:a0:fb:a2:ca:9c:4a:d0:f0:e1:0f:13:
                    82:41:c9:02:78:49:d2:4b:b5:54:ad:ee:51:b4:a6:
                    b7:09:0c:c3:1a:d2:cf:f3:49:c4:94:0e:2c:f6:48:
                    cb:c7:c5:14:40:25:8b:c3:69:d3:18:21:d7:d2:6e:
                    ad:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:21:09:71:17:75:BA:00:E5:9D:71:17:E8:9D:CD:C3:F6:3E:FE:F2
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DA4B3C1CC86111F1907A9EEECE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.221.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         9d:34:20:f6:d6:31:0c:a5:6c:e7:6c:a7:15:0f:6f:04:4a:8d:
         7f:3c:4d:bc:85:2d:8c:87:7b:58:b2:6a:38:82:bf:6e:85:15:
         7c:9e:42:5b:c8:c3:46:b1:f8:f5:c8:9c:4a:6d:dd:bd:60:14:
         35:81:a8:d1:f5:34:e4:e5:f5:ef:e1:ed:02:81:d4:d9:1c:17:
         c3:a8:4b:b2:0e:4d:b2:74:44:39:8f:e9:7c:d7:ca:b8:70:a6:
         f6:d0:d7:73:d8:07:f0:3e:e8:b4:ac:3b:c0:0b:cc:b9:bc:54:
         e2:82:67:76:9a:4e:48:85:26:3b:f2:62:18:47:ac:d0:81:a8:
         8c:8b:f6:85:fe:f0:ff:34:d4:39:59:a1:a7:05:bb:86:29:c2:
         88:24:89:85:7e:30:ab:51:e1:b5:0a:98:67:27:00:36:14:a6:
         05:b4:4b:3a:65:98:19:ba:cc:ad:12:22:f1:f0:d8:78:26:b8:
         db:4e:d2:03:ae:3b:75:48:a3:b8:a6:7a:d0:10:0e:55:70:a4:
         34:9b:74:a9:ef:64:01:d2:38:5f:e8:8c:82:d5:31:60:cf:e9:
         be:e8:d6:49:b2:85:90:1b:f6:02:dc:c5:b6:c2:93:1d:36:1c:
         74:71:75:71:f5:1f:c0:bb:e9:16:ec:14:c9:89:94:ee:e5:4b:
         1c:0e:7d:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----