Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DBBED4C8C93311F1B15461C8CE1D38B0.roa
File:                     DBBED4C8C93311F1B15461C8CE1D38B0.roa (raw, json)
Hash identifier:          sibw8zDmp7+NVZrzpPu2K07zOjnklopuYu9znxM5FBs=
Subject key identifier:   65:D0:9B:47:BD:B2:65:85:C3:FE:7B:24:91:E4:BD:A5:9D:A1:ED:2E
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EE50
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DBBED4C8C93311F1B15461C8CE1D38B0.roa
Signing time:             Fri 16 Oct 2026 07:33:19 +0000
ROA not before:           Fri 16 Oct 2026 07:33:15 +0000
ROA not after:            Mon 23 Nov 2026 07:33:15 +0000
asID:                     215224
IP address blocks:        154.83.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 21 Oct 2026 00:08:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126544 (0x1ee50)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct 16 07:33:15 2026 GMT
            Not After : Nov 23 07:33:15 2026 GMT
        Subject: CN=6ad1d33f-1fcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:fd:df:5f:60:52:41:5d:ef:9c:4a:5d:24:dc:
                    d2:a6:86:0d:22:a3:cc:11:fb:56:27:00:8a:16:06:
                    f2:ea:31:1d:ba:d7:38:4c:75:d9:9f:67:5a:ee:b6:
                    e4:29:0d:b2:fd:36:96:81:15:1a:37:9b:47:c6:12:
                    84:88:e1:cf:3e:65:48:22:14:bf:d1:3a:bb:11:62:
                    a0:0f:5f:9b:de:46:05:56:e1:30:cc:46:81:5a:db:
                    5b:5a:d3:7c:7f:d6:25:bd:fa:a1:b9:52:c3:cf:46:
                    bd:8b:5d:90:d8:e9:de:df:f9:d9:3a:5d:7c:f5:5f:
                    86:36:20:d2:52:40:88:0e:93:c2:d0:f0:5c:68:e6:
                    90:6d:12:49:19:aa:aa:8b:28:8b:ee:e6:12:13:51:
                    f1:b8:5c:d7:99:c9:f8:0f:62:e7:54:0a:df:6b:1e:
                    82:38:4f:a0:c5:36:ef:e1:56:29:39:a1:db:ea:2d:
                    32:42:9b:ce:60:86:88:0d:c2:84:43:94:d9:af:77:
                    d2:70:83:31:8a:b7:01:09:94:f9:c8:96:43:59:bf:
                    09:66:b2:91:f2:1d:7e:87:9e:cd:2d:8b:5d:e5:ed:
                    60:07:71:54:bb:9e:0b:e6:e5:f0:e4:bf:9b:a8:c3:
                    48:b5:32:42:5e:0f:ff:fc:e7:dd:48:1b:c2:79:1a:
                    ae:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:D0:9B:47:BD:B2:65:85:C3:FE:7B:24:91:E4:BD:A5:9D:A1:ED:2E
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DBBED4C8C93311F1B15461C8CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.83.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:40:6d:e8:f5:98:72:96:14:de:46:96:fb:eb:fb:7e:5e:1a:
         b7:31:18:da:5a:70:58:6b:34:c2:22:1a:28:93:f7:c4:56:e4:
         f4:71:d0:40:e7:6d:d2:33:c1:80:54:d3:e0:ae:34:11:8f:73:
         51:a3:60:7e:ae:c7:e8:f3:ae:2b:9d:d5:df:99:ef:07:a6:62:
         2b:19:3f:6f:61:9b:17:ab:3a:9a:3d:e2:9b:6f:b7:98:fa:76:
         17:d5:5c:7c:50:91:7d:22:c6:25:aa:f2:b0:e8:b2:00:b5:f7:
         ed:f5:b3:a8:34:a8:e8:02:1a:1b:30:84:49:2a:c6:ad:e0:a9:
         79:50:54:52:59:78:a1:94:b9:09:20:9e:ac:2e:49:65:03:f6:
         b3:d4:9f:50:e4:f1:3a:48:4d:00:04:33:59:40:9b:c5:67:02:
         92:a4:b6:14:a6:59:07:e9:3b:fd:ae:69:f9:92:23:18:2c:af:
         82:a5:52:a3:b2:4b:a6:92:f9:76:50:5b:aa:f6:84:7b:1a:99:
         c5:1f:9d:9a:36:46:1a:d3:d1:1f:90:bd:64:45:8c:a6:17:68:
         9b:2d:15:81:64:9d:df:d6:18:28:c9:fc:18:d4:31:02:af:40:
         d1:77:02:9a:6e:cb:1f:92:3c:bf:1a:ec:26:93:36:8a:94:d0:
         fe:ca:a5:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----