Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DEB561FCC9F511F198E618BBCE1D38B0.roa
File:                     DEB561FCC9F511F198E618BBCE1D38B0.roa (raw, json)
Hash identifier:          UXzF0tEYg5VezIdwrWuz0vGrP9xu3X9aqPznYZ0g+fs=
Subject key identifier:   A0:45:91:89:00:74:12:A5:2F:82:66:72:57:54:AB:E6:0A:37:E5:32
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EE81
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DEB561FCC9F511F198E618BBCE1D38B0.roa
Signing time:             Sat 17 Oct 2026 06:42:07 +0000
ROA not before:           Sat 17 Oct 2026 06:42:01 +0000
ROA not after:            Tue 24 Nov 2026 06:42:01 +0000
asID:                     18013
IP address blocks:        154.89.144.0/20 maxlen: 24
                          154.89.160.0/19 maxlen: 24
                          154.95.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 22 Oct 2026 08:37:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126593 (0x1ee81)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct 17 06:42:01 2026 GMT
            Not After : Nov 24 06:42:01 2026 GMT
        Subject: CN=6ad318bf-b7b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:ea:1a:35:09:d7:4c:8d:e2:d6:52:48:e1:06:
                    f4:35:b8:8e:8f:97:1a:27:11:34:11:14:2c:3d:46:
                    45:66:d1:be:01:c6:d7:d3:52:42:df:0b:c8:c6:b6:
                    20:b0:fc:af:e6:64:5e:34:dd:05:29:ea:da:6c:4e:
                    03:23:33:d4:4e:8d:38:eb:d3:7a:c4:ea:d5:92:b2:
                    40:4b:a5:3c:ea:00:5b:77:69:ae:40:01:99:0c:1b:
                    04:6e:1d:97:b8:a9:36:4a:a8:fa:4e:72:04:2c:9a:
                    c7:83:c0:7e:66:1d:05:e6:d2:7b:83:e5:f0:6e:75:
                    35:44:1d:5f:13:b0:5a:1b:0d:4a:de:37:ae:4b:52:
                    2b:68:f6:dc:9c:df:09:ec:56:ef:72:2d:14:c9:b9:
                    7b:0f:fa:00:af:de:52:4c:05:c0:e6:86:a4:a4:e6:
                    cb:05:39:85:0e:28:8a:8f:c7:03:69:57:49:0f:9a:
                    04:95:2e:a7:49:44:bf:41:6c:d2:82:1c:08:92:40:
                    a9:d2:a9:60:cf:8a:2a:1a:6b:d1:b2:aa:4a:ad:27:
                    9e:ac:4f:45:ce:69:31:a7:5c:79:3c:ab:46:46:91:
                    d5:42:2e:db:35:0b:73:f6:cd:2c:6c:1f:44:e4:82:
                    d5:10:8b:cb:e7:05:a5:b4:46:74:12:7b:84:26:52:
                    56:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:45:91:89:00:74:12:A5:2F:82:66:72:57:54:AB:E6:0A:37:E5:32
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DEB561FCC9F511F198E618BBCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.89.144.0-154.89.191.255
                  154.95.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:23:b0:6d:0a:6b:7d:1d:d2:61:12:26:b8:96:e6:85:0a:03:
         b6:4d:3d:0b:e9:fd:1c:14:99:3a:35:1c:48:fd:b1:0c:94:51:
         1b:16:84:e1:ec:86:27:c5:35:3c:cc:df:91:4b:bc:ea:b8:8b:
         e7:be:a6:3d:06:08:4a:57:80:04:29:cf:c1:fa:79:14:8f:0b:
         cd:8b:3c:39:19:ae:09:64:0c:74:20:1b:11:5f:38:d6:05:c1:
         11:dd:c0:e5:48:6c:0a:46:19:d3:6c:0f:b1:af:03:4e:c2:4a:
         ea:0d:85:6d:68:b8:35:99:f8:18:b9:85:d3:eb:8a:4e:34:49:
         e3:5a:5a:7a:fa:18:46:a8:eb:f2:b3:5c:9b:9a:01:02:43:0d:
         2b:68:6e:83:87:86:5c:52:d6:05:ef:3b:da:7e:8b:e1:0d:96:
         ef:bc:1c:93:27:88:93:3f:ff:2e:22:55:08:b0:eb:59:9c:e5:
         63:f3:e1:59:62:7b:9b:0a:a5:e8:80:18:c8:b9:b3:59:60:7a:
         89:5f:4f:7e:45:c1:02:f5:6f:87:bd:b1:fe:8a:22:33:d8:08:
         72:d9:a2:36:c7:e0:60:4c:fc:ae:4e:95:ac:e7:36:6e:a4:eb:
         cf:8f:2a:95:88:11:45:60:f9:f8:4f:a7:7b:61:ca:03:24:d4:
         5e:dc:f6:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----