Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/825BD916CDEE11F1ADD808A4CE1D38B0.roa
File:                     825BD916CDEE11F1ADD808A4CE1D38B0.roa (raw, json)
Hash identifier:          uHKf8Ge8CX+U+N99XjUpzhrcQKwy4demJIw8T97PrBc=
Subject key identifier:   F0:FD:89:87:CF:ED:93:6C:7B:84:4B:35:92:FD:DC:E4:02:00:DF:92
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EF7B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/825BD916CDEE11F1ADD808A4CE1D38B0.roa
Signing time:             Thu 22 Oct 2026 07:59:30 +0000
ROA not before:           Thu 22 Oct 2026 07:59:26 +0000
ROA not after:            Thu 19 Nov 2026 07:59:26 +0000
asID:                     150000
IP address blocks:        154.82.159.0/24 maxlen: 24
                          154.82.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 07 Nov 2026 00:08:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126843 (0x1ef7b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct 22 07:59:26 2026 GMT
            Not After : Nov 19 07:59:26 2026 GMT
        Subject: CN=6ad9c262-c30e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:2b:f5:cb:14:0b:8b:b5:eb:fa:3f:03:e9:48:
                    dc:f6:d2:64:a7:5d:25:da:53:fc:47:57:b8:bc:29:
                    51:e5:b6:44:1e:74:ae:59:8a:67:e9:df:4c:94:79:
                    6b:96:da:10:c3:ae:a0:dd:4d:5d:74:48:ad:74:44:
                    e0:3a:2c:9d:51:f6:40:38:ae:44:b7:19:b5:e0:a8:
                    5e:9b:dc:22:98:a4:de:5d:8f:b0:41:16:3f:c4:69:
                    ad:1f:ec:f7:0f:2d:18:b2:30:ca:08:03:b3:08:8a:
                    af:4f:88:ed:cf:a0:e0:a3:38:41:ba:cc:35:e4:ad:
                    51:1d:b8:ff:67:24:23:08:3a:39:f9:97:1a:7e:79:
                    4e:ea:4d:e7:16:c3:d0:2c:2f:64:0b:ae:ce:f1:ab:
                    4b:66:f1:f5:07:de:b2:85:58:d3:fb:77:e0:97:26:
                    fa:28:20:64:9c:94:1c:64:f4:88:26:ef:ad:2c:5f:
                    6b:7f:4e:b6:dc:73:05:fb:32:d7:fa:87:48:c2:c2:
                    4d:03:e3:17:60:8a:04:cc:80:77:95:1c:9f:6d:56:
                    16:ac:ce:91:80:55:22:1e:5e:3f:5a:fb:86:82:e9:
                    6b:fa:ae:c1:81:13:d0:18:e1:e0:16:3e:0c:85:ad:
                    ab:3d:6d:1a:06:a5:6e:22:9a:04:fd:1d:e6:cb:9e:
                    13:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:FD:89:87:CF:ED:93:6C:7B:84:4B:35:92:FD:DC:E4:02:00:DF:92
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/825BD916CDEE11F1ADD808A4CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.82.159.0-154.82.160.255

    Signature Algorithm: sha256WithRSAEncryption
         ae:c8:47:49:26:07:19:b9:7a:16:f2:52:59:98:aa:24:98:9f:
         47:4b:70:45:74:10:b5:90:74:64:73:9d:ae:90:6d:8a:82:8e:
         17:56:67:da:c3:99:0a:94:63:34:15:a0:8a:6a:76:65:67:ea:
         c5:b9:1d:13:51:cc:ad:27:41:a0:09:b4:62:c5:be:7b:08:dd:
         5d:37:4f:7f:f3:9a:49:75:a9:ba:86:fc:5c:6b:de:c2:10:69:
         3b:7e:c0:74:8a:d1:c7:8f:25:47:38:f6:e6:4d:2d:5b:12:a2:
         81:89:c6:c4:81:75:7e:bc:ad:aa:d9:c3:90:a0:b8:b2:4f:81:
         ea:0e:51:b4:33:6a:a4:31:25:cc:2f:99:39:c9:d8:0f:c1:fe:
         4b:cf:fe:e4:32:75:58:fa:53:25:c2:6d:25:ed:51:2a:42:00:
         0e:af:c0:67:2f:78:b1:16:72:14:ed:a4:c4:9d:e7:41:02:13:
         5b:70:89:b9:18:40:df:b9:a1:d8:df:98:83:74:a6:d5:c8:46:
         e7:fe:b2:84:09:64:e7:97:ea:b6:b1:60:2e:57:2d:b6:95:3c:
         a3:81:e8:72:b2:3f:d9:73:ac:b8:cb:46:04:e1:40:33:b4:cb:
         c4:01:b3:cf:0c:3b:a1:a4:5a:72:35:e9:7a:95:b9:50:39:74:
         77:e4:e4:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----